The document discusses deploying Asterisk in large enterprise and cloud solutions. It covers why Asterisk is a good option, its flexibility and features. It then discusses requirements for bigger systems like redundancy, high availability, security and load balancing. It provides examples of network diagrams using proxy servers, and discusses call routing and security considerations.
Build HA Asterisk on Microsoft Azure using DRBD/HeartbeatSanjay Willie
This was presented during Microsoft Azure's BootCamp on April 25 2015 at Microsoft Malaysia. This particular session was about using OSS Asterisk on Azure with HA capabilities.
Asterisk is an Open Source PBX - but how does it support larger installations? Can you scale it up to thousands of users, with hundreds of simultaneous calls? What about failover, backups and the famous blinking lamps? Olle Johansson goes through various models and describes where some of his current projects with strange names - Pinefrog, Pinana, Pinetree and Bufo fits into this picture.
High Availability Asterisk and FreePBX on Microsoft AzureSanjay Willie
In this slide, we presented to MaGIC Malaysia for entrepreneurs wanting to get an Asterisk business on cloud going. Here, we provide the most basic, lowest level method of having a HA on Microsoft Azure with FreePBX,
Components used with Azure's Ubuntu 14.04 image
1) Asterisk 11
2) FreePBX 2.11
3) DRBD
4) Heartbeat - but without actually relying on Virtual IP since we use Azure Cloud to do the HA by exposing TCP5060
5) Use Azure's HA method to achieve HA by ensuring that whichever server that "listens" to port TCP5060 will have all the HA DNS name of Asterisk traffic redirected there.
Performance comparison between different versions of Asterisk and different channels.
Presentation at Astricon 2017
Online Trainings
Complete Asterisk PBX Training Coupon http://bit.ly/2E6U7fP
Understanding and Troubleshooting SIP http://bit.ly/2WZKkzy
VoIP Design Training Coupon http://bit.ly/2tlLFmG
VoIP Hacking Training Coupon http://bit.ly/2X4Pjz7
Quick Start to OpenSIPS Coupon http://bit.ly/2Bt72XJ
Books
Complete Asterisk Training Paperback and Kindle Book https://amzn.to/2tm7TFb
Complete Asterisk Training eBook PDF http://bit.ly/2UUebHG
Building Telephony Systems with OpenSIPS http://bit.ly/2SsUt9a
Treinamento Online
SIP em Profundidade Coupon de Treinamento http://bit.ly/2GpatTq
Asterisk Essencial Coupon de Treinamento http://bit.ly/2BzCjs1
Livros:
Guia e Configuração do Asterisk Paperback e Kindle https://amzn.to/2S2lwmZ
Guia de Configuração do Asterisk eBook PDF http://www.asteriskguide.com
Build HA Asterisk on Microsoft Azure using DRBD/HeartbeatSanjay Willie
This was presented during Microsoft Azure's BootCamp on April 25 2015 at Microsoft Malaysia. This particular session was about using OSS Asterisk on Azure with HA capabilities.
Asterisk is an Open Source PBX - but how does it support larger installations? Can you scale it up to thousands of users, with hundreds of simultaneous calls? What about failover, backups and the famous blinking lamps? Olle Johansson goes through various models and describes where some of his current projects with strange names - Pinefrog, Pinana, Pinetree and Bufo fits into this picture.
High Availability Asterisk and FreePBX on Microsoft AzureSanjay Willie
In this slide, we presented to MaGIC Malaysia for entrepreneurs wanting to get an Asterisk business on cloud going. Here, we provide the most basic, lowest level method of having a HA on Microsoft Azure with FreePBX,
Components used with Azure's Ubuntu 14.04 image
1) Asterisk 11
2) FreePBX 2.11
3) DRBD
4) Heartbeat - but without actually relying on Virtual IP since we use Azure Cloud to do the HA by exposing TCP5060
5) Use Azure's HA method to achieve HA by ensuring that whichever server that "listens" to port TCP5060 will have all the HA DNS name of Asterisk traffic redirected there.
Performance comparison between different versions of Asterisk and different channels.
Presentation at Astricon 2017
Online Trainings
Complete Asterisk PBX Training Coupon http://bit.ly/2E6U7fP
Understanding and Troubleshooting SIP http://bit.ly/2WZKkzy
VoIP Design Training Coupon http://bit.ly/2tlLFmG
VoIP Hacking Training Coupon http://bit.ly/2X4Pjz7
Quick Start to OpenSIPS Coupon http://bit.ly/2Bt72XJ
Books
Complete Asterisk Training Paperback and Kindle Book https://amzn.to/2tm7TFb
Complete Asterisk Training eBook PDF http://bit.ly/2UUebHG
Building Telephony Systems with OpenSIPS http://bit.ly/2SsUt9a
Treinamento Online
SIP em Profundidade Coupon de Treinamento http://bit.ly/2GpatTq
Asterisk Essencial Coupon de Treinamento http://bit.ly/2BzCjs1
Livros:
Guia e Configuração do Asterisk Paperback e Kindle https://amzn.to/2S2lwmZ
Guia de Configuração do Asterisk eBook PDF http://www.asteriskguide.com
Brief tour about the features of Asterisk 10, Asterisk 11 and Asterisk 12, as well as features that convert one application considered as PBX like a Framework of developer of voice applications, and a tool so powerful as flexible.
Using Asterisk and Kamailio for Reliable, Scalable and Secure Communication S...Fred Posner
Presentation from AsteriskWorld 2017 at ITEXPO. Discussion of how I started with Asterisk and Kamailio as well as how to build Reliability, Scalability, and Security into your telephony platform.
Presentation done at AstriCon 2014, Las Vegas, USA - how relevant can be SIP signaling traffic in a Real Time Communications platform and where pure SIP signaling servers such as Kamailio can be used.
IIT RTC Conference 2015, Chicago - talk on optimizations for SIP singaling traffic in mobile 3G/4G environments and how Kamailio can be used for such situations.
AnyFirewall Engine is the world’s most widely deployed NAT and firewall traversal toolkit, having been deployed to more than 20 million subscribers by licensees including Comcast, Digital Lifeboat, Intel, Maxis, Nokia, Nokia Siemens Networks, Polycom, BlackBerry, Smartvue, and more.
AnyFirewall Engine can be deployed with AnyFirewall Server and AnyFirewall Gateway for an end-to-end firewall and NAT traversal solution, or can be combined with third-party, standards-based products.
NATs and firewalls break end-to-end connectivity for networked applications including voice, video conferencing, file sharing, and online gaming. AnyFirewall Engine is a software toolkit, based on STUN, TURN, and ICE, which enables guaranteed firewall and NAT traversal for fixed and mobile applications over any fixed or mobile network, through any NAT or firewall, and to any device.
stackconf 2021 | Introducing Thola – A tool for Monitoring and Provisioning N...NETWAYS
Thola is a new open source tool for identifying, reading and monitoring network devices.
It serves as a unified interface for communication with devices from various manufacturers and features a check mode which complies with the monitoring plugins development guidelines.
Therefore it is compatible with Nagios, Icinga, Zabbix, Checkmk, etc.
One new focus of Thola is its integration into Ansible.
It enables inventorying network devices regardless of their vendor or operating system.
This talk will inform about the current state of development as well as planned features.
You will learn how to use Thola to improve inventorying and monitoring your network.
A talk about me discovering new architectures, new ways of building scalable realtime platforms #SIP #WebRTC #Kamailio #MQTT #NODERED
Watch it live at https://www.youtube.com/watch?v=BbfUXUWtxIg
Brief tour about the features of Asterisk 10, Asterisk 11 and Asterisk 12, as well as features that convert one application considered as PBX like a Framework of developer of voice applications, and a tool so powerful as flexible.
Using Asterisk and Kamailio for Reliable, Scalable and Secure Communication S...Fred Posner
Presentation from AsteriskWorld 2017 at ITEXPO. Discussion of how I started with Asterisk and Kamailio as well as how to build Reliability, Scalability, and Security into your telephony platform.
Presentation done at AstriCon 2014, Las Vegas, USA - how relevant can be SIP signaling traffic in a Real Time Communications platform and where pure SIP signaling servers such as Kamailio can be used.
IIT RTC Conference 2015, Chicago - talk on optimizations for SIP singaling traffic in mobile 3G/4G environments and how Kamailio can be used for such situations.
AnyFirewall Engine is the world’s most widely deployed NAT and firewall traversal toolkit, having been deployed to more than 20 million subscribers by licensees including Comcast, Digital Lifeboat, Intel, Maxis, Nokia, Nokia Siemens Networks, Polycom, BlackBerry, Smartvue, and more.
AnyFirewall Engine can be deployed with AnyFirewall Server and AnyFirewall Gateway for an end-to-end firewall and NAT traversal solution, or can be combined with third-party, standards-based products.
NATs and firewalls break end-to-end connectivity for networked applications including voice, video conferencing, file sharing, and online gaming. AnyFirewall Engine is a software toolkit, based on STUN, TURN, and ICE, which enables guaranteed firewall and NAT traversal for fixed and mobile applications over any fixed or mobile network, through any NAT or firewall, and to any device.
stackconf 2021 | Introducing Thola – A tool for Monitoring and Provisioning N...NETWAYS
Thola is a new open source tool for identifying, reading and monitoring network devices.
It serves as a unified interface for communication with devices from various manufacturers and features a check mode which complies with the monitoring plugins development guidelines.
Therefore it is compatible with Nagios, Icinga, Zabbix, Checkmk, etc.
One new focus of Thola is its integration into Ansible.
It enables inventorying network devices regardless of their vendor or operating system.
This talk will inform about the current state of development as well as planned features.
You will learn how to use Thola to improve inventorying and monitoring your network.
A talk about me discovering new architectures, new ways of building scalable realtime platforms #SIP #WebRTC #Kamailio #MQTT #NODERED
Watch it live at https://www.youtube.com/watch?v=BbfUXUWtxIg
Integrating OpenStack To Existing InfrastructureHui Cheng
1. How to integrate OpenStack environment to our existing infrastructure.
2. How to efficiently interconnect the SAE & SWS, while preserving security properties and seamless connection.
3. The challenges we are facing when building & providing OpenStack-based public cloud service and how we solved it.
http://openstackconferencespring2012.sched.org/event/370f9d74a4e9e938a7f6f1e2af0958fe?iframe=yes&w=990&sidebar=no&bg=no#?iframe=yes&w=990&sidebar=no&bg=no#sched-body-outer
Slides of a talk given to the Seattle Chapter of the Cloud Security Alliance. Looks briefly at Architectures, Sources of Log Data, and behavioral signatures in the data and issues and observations around using Big Data products for security.
As presented on 1/31/2018 at Cisco NYC Security Open House. These slides describe how a proper Disaster Recovery infrastructure, with a proper an automated network integration can provide instant recovery from Ransomware attacks and can improve security of the production environment.
Splunk Conf2010: Corporate Express presents Splunk with SAPSplunk
Corporate Express is in the midst of a business transformation program called “next-gen”, rolling out SAP across New Zealand and Australia. This session will detail how they’re using Splunk to plan for capacity and performance requirements, and the how they’re combining multiple charts, graphs, tables and views from disparate systems into a single pane in Splunk. Learn more here: http://www.splunk.com/view/splunk-at-corporate-express/SP-CAAAFNR
Ready, Set, SD-WAN: Best Practices for Assuring Branch ReadinessThousandEyes
ThousandEyes EMEA webinar run on Tuesday October 29th at 1000 GMT. Presented by Ian Waters, Senior Director of EMEA Marketing and Tim Hale, Senior Solutions Engineer. Covering SD-WAN visibility best practices and featuring a live demo of ThousandEyes monitoring a Cisco Viptela SD-WAN.
2. Cloud Services for Business
• eFax®
• eVoice®
• FuseMail®
• Campaigner®
• KeepItSafe®
• Onebox®
• www.j2.com
2
3. Outline
• Why Asterisk?
• What can you do with Asterisk?
• Network Diagrams
• Large Enterprise and Could requirements
• *** Proxy Servers (SBCs)
• Load balancing, routing and failure detection
• Security
• NAT
• Questions?
3
4. Why Asterisk? (1/3)
• It is Open Source
• It has a Community
– Numerous companies and resources
– Forums, mailing lists
– Tools
• No Cost
Open Source is revamping telecom
4
5. Why Asterisk? (2/3)
• More Independence (Not depending on a single
company)
• Continued Enhancements
– The community is growing so are the features
– Interoperability
– WebRTC
5
6. Why Asterisk? (3/3)
• Flexibility, Customization and Integration
– Integrates with your back end
– Business Logic Integration
– Database Integration
– Special Features or Requirements
6
7. What can you do with Asterisk? (1/3)
• Make a phone Call
• Conference, Hold, Transfer, Park,
Announcement, Click to call, and many many
more.
• Basically any Telephony Feature you can
imagine
7
8. What can you do with Asterisk? (2/3)
• Connect Phones/Clients:
– Analog
– SIP Phones
– Soft phone
– Web phone
– Mobile
– WebRTC
• Trunks:
– IP (SIP)
– Digital: T1/E1
– Analog
8
9. What can you do with Asterisk? (3/3)
• PBX
• Telephony and Voice Applications
• Presence and BLF
• Google Voice and WebRTC
• Conferencing, Video, Fax, Auto Attendant, etc. etc.
• The question is: What can’t you do with Asterisk?
9
10. Diagram 1 - SIP Clients: SIP Phones, Soft phones,
Web Phones, Mobile or even WebRTC
10
12. Diagram 3 - Analog/Digital Cards/Gateways
(Single point of failure)
12
13. Large Enterprise and Cloud Solutions
(or simply: Bigger Systems)
• Redundancy
• High Availability (Failure Detection)
• Distribution and Routing Rules
• Performance and Reliability
• Security
• NAT Traversal
13
14. Proxy Servers
What is a Proxy Server? (1/2)
• Registrar Server for Clients
• Routing, Rules, Failure Detection and Re-
Routing
• SIP Signaling, Codec and Digit Manipulation
• Load Balancing
• Scripting
• Resource Allocation
• Rate Limiting
14
15. What is a Proxy Server? (2/2)
• NAT Traversal
• Media Proxy (or Direct Media Path)
• Performance
• Redundancy and High Availability
• Security and Authentication
15
21. Commercial SBCs (Session Border Controller)
• Acme Packet
• Dialogic
• Audiocodes
• Sonus
• And quite a few others
21
22. Fully Redundant Large Enterprise and Could
Solution
• Performance
• Redundancy
• High Availability
• Routing, Rules, Load Balancing and Distribution
• Security
• NAT Traversal
22
26. Security
• Sooner or later
• Close network vs. Open and in between
• What to look for?
• What to examine?
• Each deployment has its own unique
characteristics that can make it safe.
• Secure VoIP – Insecure system => Call patterns
26
27. NAT
• What is NAT?
• Public IP vs. Private IP
• SIP Signaling
• Media
27