<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">This is why we talk about new design. Exactly for this reason.<div><br></div><div>Just disable TCP in the server configuration, no xSER variant can work reliable with TCP today because of the blocking design.</div><div><br></div><div>Adrian</div><div><br><div><br><div><div>On Jan 12, 2009, at 6:50 PM, Iņaki Baz Castillo wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>2009/1/12 Adrian Georgescu <<a href="mailto:ag@ag-projects.com">ag@ag-projects.com</a>>:<br><blockquote type="cite">Use UDP transport, it works reliable.<br></blockquote><br>Ops, does it mean that UDP is more suitable in a SIP proxy/server than TCP?<br>I really would like SIP to migrate to TCP asap.<br><br>So, if OpenSIPS tries to do a TCP connection and it takes some time<br>(some seconds) until a timeout occurs, then that process is unable to<br>handle other SIP requests. an attacker could send just 100 SIP request<br>with ";transport=TCP" in the RURI and a RURI host which drops the TCP<br>connections.<br>This would cause all the OpenSIPS TCP processes being blocked !! is it?<br><br><br>-- <br>Iņaki Baz Castillo<br><<a href="mailto:ibc@aliax.net">ibc@aliax.net</a>><br>_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br></div></blockquote></div><br></div></div></body></html>