[OpenSIPS-Users] Load balancer and Access control list

[Peter P GMX]

I tried this, but Freeswitch doesn't condider the SIP header here. In
the ACL it uses the real IP the request comes from.

Alex Massover schrieb:
>> Do you have a hint how to do that?
>>     
> [Alex]
>
> append_hf("X-Original-IP: $si\r\n");
>
> something like this.
>
> BR,
> Alex.
>
>   
>> Best regards
>> Peter
>>
>> Bogdan-Andrei Iancu schrieb:
>>     
>>> Hi Peter,
>>>
>>> Interesting - the LB was not designed to work via 3xx redirect model,
>>> even so, with some changes, it is possible to do it.
>>>
>>> On the other side, can you trick FS to look for the IP (used for
>>>       
>> ACLs)
>>     
>>> somewhere else than the net level (src IP) ? maybe you can configure
>>>       
>> LB
>>     
>>> to put the original SRC IP into a SIP header into the request.
>>>
>>> Regards,
>>> Bogdan
>>>
>>> Peter P GMX wrote:
>>>
>>>       
>>>> Hello,
>>>>
>>>> I am using OpenSIPS as a load balancer in front of Freeswitch by
>>>>         
>> using
>>     
>>>> the load balancer module.
>>>> Scenario: All phones are registered at Freeswitch. Some gateways
>>>>         
>> provide
>>     
>>>> calls via registered accounts  and some external gateways are
>>>>         
>> accepted
>>     
>>>> by their IPs (access control list, ACL).
>>>>
>>>> When using OpenSIPS in front of Freeswitch I am losing the ACL
>>>>         
>> feature
>>     
>>>> for some external gateways, as from Freeswitch's perpective all
>>>>         
>> calls
>>     
>>>> are now coming from OpenSIPS.
>>>>
>>>> Does anybody know how to solve this ACL problem? Is there a way load
>>>> balance by redirecting invites (302 Moved temporarily) to
>>>>         
>> Freeswitch?
>>     
>>>> Then the gateway will contact Freeswitch directly and ACLs will
>>>>         
>> still apply.
>>     
>>>> So is there any load balancing feature in OpenSIPS which uses
>>>>         
>> redirects
>>     
>>>> or do I have to implement it by myself? E.g. by a perl script which
>>>> changes the redirect IP on every request (e.g. round robin).
>>>>
>>>> Best regards
>>>> Peter
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at lists.opensips.org
>>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>>
>>>>
>>>>
>>>>         
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.opensips.org
>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>>
>>>       
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>> This mail was received via Mail-SeCure System.
>>
>>     
>
>
> This mail was sent via Mail-SeCure System.
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>