Reboot the Open Realtime Revolution - #MoreCrypto (Fall 2014)

Olle E Johansson
Olle E JohanssonConsultant specialised in realtime communication - webrtc, SIP and XMPP. Kamailio and Asterisk expert.
10 
The Open Communication Revolution 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
4 1 
@oej
Once upon a 
time…
1999 
December 5th
Mark Spencer created Asterisk. 
15 years ago this year.
2002
And the protocol wars 
began.
2004
VON 2004 
SAN JOSE, USA
Astricon 2004 
Atlanta!
ASTERISK 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
VONAGE 
WANNABEES 
KILL THE 
TELCO 
OPEN SOURCE
A different time. 
10 years ago.
We need to move forward, 
make new mistakes.
2014
Where are we?
Where are we? 
Open Source is accepted 
in business and for personal use 
(Android!) 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
Open Source telephony is used by 
carriers and enterprises 
world wide. 
SIP is taking over from ISDN. 
Everywhere. 
We are no longer the cool guerilla. 
We’re just doing normal business.
2014 Examples from the life of an Open Source contributor.
EXECUTIVE SUMMARY 
KAMAILIO 
SIP NETWORKS 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
LYNC CERTIFICATION 
OF ASTERISK 
IETF WORK 
ON IPv6, DANE AND SIP 
ASTERISK 
IMPROVEMENTS
INTENO 
ASTERISK EMBEDDED 
IN BROADBAND ROUTER 
HOME TELEPHONY AND 
SMALL BUSINESS PBX 
CARE PHONES/ALARMS 
REMOTE HOLD, DNS SRV AND 
OTHER ASTERISK 
IMPROVEMENTS 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
BRESSNER Technology 
ASTERISK EMBEDDED 
IN ISDN GATEWAY 
LYNC CERTIFICATION 
SMALL BUSINESS PBX 
COMFORT NOICE/SILENCE 
SUPPRESSION IN ASTERISK 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
CARRIERS: Lync trunks 
ASTERISK FOR LYNC 
RTCP/RTP 
IMPROVEMENTS 
PRACK 
CAUSE CODE HANDLING, 
PACKET REORDERING 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
CARRIERS 
(Just SIP, not Lync) 
SCALABLE SIP 
PLATFORMS 
TLS/SRTP TRIALS 
KAMAILIO EVERYWHERE 
TRAINING, ARCHITECTURE, 
INSTALLATION, TESTS 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
CALL CENTERS 
SCALABLE SIP 
PLATFORMS 
ASTERISK AT CORE 
RTP/RTCP IMPORTANT 
MEDIA IN FOCUS 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
SWEDISH PUBLIC RADIO 
KAMAILIO SIP NETWORK 
HIGH AUDIO QUALITY 
RADIO BROADCAST 
EBU STANDARD 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
IETF & The SIP Forum 
SIP IPv6 DUAL STACK 
SIP CERTIFICATES IN 
DNSSEC - DANE 
WEBRTC 
STUN/DANE 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
ASTERISK IMPROVEMENTS 
CAUSE CODE HANDLING 
COMFORT NOICE/ 
SILENCE SUPPRESSION 
REMOTE HOLD 
RTCP CALL QUALITY 
RECORDS 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
DNS SRV DONE RIGHT 
PRACK SUPPORT 
DTMF DURATION 
PACKET REORDERING
WHERE? 
IN MY PRIVATE VERSION OF 
ASTERISK AND ON DIGIUM’S 
SVN SERVER. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
NOT IN THE ASTERISK 
OFFICIAL CODE BASE.
WILL I STILL BUILD LIKE THIS 
TWO YEARS FROM NOW? 
KAMAILIO 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
ASTERISK
WHERE DOES 
WEBRTC FIT IN? 
I DON’T THINK WE ARE EVEN 
CLOSE TO UNDERSTAND THAT. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
BIG CHANGES TAKE 
TEN YEARS
Where we are going 
SIP 
RECORDING 
WEBRTC 
SERVICE 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
??? 
MEDIA BACKBONE 
MIXER TRANSCODI 
NG 
EFFECTS
This part is missing 
RECORDING 
MEDIA BACKBONE 
MIXER TRANSCODI 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
NG 
Project X 
EFFECTS
What about NOW?
INTERNET 
COMMUNICATION OTT 
Everything is IP. Bypassing carriers over IP. 
BECOME 
THE TELCO 
OPEN SOURCE! 
Push the telco down the stack. Get a quick start.
WINNERS
SIP RTP 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
API 
HTTPS 
XMPP HTTP
LOOSERS.
YOU. 
The user. The customer.
BRAND 
NAMES 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
PRIVATE 
PROTOCOLS 
ISOLATED 
ISLANDS 
VENTURE 
CAPITAL
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
Not moving SIP forward. 
Where are you??? 
RFC 3261
A BROKEN OLD 
NETWORK
IPV4 NAT 
CARRIER GRADE NAT 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
NETWORKING 
KNOWLEDGE
THE MOST IMPORTANT 
PROBLEM…
LOSS OF 
CUSTOMER TRUST.
We can work on all of that. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
Open Source can move 
fast and is a community 
effort. A shared resource.
(Unless there are too much 
bureaucracy in the way. 
Which can happen to 
Open Source projects too.)
BENEFITS OF 
OPEN SOURCE 
LOWER COSTS FOR EVERYONE 
FASTER ADAPTION TO CUSTOMER 
NEEDS. 
SECURITY COMES NATURALLY 
COMPETITIVE MARKETPLACE 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
Open Source will take 
you there. 
• Low cost per customer 
• Innovation, security and 
(sometimes) stability 
• Open Standards and 
Interoperability 
© Copyright 2010, Edvina AB, Sollentuna, Sweden. All rights reserved. Approved distribution only. info@edvina.net
Open.
Open. 
SYSTEMS PROTOCOLS 
NETWORKS SOURCE 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
Internet 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
Internet 
INTEROPERABILITY.
INTEROPERABILITY. 
What every network 
engineer gets paid to work with. 
But too many forget…
INTEROPERABILITY. 
Take it back. You have 
earned it.
10 
4 1 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
2005-2012: 10 to-do list items 
OPEN SOURCE 
SECURITY 
10 
IPv6 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
ENVIRONMENT 
FEDERATE 
INTEROPERABILITY 
OVERLOAD. 
…
4 2013: FOUR THINGS 
SECURITY 
IPv6 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
FEDERATE 
OPUS!
LET’S FOCUS 
ON ONE THING. 1
Ready? 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
The Internet is under attack. #moreCrypto 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
OPPURTUNISTIC 
SECURITY. 
A BASE LAYER OF INTEGRITY. 
NOT FULL SECURITY, BUT 
BETTER THAN NOTHING.
BUILD TRUST. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
SECURITY BY DEFAULT. 
BUILD GOOD STUFF.
LET’S GET 
EVERYONE ABOARD. 
PROVIDER:CE 
OP^2 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
2015 is the year 
of realtime security. 
OPENSIPS 
ELASTIX 
FREEPBX 
KAMAILIO 
YATE 
OPENBTS 
FREESWITCH 
ASTERISK 
BLINK 
SYLKSERVER 
JSSIP 
BARESIP 
???? 
EKIGA 
EKIGA 
RESIPROCATE 
PJSIP 
EDVx 
REPRO 
ZOIPER
1 TODO-LIST FOR 2015 
SECURE ALL COMMUNICATION BY DEFAULT 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
WHAT THIS MEANS FOR SIP 
CALLS 
USE TLS ALWAYS. 
TEST IF IT IS OPEN AND USE IT. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
INVITE WITH SRTP. 
IF IT FAILS, OPTIONALLY FALL BACK.
We are leaving the 
commercial CA 
SIPDANE 
Using DNSsec to verify TLS certificates. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
WHEN BUYING SIP TRUNKS 
REQUIRE TLS. REQUIRE SRTP. 
REQUIRE DNS. REQUIRE IPv6. 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
Different needs. Different solutions. 
SECURE CALLS: 
TLS AUTHENTICATION/CRYPTO 
DTLS SRTP KEY EXCHANGE 
WE CAN IMPROVE SECURITY FOR ALL CALLS, 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 
YOU DO NOT 
WANT TO LOOSE 
THE TRUST OF YOUR 
USERS AND CUSTOMERS. 
REGARDLESS OF DEFAULT CONFIGURATION.
When do we start?
Now. 
Here. 
In Realtime.
#morecrypto 
in SIP, XMPP, RTP. WEBRTC and other realtime 
platforms. 
Thank you.
1 TODO-LIST FOR 2015 
SECURE ALL COMMUNICATION BY DEFAULT @oej @realtimesec 
© Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
1 of 71

Recommended

10-4-1 : The Open Communication Revolution agenda by
10-4-1 : The Open Communication Revolution agenda10-4-1 : The Open Communication Revolution agenda
10-4-1 : The Open Communication Revolution agendaPaloSanto Solutions
584 views70 slides
Sip2016 - a talk at VOIP2DAY 2016 by
Sip2016 - a talk at VOIP2DAY 2016Sip2016 - a talk at VOIP2DAY 2016
Sip2016 - a talk at VOIP2DAY 2016Olle E Johansson
650 views16 slides
Amphenol LTW RJ45 Connector (ODVA) by
Amphenol LTW RJ45 Connector (ODVA)Amphenol LTW RJ45 Connector (ODVA)
Amphenol LTW RJ45 Connector (ODVA)Amphenol LTW
488 views1 slide
Why is Kamailio so different? An introduction. by
Why is Kamailio so different? An introduction.Why is Kamailio so different? An introduction.
Why is Kamailio so different? An introduction.Olle E Johansson
5.8K views27 slides
Kamailio-In-A-Mobile-World by
Kamailio-In-A-Mobile-WorldKamailio-In-A-Mobile-World
Kamailio-In-A-Mobile-WorldFederico Cabiddu
1K views27 slides
Neustar Corporate by
Neustar CorporateNeustar Corporate
Neustar Corporatenirsinay
731 views19 slides

More Related Content

Similar to Reboot the Open Realtime Revolution - #MoreCrypto (Fall 2014)

Security and Real-time Communications – a maze of twisty little passages, tha... by
Security and Real-time Communications – a maze of twisty little passages, tha...Security and Real-time Communications – a maze of twisty little passages, tha...
Security and Real-time Communications – a maze of twisty little passages, tha...Alan Quayle
166 views33 slides
Kamailio World 2016: Update your SIP! by
Kamailio World 2016: Update your SIP!Kamailio World 2016: Update your SIP!
Kamailio World 2016: Update your SIP!Olle E Johansson
2K views28 slides
The Realtime Cloud - unified or isolated islands on the net? by
The Realtime Cloud - unified or isolated islands on the net?The Realtime Cloud - unified or isolated islands on the net?
The Realtime Cloud - unified or isolated islands on the net?Olle E Johansson
621 views65 slides
Building future SIP platforms by
Building future SIP platformsBuilding future SIP platforms
Building future SIP platformsOlle E Johansson
1.4K views52 slides
Sip & IPv6 - time for action! by
Sip & IPv6 - time for action!Sip & IPv6 - time for action!
Sip & IPv6 - time for action!Olle E Johansson
2.2K views28 slides
Pinana : Old proposal for distributed SIP states in Asterisk by
Pinana : Old proposal for distributed SIP states in AsteriskPinana : Old proposal for distributed SIP states in Asterisk
Pinana : Old proposal for distributed SIP states in AsteriskOlle E Johansson
2.2K views16 slides

Similar to Reboot the Open Realtime Revolution - #MoreCrypto (Fall 2014)(20)

Security and Real-time Communications – a maze of twisty little passages, tha... by Alan Quayle
Security and Real-time Communications – a maze of twisty little passages, tha...Security and Real-time Communications – a maze of twisty little passages, tha...
Security and Real-time Communications – a maze of twisty little passages, tha...
Alan Quayle166 views
The Realtime Cloud - unified or isolated islands on the net? by Olle E Johansson
The Realtime Cloud - unified or isolated islands on the net?The Realtime Cloud - unified or isolated islands on the net?
The Realtime Cloud - unified or isolated islands on the net?
Olle E Johansson621 views
Pinana : Old proposal for distributed SIP states in Asterisk by Olle E Johansson
Pinana : Old proposal for distributed SIP states in AsteriskPinana : Old proposal for distributed SIP states in Asterisk
Pinana : Old proposal for distributed SIP states in Asterisk
Olle E Johansson2.2K views
Netnod news Magazine #1, 2013 by netnod
Netnod news Magazine #1, 2013Netnod news Magazine #1, 2013
Netnod news Magazine #1, 2013
netnod443 views
Pexip Infinity Fusion for Skype for Business by Graham Walsh
Pexip Infinity Fusion for Skype for BusinessPexip Infinity Fusion for Skype for Business
Pexip Infinity Fusion for Skype for Business
Graham Walsh394 views
IoTMeetupGuildford#11: Intelligent IoT - Paul Marshall - Eseye Intelligently ... by MicheleNati
IoTMeetupGuildford#11: Intelligent IoT - Paul Marshall - Eseye Intelligently ...IoTMeetupGuildford#11: Intelligent IoT - Paul Marshall - Eseye Intelligently ...
IoTMeetupGuildford#11: Intelligent IoT - Paul Marshall - Eseye Intelligently ...
MicheleNati711 views
Integrated Shipbuilding Strategy by David Thomson, AVEVA by AVEVA Group plc
Integrated Shipbuilding Strategy by David Thomson, AVEVAIntegrated Shipbuilding Strategy by David Thomson, AVEVA
Integrated Shipbuilding Strategy by David Thomson, AVEVA
AVEVA Group plc530 views
Arqiva presentation to Upland Biodiversity Conference - 4th march 2015 by 181273
Arqiva presentation to Upland Biodiversity Conference - 4th march 2015Arqiva presentation to Upland Biodiversity Conference - 4th march 2015
Arqiva presentation to Upland Biodiversity Conference - 4th march 2015
181273305 views
RIEDEL Communications - Update brochure No. 21 (September 2017) by RIEDEL Communications
RIEDEL Communications - Update brochure No. 21 (September 2017)RIEDEL Communications - Update brochure No. 21 (September 2017)
RIEDEL Communications - Update brochure No. 21 (September 2017)
Pexip and Microsoft - Certified for Skype for Business Server by Graham Walsh
Pexip and Microsoft - Certified for Skype for Business ServerPexip and Microsoft - Certified for Skype for Business Server
Pexip and Microsoft - Certified for Skype for Business Server
Graham Walsh871 views
Interfacing the real world with the VASERcontrol home automation system by ESUG
Interfacing the real world with the VASERcontrol home automation systemInterfacing the real world with the VASERcontrol home automation system
Interfacing the real world with the VASERcontrol home automation system
ESUG645 views
Open stack coopetition_israel -- Presentation by Alex Freedland @ 2013 OpenSt... by Alex Freedland
Open stack coopetition_israel -- Presentation by Alex Freedland @ 2013 OpenSt...Open stack coopetition_israel -- Presentation by Alex Freedland @ 2013 OpenSt...
Open stack coopetition_israel -- Presentation by Alex Freedland @ 2013 OpenSt...
Alex Freedland866 views
Sweex Presentation by kenan_aliev
Sweex PresentationSweex Presentation
Sweex Presentation
kenan_aliev587 views

More from Olle E Johansson

Cybernode.se: Securing the software supply chain (CRA) by
Cybernode.se: Securing the software supply chain (CRA)Cybernode.se: Securing the software supply chain (CRA)
Cybernode.se: Securing the software supply chain (CRA)Olle E Johansson
80 views58 slides
CRA - overview of vulnerability handling by
CRA - overview of vulnerability handlingCRA - overview of vulnerability handling
CRA - overview of vulnerability handlingOlle E Johansson
162 views43 slides
The birth and death of PSTN by
The birth and death of PSTNThe birth and death of PSTN
The birth and death of PSTNOlle E Johansson
633 views23 slides
WebRTC and Janus intro for FOSS Stockholm January 2019 by
WebRTC and Janus intro for FOSS Stockholm January 2019WebRTC and Janus intro for FOSS Stockholm January 2019
WebRTC and Janus intro for FOSS Stockholm January 2019Olle E Johansson
576 views23 slides
Kamailio World 2018: Having fun with new stuff by
Kamailio World 2018: Having fun with new stuffKamailio World 2018: Having fun with new stuff
Kamailio World 2018: Having fun with new stuffOlle E Johansson
985 views43 slides
Webrtc overview by
Webrtc overviewWebrtc overview
Webrtc overviewOlle E Johansson
2.1K views49 slides

More from Olle E Johansson(20)

Cybernode.se: Securing the software supply chain (CRA) by Olle E Johansson
Cybernode.se: Securing the software supply chain (CRA)Cybernode.se: Securing the software supply chain (CRA)
Cybernode.se: Securing the software supply chain (CRA)
Olle E Johansson80 views
CRA - overview of vulnerability handling by Olle E Johansson
CRA - overview of vulnerability handlingCRA - overview of vulnerability handling
CRA - overview of vulnerability handling
Olle E Johansson162 views
WebRTC and Janus intro for FOSS Stockholm January 2019 by Olle E Johansson
WebRTC and Janus intro for FOSS Stockholm January 2019WebRTC and Janus intro for FOSS Stockholm January 2019
WebRTC and Janus intro for FOSS Stockholm January 2019
Olle E Johansson576 views
Kamailio World 2018: Having fun with new stuff by Olle E Johansson
Kamailio World 2018: Having fun with new stuffKamailio World 2018: Having fun with new stuff
Kamailio World 2018: Having fun with new stuff
Olle E Johansson985 views
Realtime communication over a dual stack network by Olle E Johansson
Realtime communication over a dual stack networkRealtime communication over a dual stack network
Realtime communication over a dual stack network
Olle E Johansson1.3K views
Sips must die, die, die - about TLS usage in the SIP protocol by Olle E Johansson
Sips must die, die, die - about TLS usage in the SIP protocolSips must die, die, die - about TLS usage in the SIP protocol
Sips must die, die, die - about TLS usage in the SIP protocol
Olle E Johansson2.4K views
SIP & TLS - Security in a peer to peer world by Olle E Johansson
SIP & TLS - Security in a peer to peer worldSIP & TLS - Security in a peer to peer world
SIP & TLS - Security in a peer to peer world
Olle E Johansson25.6K views
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM) by Olle E Johansson
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)
Tio tester av TLS - Transport Layer Security (TLS-O-MATIC.COM)
Olle E Johansson938 views
2015 update: SIP and IPv6 issues - staying Happy in SIP by Olle E Johansson
2015 update: SIP and IPv6 issues - staying Happy in SIP2015 update: SIP and IPv6 issues - staying Happy in SIP
2015 update: SIP and IPv6 issues - staying Happy in SIP
Olle E Johansson2.6K views
TCP/IP Geeks Stockholm :: Introduction to IPv6 by Olle E Johansson
TCP/IP Geeks Stockholm :: Introduction to IPv6TCP/IP Geeks Stockholm :: Introduction to IPv6
TCP/IP Geeks Stockholm :: Introduction to IPv6
Olle E Johansson5.7K views
RFC 7435 - Opportunistic security - Some protection most of the time by Olle E Johansson
RFC 7435 - Opportunistic security - Some protection most of the timeRFC 7435 - Opportunistic security - Some protection most of the time
RFC 7435 - Opportunistic security - Some protection most of the time
Olle E Johansson3K views
SIP and DNS - federation, failover, load balancing and more by Olle E Johansson
SIP and DNS - federation, failover, load balancing and moreSIP and DNS - federation, failover, load balancing and more
SIP and DNS - federation, failover, load balancing and more
Olle E Johansson10.6K views
TCP/IP geeks Stockholm :: Manifesto by Olle E Johansson
TCP/IP geeks Stockholm :: ManifestoTCP/IP geeks Stockholm :: Manifesto
TCP/IP geeks Stockholm :: Manifesto
Olle E Johansson1.6K views
#Morecrypto (with tis) - version 2.2 by Olle E Johansson
#Morecrypto (with tis) - version 2.2#Morecrypto (with tis) - version 2.2
#Morecrypto (with tis) - version 2.2
Olle E Johansson3.3K views
#Morecrypto 1.8 - with introduction to TLS by Olle E Johansson
#Morecrypto 1.8 - with introduction to TLS#Morecrypto 1.8 - with introduction to TLS
#Morecrypto 1.8 - with introduction to TLS
Olle E Johansson1.8K views

Recently uploaded

Optimizing Communication to Optimize Human Behavior - LCBM by
Optimizing Communication to Optimize Human Behavior - LCBMOptimizing Communication to Optimize Human Behavior - LCBM
Optimizing Communication to Optimize Human Behavior - LCBMYaman Kumar
38 views49 slides
Future of AR - Facebook Presentation by
Future of AR - Facebook PresentationFuture of AR - Facebook Presentation
Future of AR - Facebook PresentationRob McCarty
65 views27 slides
KVM Security Groups Under the Hood - Wido den Hollander - Your.Online by
KVM Security Groups Under the Hood - Wido den Hollander - Your.OnlineKVM Security Groups Under the Hood - Wido den Hollander - Your.Online
KVM Security Groups Under the Hood - Wido den Hollander - Your.OnlineShapeBlue
225 views19 slides
Business Analyst Series 2023 - Week 4 Session 7 by
Business Analyst Series 2023 -  Week 4 Session 7Business Analyst Series 2023 -  Week 4 Session 7
Business Analyst Series 2023 - Week 4 Session 7DianaGray10
146 views31 slides
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P... by
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...ShapeBlue
196 views62 slides
State of the Union - Rohit Yadav - Apache CloudStack by
State of the Union - Rohit Yadav - Apache CloudStackState of the Union - Rohit Yadav - Apache CloudStack
State of the Union - Rohit Yadav - Apache CloudStackShapeBlue
303 views53 slides

Recently uploaded(20)

Optimizing Communication to Optimize Human Behavior - LCBM by Yaman Kumar
Optimizing Communication to Optimize Human Behavior - LCBMOptimizing Communication to Optimize Human Behavior - LCBM
Optimizing Communication to Optimize Human Behavior - LCBM
Yaman Kumar38 views
Future of AR - Facebook Presentation by Rob McCarty
Future of AR - Facebook PresentationFuture of AR - Facebook Presentation
Future of AR - Facebook Presentation
Rob McCarty65 views
KVM Security Groups Under the Hood - Wido den Hollander - Your.Online by ShapeBlue
KVM Security Groups Under the Hood - Wido den Hollander - Your.OnlineKVM Security Groups Under the Hood - Wido den Hollander - Your.Online
KVM Security Groups Under the Hood - Wido den Hollander - Your.Online
ShapeBlue225 views
Business Analyst Series 2023 - Week 4 Session 7 by DianaGray10
Business Analyst Series 2023 -  Week 4 Session 7Business Analyst Series 2023 -  Week 4 Session 7
Business Analyst Series 2023 - Week 4 Session 7
DianaGray10146 views
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P... by ShapeBlue
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...
Developments to CloudStack’s SDN ecosystem: Integration with VMWare NSX 4 - P...
ShapeBlue196 views
State of the Union - Rohit Yadav - Apache CloudStack by ShapeBlue
State of the Union - Rohit Yadav - Apache CloudStackState of the Union - Rohit Yadav - Apache CloudStack
State of the Union - Rohit Yadav - Apache CloudStack
ShapeBlue303 views
How to Re-use Old Hardware with CloudStack. Saving Money and the Environment ... by ShapeBlue
How to Re-use Old Hardware with CloudStack. Saving Money and the Environment ...How to Re-use Old Hardware with CloudStack. Saving Money and the Environment ...
How to Re-use Old Hardware with CloudStack. Saving Money and the Environment ...
ShapeBlue171 views
Import Export Virtual Machine for KVM Hypervisor - Ayush Pandey - University ... by ShapeBlue
Import Export Virtual Machine for KVM Hypervisor - Ayush Pandey - University ...Import Export Virtual Machine for KVM Hypervisor - Ayush Pandey - University ...
Import Export Virtual Machine for KVM Hypervisor - Ayush Pandey - University ...
ShapeBlue120 views
Initiating and Advancing Your Strategic GIS Governance Strategy by Safe Software
Initiating and Advancing Your Strategic GIS Governance StrategyInitiating and Advancing Your Strategic GIS Governance Strategy
Initiating and Advancing Your Strategic GIS Governance Strategy
Safe Software184 views
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And... by ShapeBlue
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...
Enabling DPU Hardware Accelerators in XCP-ng Cloud Platform Environment - And...
ShapeBlue108 views
NTGapps NTG LowCode Platform by Mustafa Kuğu
NTGapps NTG LowCode Platform NTGapps NTG LowCode Platform
NTGapps NTG LowCode Platform
Mustafa Kuğu437 views
Don’t Make A Human Do A Robot’s Job! : 6 Reasons Why AI Will Save Us & Not De... by Moses Kemibaro
Don’t Make A Human Do A Robot’s Job! : 6 Reasons Why AI Will Save Us & Not De...Don’t Make A Human Do A Robot’s Job! : 6 Reasons Why AI Will Save Us & Not De...
Don’t Make A Human Do A Robot’s Job! : 6 Reasons Why AI Will Save Us & Not De...
Moses Kemibaro35 views
The Role of Patterns in the Era of Large Language Models by Yunyao Li
The Role of Patterns in the Era of Large Language ModelsThe Role of Patterns in the Era of Large Language Models
The Role of Patterns in the Era of Large Language Models
Yunyao Li91 views
Updates on the LINSTOR Driver for CloudStack - Rene Peinthor - LINBIT by ShapeBlue
Updates on the LINSTOR Driver for CloudStack - Rene Peinthor - LINBITUpdates on the LINSTOR Driver for CloudStack - Rene Peinthor - LINBIT
Updates on the LINSTOR Driver for CloudStack - Rene Peinthor - LINBIT
ShapeBlue208 views
Live Demo Showcase: Unveiling Dell PowerFlex’s IaaS Capabilities with Apache ... by ShapeBlue
Live Demo Showcase: Unveiling Dell PowerFlex’s IaaS Capabilities with Apache ...Live Demo Showcase: Unveiling Dell PowerFlex’s IaaS Capabilities with Apache ...
Live Demo Showcase: Unveiling Dell PowerFlex’s IaaS Capabilities with Apache ...
ShapeBlue129 views
"Surviving highload with Node.js", Andrii Shumada by Fwdays
"Surviving highload with Node.js", Andrii Shumada "Surviving highload with Node.js", Andrii Shumada
"Surviving highload with Node.js", Andrii Shumada
Fwdays58 views
"Running students' code in isolation. The hard way", Yurii Holiuk by Fwdays
"Running students' code in isolation. The hard way", Yurii Holiuk "Running students' code in isolation. The hard way", Yurii Holiuk
"Running students' code in isolation. The hard way", Yurii Holiuk
Fwdays36 views
The Power of Heat Decarbonisation Plans in the Built Environment by IES VE
The Power of Heat Decarbonisation Plans in the Built EnvironmentThe Power of Heat Decarbonisation Plans in the Built Environment
The Power of Heat Decarbonisation Plans in the Built Environment
IES VE84 views

Reboot the Open Realtime Revolution - #MoreCrypto (Fall 2014)

  • 1. 10 The Open Communication Revolution © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 4 1 @oej
  • 2. Once upon a time…
  • 4. Mark Spencer created Asterisk. 15 years ago this year.
  • 6. And the protocol wars began.
  • 8. VON 2004 SAN JOSE, USA
  • 10. ASTERISK © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. VONAGE WANNABEES KILL THE TELCO OPEN SOURCE
  • 11. A different time. 10 years ago.
  • 12. We need to move forward, make new mistakes.
  • 13. 2014
  • 15. Where are we? Open Source is accepted in business and for personal use (Android!) © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. Open Source telephony is used by carriers and enterprises world wide. SIP is taking over from ISDN. Everywhere. We are no longer the cool guerilla. We’re just doing normal business.
  • 16. 2014 Examples from the life of an Open Source contributor.
  • 17. EXECUTIVE SUMMARY KAMAILIO SIP NETWORKS © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. LYNC CERTIFICATION OF ASTERISK IETF WORK ON IPv6, DANE AND SIP ASTERISK IMPROVEMENTS
  • 18. INTENO ASTERISK EMBEDDED IN BROADBAND ROUTER HOME TELEPHONY AND SMALL BUSINESS PBX CARE PHONES/ALARMS REMOTE HOLD, DNS SRV AND OTHER ASTERISK IMPROVEMENTS © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 19. BRESSNER Technology ASTERISK EMBEDDED IN ISDN GATEWAY LYNC CERTIFICATION SMALL BUSINESS PBX COMFORT NOICE/SILENCE SUPPRESSION IN ASTERISK © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 20. CARRIERS: Lync trunks ASTERISK FOR LYNC RTCP/RTP IMPROVEMENTS PRACK CAUSE CODE HANDLING, PACKET REORDERING © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 21. CARRIERS (Just SIP, not Lync) SCALABLE SIP PLATFORMS TLS/SRTP TRIALS KAMAILIO EVERYWHERE TRAINING, ARCHITECTURE, INSTALLATION, TESTS © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 22. CALL CENTERS SCALABLE SIP PLATFORMS ASTERISK AT CORE RTP/RTCP IMPORTANT MEDIA IN FOCUS © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 23. SWEDISH PUBLIC RADIO KAMAILIO SIP NETWORK HIGH AUDIO QUALITY RADIO BROADCAST EBU STANDARD © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 24. IETF & The SIP Forum SIP IPv6 DUAL STACK SIP CERTIFICATES IN DNSSEC - DANE WEBRTC STUN/DANE © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 25. ASTERISK IMPROVEMENTS CAUSE CODE HANDLING COMFORT NOICE/ SILENCE SUPPRESSION REMOTE HOLD RTCP CALL QUALITY RECORDS © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. DNS SRV DONE RIGHT PRACK SUPPORT DTMF DURATION PACKET REORDERING
  • 26. WHERE? IN MY PRIVATE VERSION OF ASTERISK AND ON DIGIUM’S SVN SERVER. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. NOT IN THE ASTERISK OFFICIAL CODE BASE.
  • 27. WILL I STILL BUILD LIKE THIS TWO YEARS FROM NOW? KAMAILIO © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. ASTERISK
  • 28. WHERE DOES WEBRTC FIT IN? I DON’T THINK WE ARE EVEN CLOSE TO UNDERSTAND THAT. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. BIG CHANGES TAKE TEN YEARS
  • 29. Where we are going SIP RECORDING WEBRTC SERVICE © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. ??? MEDIA BACKBONE MIXER TRANSCODI NG EFFECTS
  • 30. This part is missing RECORDING MEDIA BACKBONE MIXER TRANSCODI © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. NG Project X EFFECTS
  • 32. INTERNET COMMUNICATION OTT Everything is IP. Bypassing carriers over IP. BECOME THE TELCO OPEN SOURCE! Push the telco down the stack. Get a quick start.
  • 34. SIP RTP © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. API HTTPS XMPP HTTP
  • 36. YOU. The user. The customer.
  • 37. BRAND NAMES © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. PRIVATE PROTOCOLS ISOLATED ISLANDS VENTURE CAPITAL
  • 38. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. Not moving SIP forward. Where are you??? RFC 3261
  • 39. A BROKEN OLD NETWORK
  • 40. IPV4 NAT CARRIER GRADE NAT © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. NETWORKING KNOWLEDGE
  • 41. THE MOST IMPORTANT PROBLEM…
  • 43. We can work on all of that. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 44. Open Source can move fast and is a community effort. A shared resource.
  • 45. (Unless there are too much bureaucracy in the way. Which can happen to Open Source projects too.)
  • 46. BENEFITS OF OPEN SOURCE LOWER COSTS FOR EVERYONE FASTER ADAPTION TO CUSTOMER NEEDS. SECURITY COMES NATURALLY COMPETITIVE MARKETPLACE © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 47. Open Source will take you there. • Low cost per customer • Innovation, security and (sometimes) stability • Open Standards and Interoperability © Copyright 2010, Edvina AB, Sollentuna, Sweden. All rights reserved. Approved distribution only. info@edvina.net
  • 48. Open.
  • 49. Open. SYSTEMS PROTOCOLS NETWORKS SOURCE © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 50. Internet © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 52. INTEROPERABILITY. What every network engineer gets paid to work with. But too many forget…
  • 53. INTEROPERABILITY. Take it back. You have earned it.
  • 54. 10 4 1 © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 55. 2005-2012: 10 to-do list items OPEN SOURCE SECURITY 10 IPv6 © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. ENVIRONMENT FEDERATE INTEROPERABILITY OVERLOAD. …
  • 56. 4 2013: FOUR THINGS SECURITY IPv6 © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. FEDERATE OPUS!
  • 57. LET’S FOCUS ON ONE THING. 1
  • 58. Ready? © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 59. The Internet is under attack. #moreCrypto © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 60. OPPURTUNISTIC SECURITY. A BASE LAYER OF INTEGRITY. NOT FULL SECURITY, BUT BETTER THAN NOTHING.
  • 61. BUILD TRUST. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. SECURITY BY DEFAULT. BUILD GOOD STUFF.
  • 62. LET’S GET EVERYONE ABOARD. PROVIDER:CE OP^2 © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. 2015 is the year of realtime security. OPENSIPS ELASTIX FREEPBX KAMAILIO YATE OPENBTS FREESWITCH ASTERISK BLINK SYLKSERVER JSSIP BARESIP ???? EKIGA EKIGA RESIPROCATE PJSIP EDVx REPRO ZOIPER
  • 63. 1 TODO-LIST FOR 2015 SECURE ALL COMMUNICATION BY DEFAULT © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 64. WHAT THIS MEANS FOR SIP CALLS USE TLS ALWAYS. TEST IF IT IS OPEN AND USE IT. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. INVITE WITH SRTP. IF IT FAILS, OPTIONALLY FALL BACK.
  • 65. We are leaving the commercial CA SIPDANE Using DNSsec to verify TLS certificates. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 66. WHEN BUYING SIP TRUNKS REQUIRE TLS. REQUIRE SRTP. REQUIRE DNS. REQUIRE IPv6. © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.
  • 67. Different needs. Different solutions. SECURE CALLS: TLS AUTHENTICATION/CRYPTO DTLS SRTP KEY EXCHANGE WE CAN IMPROVE SECURITY FOR ALL CALLS, © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved. YOU DO NOT WANT TO LOOSE THE TRUST OF YOUR USERS AND CUSTOMERS. REGARDLESS OF DEFAULT CONFIGURATION.
  • 68. When do we start?
  • 69. Now. Here. In Realtime.
  • 70. #morecrypto in SIP, XMPP, RTP. WEBRTC and other realtime platforms. Thank you.
  • 71. 1 TODO-LIST FOR 2015 SECURE ALL COMMUNICATION BY DEFAULT @oej @realtimesec © Copyright 2014 Edvina AB, Sollentuna, Sweden. All rights reserved.