Completesbc Handbook Release 2.3.0
Total Page:16
File Type:pdf, Size:1020Kb
CompleteSBC Handbook Release 2.3.0 Xorcom March 05, 2015 VoIPon www.voipon.co.uk [email protected] Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299 Contents 1 About This Book 1 2 Introduction 3 2.1 A Brief Introduction to History and Architecture of SIP ...................... 3 2.2 What is a Session Border Controller (SBC)? ............................ 6 2.3 Do You Need an SBC? ........................................ 9 2.4 CompleteSBC Networking Concepts ................................ 10 3 Practical Guide to the CompleteSBC 17 3.1 Network Planning Guidelines .................................... 17 3.2 Planning Checklists ......................................... 24 3.3 A Typical SBC Configuration Example ............................... 25 4 Installing the CompleteSBC 42 4.1 Initial Configuration ......................................... 42 4.2 Web Interface Access and User Accounts .............................. 42 4.3 CompleteSBC License ........................................ 44 4.4 Hardware Specific Configurations .................................. 44 5 General CompleteSBC Configuration Guide 46 5.1 Physical, System and SBC Interfaces ................................ 46 5.2 Defining Rules ............................................ 46 5.3 Using Replacements in Rules .................................... 50 5.4 Using Regular Expression Backreferences in Rules ......................... 52 5.5 Binding Rules together with Call Variables ............................. 53 5.6 SIP Routing ............................................. 53 5.7 SIP Mediation ............................................ 66 5.8 SDP Mediation ............................................ 74 5.9 Media Handling ........................................... 78 5.10 NAT Traversal ............................................ 84 5.11 Registration Caching and Handling ................................. 87 5.12 Call Data Records (CDRs) ...................................... 92 5.13 Advanced Use Cases with Provisioned Data ............................. 95 5.14 SIP-WebRTC Gateway ........................................108 6 CompleteSBC System administration 118 6.1 User Accounts ............................................118 6.2 Command Reference .........................................119 6.3 Backup and Restore Operations ...................................120 7 Monitoring and Troubleshooting 122 7.1 SBC Server Diagnostics .......................................122 7.2 SIP and RTP Traffic Monitoring ...................................124 7.3 Using SNMP for Measurements and Monitoring . 128 7.4 Additional Sources of Troubleshooting Information . 129 8 Securing Your VoIP Network 131 i VoIPon www.voipon.co.uk [email protected] Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299 8.1 Security Features of the CompleteSBC ...............................131 8.2 Topology Hiding ...........................................132 8.3 Traffic Limiting and Shaping .....................................135 8.4 Call Duration Control ........................................137 8.5 Blacklisting ..............................................138 9 Reference of Actions 143 9.1 SIP Mediation ............................................145 9.2 SDP Mediation ............................................146 9.3 Management and Monitoring ....................................146 9.4 Traffic Shaping ............................................147 9.5 Media Processing ...........................................147 9.6 SIP Dropping .............................................148 9.7 Scripting ...............................................148 9.8 Register Processing .........................................148 9.9 External Interaction .........................................149 9.10 NAT Handling ............................................149 10 Glossary 150 Index 152 ii VoIPon www.voipon.co.uk [email protected] Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299 Chapter 1 About This Book This documentation is a complete handbook for the CompleteSBC, Release 2.3.0. It documents network planning, SBC installation, policy configuration and best current practices for operating an CompleteSBC. The CompleteSBC Session Border Controller is a SIP Back-2-Back User Agent (B2BUA) that provides operators and enterprises with a scalable session border control solution for secure connections with Voice of IP (VoIP) operators and users. With the CompleteSBC VoIP service providers and enterprises deploy a session border controller that was de- signed to run on top of high end hardware as well as appliances and virtual machines. Thereby, the CompleteSBC enables VoIP providers to gradually scale up their infrastructure and covers the needs of enterprises of all sizes. The CompleteSBC provides the following features: • Security: The CompleteSBC serves as the first line of defence, fending off attacks coming over the Internet, hiding internal topology, applying rate limits and performing Call Admission Control, limiting number of parallel calls and call length, off-loading registrar and registration throttling and providing confidentiality using cryptographic TLS and SRTP protocols. • Mediation: The CompleteSBC connects disconnected unroutable networks and VLANs, different transport protocols, facilitates NAT traversal, limits codec negotiation, translates identities and adapts SIP headers and bodies for best interoperability between incompatible devices and networks policies. • Routing: The CompleteSBC‘s competative design allows to route SIP traffic based on any message element. Scenarios like source-based, destination-based, least-cost-route based, proprietary-header-field-based and others can be easily configured and cascaded behing each other to find the most-proper destination for SIP traffic. Alternate routes can be also setup in case the primary routes fail. • Web and IT integration: The CompleteSBC design assumes VoIP to be data service like any other, both administrators and users can lean on web technology. User can use webrtc-capable browsers to place and receive calls through the built-in webrtc gateway to any SIP devices. Administrators can place external logic to web-servers and govern how the SBC behaves through a RESTful interface. Large amounts of pre-provisioned data can be used to govern the SBC logic, such as routing tables, peering characteristics or subscriber information. • Management by Web GUI and SNMP. Remote management allows rapid adaptation to ever changing net- work conditions. CompleteSBC‘s policies can be easily changed through web interface, behaviour of the CompleteSBC can be monitored using the same interface as well as SNMP monitoring consoles. All events related to call processing are stored and available for real-time analysis, Call Detail Records (CDR) are also produced for further processing. • Media processing: The CompleteSBC includes built-in audio recording and transcoding. The CompleteSBC is designed to provide high-availablity by running in redundant hot-standby pairs. This book is intended for everyone interested in installing and using the CompleteSBC. Knowledge of SIP, RTP and IP networking is of advantage and would ease the reading and use of the book. Of essential value is, however, a good understanding of the VoIP environment in which the CompleteSBC is to be deployed. 1 VoIPon www.voipon.co.uk [email protected] Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299 CompleteSBC Handbook, Release 2.3.0 The book is structured in the following parts: • Introduction: This section provides an overview of the basic technologies addressed here, namely SIP and SBC. Further, the basic concepts and terminology of the CompleteSBC are described. If you are knowl- edgeable with SIP and VoIP deployments you can skip the introductions to SIP and SBCs. • Practical Guide to the CompleteSBC: This section provides first an overview of what a future user of the CompleteSBC - or actually any other SBC as well - must consider before purchasing and installing an SBC. Further, this guide can be seen as a short cut for configuring and using the main features of the CompleteSBC without having to go through the entire manual. • General CompleteSBC Configuration Guide: This section provides the details about the different features of the CompleteSBC, what they are good for and how they can be used. For the more complex parts, additional section with examples are provided. These example sections are intended as short cuts for solving common issues. • CompleteSBC System administration: This chapter explains a set of features available for the administrator of the CompleteSBC. These features include the capability to create and manage users of the CompleteSBC and define their rights, the list of commands that can be used to run certain tasks that might not be available through the GUI as well as conduct upgrades and updates of the CompleteSBC software. • Monitoring and Troubleshooting: The CompleteSBC collects various measurement values and call traces and generates alarms and SNMP traps. These features provide the administrator of the CompleteSBC with the information needed to detect errors and problems in the processed VoIP traffic as well as in the operation of the CompleteSBC. • Securing Your VoIP Network: This chapter provides an overview of the security capabilities of the Com- pleteSBC as well as a guide for configuring blacklists, traffic shaping and limiting the call duration. 2 VoIPon www.voipon.co.uk [email protected] Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299 Chapter 2 Introduction 2.1 A Brief Introduction