AstriCon 2021 presentation regarding Kamailio

1. AstriCon 2021
Fred Posner
@fredposner
https://qxork.com
Kamalio and Asterisk:
What, Why & How

2. Agenda
●
Introduction
●
What is Kamailio?
●
Why use Kamailio?
●
How to Integrate

3. Introduction

4. Kama-what???
●
Comma Illie Oh
●
Hawaiian Word
●
“To Communicate”

5. Who am I?
●
I’m Fred
●
Matrix:
@fred:matrix.lod.com
●
Twitter: @fredposner
●
VoIP Consultant
●
https://qxork.com

6. What is Kamailio?

9. What is Kamailio?
●
SIP Proxy
●
SIP Registrar
●
SIP Location
●
SIP Application
●
SIP Dispatcher
●
SIP Websocket

10. Kamailio
●
Over 200 modules
●
Small Footprint
●
Fast
●
Open Source
●
20 Years Experience

11. What isn’t Kamailio?
●
B2BUA
●
SIP Phone
●
Media Server*
●
Transcoding*

12. Why Use Kamailio

13. Why Use Kamailio

14. Better Together
●
Security
●
Scalabilty
●
Bridging
●
HA
●
etc

15. Security
●
SQL injection
●
SIP Flood
●
Many types of
Authentication
●
SIP Edge Router

16. Security

17. Scalability

18. Scalability

19. Bridging

20. Bridging

21. High Availability

22. How

23. Example: PIKE
●
Anti-Flood Handling
●
Use with HTABLE for
long block
●
Use in combination with
DMQ to proactively
block other locations

24. Example: PIKE
●
Load Module
loadmodule
"pike.so"
●
Configure Module
modparam("pike",
"sampling_time_unit", 2)
modparam("pike",
"reqs_density_per_unit",
20)
modparam("pike",
"remove_latency", 4)

25. Example: PIKE
route {
if (!pike_check_req()) {
xlog("L_ALERT","PIKE: $si:$spn");
exit;
}

26. Example: SECFILTER
●
Lists (allow/block) by
user-agent, IP,
country, domains,
users, etc.
●
SQL injection blocks

27. Example: SECFILTER
loadmodule "geoip2.so"
loadmodule "secfilter.so"
...
if (geoip2_match("$si", "src")) {
secf_check_country($gip2(src=>cc));
# 2 = allow list
# -2 = block list
if ($? == -2) {
xalert("$rm from $si blocked
because Country '$gip2(src=>cc)' is in
block list");
exit;
}
}
modparam("secfilter",
"db_url", DBURL)
modparam("secfilter",
"dst_exact_match", 0)

28. ●
Offload to Kamailio
●
Mid-registrar (Proxy)
Handling Users

29. Mid-Registrar
●
UAC module
●
Can also be custom
●
Kamailio handles
security
●
Can handle multiple
Asterisk nodes

30. Offload
●
100,000+ users on a
system is not an issue
●
Asterisk just handles
media, conferencing,
queues, etc.

31. How do you do it?
●
We are a friendly
community
●
kamailio.org
●
Mail lists
●
Matrix / Slack / IRC

32. Thank You for flying Kamailio
●
https://qxork.com
https://qxork.com
●
https://kamailio.org
●
@fredposner
●
https://pgpx.io/ast21