<div><div dir="auto">Hello,</div><div dir="auto"><br></div><div dir="auto">I have never run into those problems. The people I’ve seen running into them are doing thousands upon thousands of packets por seconds. Hardware is cheap nowadays, I just spread the load.</div><div dir="auto"><br></div><div dir="auto">I wouldn’t dockerize rtpengine, although I know people who do. </div><div dir="auto"><br></div><div dir="auto">In a normal setup probably you won’t run into them, we run freeswitch on containers for production without a hitch (I must stress I was very reluctant to do that a few years ago, but docker has come a long way since then).</div><div dir="auto"><br></div><div dir="auto">David</div></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, 2 May 2020 at 12:42, H Yavari <<a href="mailto:hyavari@rocketmail.com">hyavari@rocketmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"></div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Thank you David.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">What do you think about networking concerns? you mentioned to them but I didn't get your point.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">RTP restrictions, port proxy, iptables, fail2ban are top ones.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">PS: No matter which telephony platform (Asterisk/FS/OpenSIPS/Kamailio), these concerns are in general.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">PS: We have more challenges with projects like Freepbx.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">HY<br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div>
</div></div><div><div id="m_-2598378691510798310ydpb69ea7dayahoo_quoted_9398985634">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;color:rgb(38,40,42)">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
On Saturday, May 2, 2020, 3:48:11 PM GMT+4:30, David Villasmil <<a href="mailto:david.villasmil.work@gmail.com" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">david.villasmil.work@gmail.com</a>> wrote:
</div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Not sure about OpenSIPS specifically, but I would assume it has been implemented in docker just as much as kamailio and freeSWITCH/Asterisk.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">This is done all over the world. Docker is not an emulator or a virtual machine host. When you run something on docker, its speed is (almost) exactly the same as running it on the host itself, since there’s no OS overhead, it works by separating processes via Cgroups, no by virtualizing or emulating hardware.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Quote:</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">The Docker technology uses the </span><a shape="rect" href="https://www.redhat.com/en/topics/linux/what-is-the-linux-kernel" style="text-decoration-line:none;text-decoration-style:solid;text-decoration-color:currentcolor;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204)" rel="nofollow" target="_blank">Linux kernel</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)"> and features of the kernel, like </span><a shape="rect" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Resource_Management_Guide/ch01.html" style="text-decoration-line:none;text-decoration-style:solid;text-decoration-color:currentcolor;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204)" rel="nofollow" target="_blank">Cgroups</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)"> and </span><a shape="rect" href="https://lwn.net/Articles/528078/" style="text-decoration-line:none;text-decoration-style:solid;text-decoration-color:currentcolor;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204)" rel="nofollow" target="_blank">namespaces</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">, to segregate processes so they can run independently. This independence is the intention of containers‐the ability to run multiple processes and apps separately from one another to make better use of your infrastructure while </span><a shape="rect" href="https://www.redhat.com/en/topics/security" style="text-decoration-line:none;text-decoration-style:solid;text-decoration-color:currentcolor;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204)" rel="nofollow" target="_blank">retaining the security</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">you would have with separate systems.</span><br clear="none"></div></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">So in simple terms, docker simply separates processes.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">There ARE, nonetheless, some problems with dockerizing everything. I have read issues like If the network traffic is way way way too high, you may encounter issues like dropped packets, etc. but this is a problem on the networking side, I.e: the iptables rules. Also the natting related to using docker can be cumbersome, but once you’re over that, it’s home free. </div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">So, as long as you manage your infrastructure well, you shouldn’t have problems.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">In terms of troubleshooting a failing container. All logging should be sent to some log server, and you can do your troubleshooting there. Also, don’t kill a failing container so you can access it (via ssh or attach or exec) and troubleshoot it.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">The pros of using docker/k8s greatly outweighs the cons, in my opinion.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Hope this help.</div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">David</div><br clear="none"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">On Sat, 2 May 2020 at 11:33, H Yavari via Users <<a shape="rect" href="mailto:users@lists.opensips.org" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">users@lists.opensips.org</a>> wrote:<br clear="none"></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;border-left-color:rgb(204,204,204)"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"></div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Thank you Johan,</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">When your infrastructure goes to run with k8s or other same platforms, it's hard to make some exceptions.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Also softwares like opensips that are working just with DB, can run very smoothly. <br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Although I haven't seen any problem yet after moving it to containers, but I am interested in hearing from others and developers team.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">HY<br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">--------<br clear="none"></div>
</div></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616m_3211529236503319823ydpa5d46026yahoo_quoted_9395098427" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
On Saturday, May 2, 2020, 12:51:51 PM GMT+4:30, johan <<a shape="rect" href="mailto:johan@democon.be" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">johan@democon.be</a>> wrote:
</div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616m_3211529236503319823ydpa5d46026yiv4517330760" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">First of all, I am not aware of a production kubernetes cluster.
<br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Using containers has advantages : fast install, easy to move.
The annoying thing is that if it goes wrong, it is not easy to
troubleshoot. Secondly, you add an extra abstraction layer,
abstraction (most of the time) reduces speed and decreases
capacity. <br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">In short : it all depends on the size of your system. In ip4 I
don't see the advantage. What could be a nice scalable system, is
to deploy on ip6 with anycast. <br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Just my thoughts ... <br clear="none">
</p>
<div id="m_-2598378691510798310ydpb69ea7dayiv2354514616m_3211529236503319823ydpa5d46026yiv4517330760yqt12388" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">On 2/05/2020 07:49, H Yavari via Users
wrote:<br clear="none">
</div>
<blockquote type="cite" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
</blockquote></div></div><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616m_3211529236503319823ydpa5d46026yiv4517330760yqt28477" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Hi to all,</div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">As you know docker and K8s,
are growing quickly. So we dockerized Asterisk and OpenSIPS
also.<br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">But I see some community
members are against it. They have some reasons like NAT, RTP
ports and performance.</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Do you agree with them ? <br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Is there any successful large
scale OpenSIPS cluster based on K8s ?</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Thanks for sharing your
experiences.</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">HY<br clear="none">
</div>
</div>
<br clear="none">
<fieldset style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"></fieldset>
<pre style="font-family:monospace">_______________________________________________
Users mailing list
<a shape="rect" href="mailto:Users@lists.opensips.org" style="font-family:monospace" rel="nofollow" target="_blank">Users@lists.opensips.org</a>
<a shape="rect" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" style="font-family:monospace" rel="nofollow" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</div></div></div><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616m_3211529236503319823ydpa5d46026yqt83325" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">_______________________________________________<br clear="none">Users mailing list<br clear="none"><a shape="rect" href="mailto:Users@lists.opensips.org" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Users@lists.opensips.org</a><br clear="none"><a shape="rect" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br clear="none"></div></div>
</div>
</div></div>_______________________________________________<br clear="none">
Users mailing list<br clear="none">
<a shape="rect" href="mailto:Users@lists.opensips.org" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Users@lists.opensips.org</a><br clear="none">
<a shape="rect" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616yqtfd17272" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div></blockquote></div></div><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616yqtfd94967" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">-- <br clear="none"></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div id="m_-2598378691510798310ydpb69ea7dayiv2354514616yqtfd34880" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none"></div>David Villasmil<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">email: <a shape="rect" href="mailto:david.villasmil.work@gmail.com" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">david.villasmil.work@gmail.com</a></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">phone: +34669448337</div></div></div></div></div></div>
</div>
</div></div></blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Regards,</div><div><br></div>David Villasmil<div>email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a></div><div>phone: +34669448337</div></div></div>