[prev in list] [next in list] [prev in thread] [next in thread] 

List:       asterisk-dev
Subject:    Re: [asterisk-dev] Symmetric RTP
From:       Andreas_Krüger <ak () patientsky ! com>
Date:       2017-02-23 16:40:15
Message-ID: CANoYimDMvXywJk2WBbNsTQbXa5yyfkQXUO6V8KrJ_0tVjJWUTA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Yes that sounds very like the setup we're running now.

Currently the Asterisk servers are having a configuration in
res_stun_monitor with:

[general]
stunaddr=stun.l.google.com:19302
stunrefresh=30

And rtp.conf is configured with:

icesupport=yes
stunaddr=stun.l.google.com:19302


While the clients are configured to use the same stun address in SipJS.

Would it be smart to enable symmetric rtp in any case, like if the ice
negotiation fails ?

-- 
*ANDREAS KRÜGER*

Mobil: +45 51808863 <004551808863>
E-post: ak@patientsky.com
Adresse: Kongensgade 27 1, 5000 Odense C, Denmark
<https://www.google.no/maps/place/Kongensgade%2027,%205000%20Odense%20C>


2017-02-23 16:45 GMT+01:00 Mark Michelson <mmichelson@digium.com>:

> On 02/23/2017 08:28 AM, Andreas Krüger wrote:
>
> Hi,
>
> I was wondering with the following setup, if you would use Symmetric NAT.
>
>                             +--------------+
>
> +--------------+            | 89.192.76.11 |
> +--------------+
> |    Client 1  |     LAN    |   Router     |     Internet    |
> 72.87.123.32 |
> | 172.32.11.17 + ---------> | 172.32.11.1  + --------------> |  Asterisk
>  |
> +--------------+            +--------------+
> +--------------+
>
>
> I'm using PJSIP, and have set the external_media_address, external_signaling_address
> and local_net for the transport.
>
> The client is connecting with WSS and also using ICE.
>
> force_rport is set to yes in ps_endpoints section for the client. Also
> direct_media is no.
>
> Regards,
>
> Andreas Krüger
>
>
> I think that all depends on ICE is configured. If the client is not
> connecting to a STUN server, then ICE will only advertise the client's host
> candidate(s). Since Asterisk cannot reach the client directly, you would
> want to enable symmetric RTP so that Asterisk directs its media to the
> router instead.
>
> If the client is using a STUN server, it should advertise the router's
> public IP address as a server reflexive candidate. The ICE connectivity
> checks should result in Asterisk sending to that address. Therefore you
> would not need to enable symmetric RTP in that case.
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>

[Attachment #5 (text/html)]

<div dir="ltr">Yes that sounds very like the setup we&#39;re running \
now.<br><br>Currently the Asterisk servers are having a configuration in \
res_stun_monitor with:  <br><br><div>[general]</div><div>stunaddr=<a \
href="http://stun.l.google.com:19302">stun.l.google.com:19302</a></div><div>stunrefresh=30<br><br>And \
rtp.conf is configured with:<br><br><div>icesupport=yes</div><div>stunaddr=<a \
href="http://stun.l.google.com:19302">stun.l.google.com:19302</a><br><br><br>While \
the clients are configured to use the same stun address in SipJS.<br><br>Would it be \
smart to enable symmetric rtp in any case, like if the ice negotiation fails \
?</div></div></div><div class="gmail_extra"><br clear="all"><div><div \
class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span \
style="color:rgb(136,136,136);font-size:12.8000001907349px">--  </span><br \
style="color:rgb(136,136,136);font-size:12.8000001907349px"><div \
style="color:rgb(136,136,136);font-size:12.8000001907349px"><div dir="ltr"><div \
dir="ltr"><div dir="ltr"><div><b style="font-size:12.8000001907349px">ANDREAS \
KRÜGER</b><br></div><div><br></div><div>Mobil: <a href="tel:004551808863" \
target="_blank">+45 51808863</a></div><div>E-post:  <a \
href="mailto:ak@patientsky.com" style="color:rgb(17,85,204)" \
target="_blank">ak@patientsky.com</a></div><div>Adresse: <a \
href="https://www.google.no/maps/place/Kongensgade%2027,%205000%20Odense%20C" \
target="_blank">Kongensgade 27 1, 5000 Odense C, \
Denmark</a></div><div><br></div><div><img \
src="https://cldup.com/5A28yTpi0W-3000x3000.png" width="96" \
height="40"></div></div></div></div></div></div></div></div> <br><div \
class="gmail_quote">2017-02-23 16:45 GMT+01:00 Mark Michelson <span dir="ltr">&lt;<a \
href="mailto:mmichelson@digium.com" \
target="_blank">mmichelson@digium.com</a>&gt;</span>:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex">  
    
  
  <div bgcolor="#FFFFFF" text="#000000"><div><div class="h5">
    <div class="m_-7032830991028344256moz-cite-prefix">On 02/23/2017 08:28 AM, \
Andreas Krüger  wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">
        Hi,<br>
        <br>
        I was wondering with the following setup, if you would use
        Symmetric NAT.<br>
        <font face="garamond, serif"><br>
        </font>
        <div><font face="garamond, serif">                                         
            +--------------+                                                          \
  </font></div>
        <div><font face="garamond, serif">+--------------+                  |
            89.192.76.11 |                         +--------------+</font></div>
        <div><font face="garamond, serif">|      Client 1   |       LAN      |
               Router       |       Internet      | 72.87.123.32 |</font></div>
        <div><font face="garamond, serif">| 172.32.11.17 + ---------&gt;
            | 172.32.11.1   + --------------&gt; |   Asterisk      |</font></div>
        <div><font face="garamond, serif">+--------------+               
              +--------------+                         +--------------+</font></div>
        <div><br>
          <br>
          I&#39;m using PJSIP, and have set
          the  external_media_address,  <wbr>external_signaling_address
          and  local_net for the transport.<br>
          <br>
          The client is connecting with WSS and also using ICE.<br>
          <br>
        </div>
        <div>force_rport is set to yes in ps_endpoints section for the
          client. Also direct_media is no.<br>
          <br>
          Regards,<br>
          <br>
          Andreas Krüger</div>
      </div>
    </blockquote>
    <br></div></div>
    I think that all depends on ICE is configured. If the client is not
    connecting to a STUN server, then ICE will only advertise the
    client&#39;s host candidate(s). Since Asterisk cannot reach the client
    directly, you would want to enable symmetric RTP so that Asterisk
    directs its media to the router instead.<br>
    <br>
    If the client is using a STUN server, it should advertise the
    router&#39;s public IP address as a server reflexive candidate. The ICE
    connectivity checks should result in Asterisk sending to that
    address. Therefore you would not need to enable symmetric RTP in
    that case.<br>
  </div>

<br>--<br>
______________________________<wbr>______________________________<wbr>_________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" \
rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br> <br>
asterisk-dev mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
     <a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" rel="noreferrer" \
target="_blank">http://lists.digium.com/<wbr>mailman/listinfo/asterisk-dev</a><br></blockquote></div><br></div>




-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-dev mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-dev

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic