[OpenSIPS-Users] Load balancer and Access control list

[Bogdan-Andrei Iancu]

Peter,

You can add a header with whatever name, depends more on FS what kind of 
header is able to use to take the src IP from.

Regards,
Bogdan

Peter P GMX wrote:
> I tried this, but Freeswitch doesn't condider the SIP header here. In
> the ACL it uses the real IP the request comes from.
>
> Alex Massover schrieb:
>   
>>> Do you have a hint how to do that?
>>>     
>>>       
>> [Alex]
>>
>> append_hf("X-Original-IP: $si\r\n");
>>
>> something like this.
>>
>> BR,
>> Alex.
>>
>>   
>>     
>>> Best regards
>>> Peter
>>>
>>> Bogdan-Andrei Iancu schrieb:
>>>     
>>>       
>>>> Hi Peter,
>>>>
>>>> Interesting - the LB was not designed to work via 3xx redirect model,
>>>> even so, with some changes, it is possible to do it.
>>>>
>>>> On the other side, can you trick FS to look for the IP (used for
>>>>       
>>>>         
>>> ACLs)
>>>     
>>>       
>>>> somewhere else than the net level (src IP) ? maybe you can configure
>>>>       
>>>>         
>>> LB
>>>     
>>>       
>>>> to put the original SRC IP into a SIP header into the request.
>>>>
>>>> Regards,
>>>> Bogdan
>>>>
>>>> Peter P GMX wrote:
>>>>
>>>>       
>>>>         
>>>>> Hello,
>>>>>
>>>>> I am using OpenSIPS as a load balancer in front of Freeswitch by
>>>>>         
>>>>>           
>>> using
>>>     
>>>       
>>>>> the load balancer module.
>>>>> Scenario: All phones are registered at Freeswitch. Some gateways
>>>>>         
>>>>>           
>>> provide
>>>     
>>>       
>>>>> calls via registered accounts  and some external gateways are
>>>>>         
>>>>>           
>>> accepted
>>>     
>>>       
>>>>> by their IPs (access control list, ACL).
>>>>>
>>>>> When using OpenSIPS in front of Freeswitch I am losing the ACL
>>>>>         
>>>>>           
>>> feature
>>>     
>>>       
>>>>> for some external gateways, as from Freeswitch's perpective all
>>>>>         
>>>>>           
>>> calls
>>>     
>>>       
>>>>> are now coming from OpenSIPS.
>>>>>
>>>>> Does anybody know how to solve this ACL problem? Is there a way load
>>>>> balance by redirecting invites (302 Moved temporarily) to
>>>>>         
>>>>>           
>>> Freeswitch?
>>>     
>>>       
>>>>> Then the gateway will contact Freeswitch directly and ACLs will
>>>>>         
>>>>>           
>>> still apply.
>>>     
>>>       
>>>>> So is there any load balancing feature in OpenSIPS which uses
>>>>>         
>>>>>           
>>> redirects
>>>     
>>>       
>>>>> or do I have to implement it by myself? E.g. by a perl script which
>>>>> changes the redirect IP on every request (e.g. round robin).
>>>>>
>>>>> Best regards
>>>>> Peter
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users at lists.opensips.org
>>>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>>>
>>>>>
>>>>>
>>>>>         
>>>>>           
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at lists.opensips.org
>>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>>
>>>>
>>>>       
>>>>         
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.opensips.org
>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>> This mail was received via Mail-SeCure System.
>>>
>>>     
>>>       
>> This mail was sent via Mail-SeCure System.
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>   
>>     
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>