[OpenSIPS-Users] [OpenSIPS Security Alerts] [FIX] [Severity Medium] Fail to restore LB state on restart

[Bogdan-Andrei Iancu]

This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
http://www.opensips.org/Resources/AlertsMain
*
SVN commit*:
http://opensips.svn.sourceforge.net/opensips/?rev=9177&view=rev

*Severity*: Medium

*Version*  : all

*Affected modules*  : Load-Balancer module

*Effect*  : Loosing load on destination after a restart

*Affected scenarios*: If loading (as module) the Dialog module before the Load-Balancer module, during an OpenSIPS restart,
the active load (number of ongoing calls) on the LB destinations will not be restored, but simply set to 0 for all
destinations and resources. This will break the load balancing alg, as OpenSIPS LB will do not "know" the calls established
prior to restart.
Nevertheless, the system will recover in time and start behaving normally once the inherited calls (established before the
restart) are terminated.

*Description:*  The actual problem resides in the dialog module which was not able to properly restore the profile information
for the call loaded from DB at startup time. The interaction between the Dialog and LB module is a bit particular, as the
LB module creates (as init time) dynamic dialog profiles (according to destinations and resources). So, if the Dialog module
is loaded first, it will not know the dialog profiles required by LB, so it will not be able to restore the dialog context.

*Risks*  : have more load on destinations than configured (as upper limit), but limited to a restart event

*Update*  :
- if you have an SVN checkout, 1.7, 1.8 and trunk were fixed; so update to a revision later than 9177 (trunk),
   9178 (1.8 branch) or 9179 (1.7 branch).
- if you have OpenSIPS from sources see the attached patch;
- if using tarballs, they were already regenerated (and include the fix). Available only for 1.8.
- If using the official Debian package (apt.opensips.org), they are also re-generated including the fix
   (available for 1.8 and trunk).


-- 
Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20120823/d3b5431c/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: restore_lb_profiles-9177.patch
Type: text/x-patch
Size: 1246 bytes
Desc: not available
URL: <http://lists.opensips.org/pipermail/users/attachments/20120823/d3b5431c/attachment.bin>
-------------- next part --------------
_______________________________________________
Alerts mailing list
Alerts at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/alerts