<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix"><tt>Hello Schneur,<br>
<br>
1) If REGISTER request replication properly works (same messages
received on both sides), then the backup should not delete
contacts like you are mentioning.<br>
2) Yes, it will. You can disable this behaviour with
"skip_replicated_db_ops" [1]<br>
3) Any specific ERRORs in the logfile? Please open a GitHub
ticket for any obvious issues [2]<br>
4) Only integrity checking. But that can be bypassed by a
potential attacker. Immediate solutions are the use of private
interfaces and/or iptables rules.<br>
5) Yes, replication is only to be used with floating IPs.
Regarding the distributed redundant setup, a big discussion was
started in 2013, yet did not really come to a final conclusion
[3]<br>
<br>
[1]:
<a class="moz-txt-link-freetext" href="http://www.opensips.org/html/docs/modules/2.1.x/usrloc.html#skip_replicated_db_ops">http://www.opensips.org/html/docs/modules/2.1.x/usrloc.html#skip_replicated_db_ops</a><br>
[2]: <a class="moz-txt-link-freetext" href="https://github.com/OpenSIPS/opensips/issues">https://github.com/OpenSIPS/opensips/issues</a><br>
[3]: <a class="moz-txt-link-freetext" href="http://opensips.org/pipermail/users/2013-April/025204.html">http://opensips.org/pipermail/users/2013-April/025204.html</a><br>
<br>
Best regards,<br>
</tt>
<pre class="moz-signature" cols="72">Liviu Chircu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
On 18.02.2015 12:19, Schneur Rosenberg wrote:<br>
</div>
<blockquote
cite="mid:CANvjR0VNRzO46H+QirhUAd9xcdQNaELxMXcF35d6UegkGpGs-A@mail.gmail.com"
type="cite">
<div dir="ltr">I have a question regarding binary replication, I
was using OpenSIPS 1.7 until now, my backup was passive, because
when they were all up at the same time, the usrloc timer from
the backup kept on removing users from the database, even though
I'm using mode 2, I still rely on the DB for some actions, I
recently watched <span style="color:rgb(0,0,0)">Vlad Paiu video
presentation on Binary Interface replication and he says that
he advises to leave the backup open too, so I built 2 test
servers with OpenSIPS 1.11 and I have a few questions.</span>
<div><span style="color:rgb(0,0,0)"><br>
</span></div>
<div><span style="color:rgb(0,0,0)">1) will this solve the issue
of the usrloc timer deleting records?</span></div>
<div><font color="#000000">2) will it also update the backups
database if I use mode 2? this way I dont need to replicate
the db's, i will have 2 separate db's and have each server
update its own db, if it does this will also solve problem
1.</font></div>
<div><font color="#000000">3) I tested the bin replication, when
doing a ngrep I see the packet coming in on the backup when
a new user registers, but when doing a "opensipsctl ul show"
it only shows the contact line and nothing else and it
disappears </font><span style="color:rgb(0,0,0)">completely</span><span
style="color:rgb(0,0,0)"> </span><span
style="color:rgb(0,0,0)"> after a few moments and it does
not update the db.</span></div>
<div><font color="#000000">4) Does it have a built in
security mechanism besides manually doing it with iptables?</font></div>
<div><font color="#000000">5) It seems like this is mainly used
with a floating ip, I have servers on the same network using
floating ip, I also have servers on different networks using
failover dns, how will it affect my redundancy, I assume the
backup server wont be able to reach the client before the
client does a new DNS lookup and re registers, because the
clients NAT wont allow it through, is that correct? and is
there a solution for that?</font></div>
<div><font color="#000000"><br>
</font></div>
<div><font color="#000000">thanks in advance</font></div>
<div><font color="#000000">S. Rosenberg </font></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>