freeswitch配置SBC实例

概述

freeswitch 是一款好用的开源软交换平台。

随着voip客户的发展和运营商网络的升级换代，SBC在对接测试中的应用场景越来越多。

freeswitch通过简单的安装配置即可满足大部分SBC的功能需求。

我们需要有一个稳定版本的fs-sbc的安装过程和配置指南。

在这里记录一下新安装的fs作为sbc的基本配置。

环境

centos：CentOS  release 7.0 (Final)或以上版本

freeswitch：v1.10.7

GCC：4.8.5

fs1.10.7安装

freeswitch-1.10.7基础平台的编译安装见文档“freeswitch1.10.7 on CENTOS7编译安装“。

配置方案

FS-SBC的初始配置方案。

删除多余配置

conf/chatplan/default.xml

conf/dialplan/*

conf/directory/*

conf/ivr_menus/*

conf/jingle_profiles/*

conf/mrcp_profiles/*

conf/sip_profile, external-ipv6 external-ipv6.xml internal-ipv6.xml internal.xml

conf/skinny_profiles/*

conf配置

vars.xml

<X-PRE-PROCESS cmd="set" data="default_password=dq.1.2.3.4.warn"/>

<X-PRE-PROCESS cmd="set" data="global_codec_prefs=PCMA,PCMU"/>

<X-PRE-PROCESS cmd="set" data="outbound_codec_prefs=PCMA,PCMU"/>

<X-PRE-PROCESS cmd="set" data="console_loglevel=debug"/>

autoload_configs/acl.conf.xml

<list name="list_out" default="deny">

<node type="allow" cidr="1.2.3.4/32"/>

</list>

<list name="list_in" default="deny">

<node type="allow" cidr="1.2.3.4/32"/>

</list>

autoload_configs/log.conf.xml

<param name="rollover" value="104857600"/>

<!-- <param name="maximum-rotate" value="32"/> -->

autoload_configs/modules.conf.xml

<!-- <load module="mod_verto"/> -->

<!-- <load module="mod_conference"/> -->

<load module="mod_translate"/>

autoload_configs/sofia.conf.xml

autoload_configs/switch.conf.xml

<param name="min-idle-cpu" value="20"/>

<param name="max-sessions" value="60000"/>

<param name="sessions-per-second" value="1000"/>

<param name="loglevel" value="debug"/>

<param name="rtp-start-port" value="20000"/>

<param name="rtp-end-port" value="60000"/>

autoload_configs/translate.conf.xml

<profile name="GB-CALLER-IN">

<rule regex="^(12345678)$" replace="$1"/>

</profile>

<profile name="GB-CALLER-OUT">

<rule regex="^\+86([2-9]\d+)$" replace="0$1"/>

<rule regex="^\+86(10\d+)$" replace="0$1"/>

<rule regex="^\+86(1\d+)$" replace="$1"/>

</profile>

<profile name="GB-DEST-IN">

<rule regex="^(1\d+)$" replace="+86$1"/>

<rule regex="^0(\d+)$" replace="+86$1"/>

</profile>

<profile name="GB-DEST-OUT">

<rule regex="^\+86010(12345678)$" replace="$1"/>

</profile>

dialplan/sbc-dp.xml

<include>

<X-PRE-PROCESS cmd="set" data="callout_answer_timeout=60"/>

<X-PRE-PROCESS cmd="set" data="sip_contact_user=SBC001"/>

<context name="out2in">

<extension name="sbc-out2in" continue="true">

<condition field="${acl(${network_addr} list_out)}" expression="true"/>

<condition field="destination_number" expression="^(\d+)$">

<action application="set" data="effective_caller_id_name=_undef_" />

<action application="set" data="effective_caller_id_number=${translate(${caller_id_number} GB-CALLER-IN)}" />

<action application="set" data="destination_number=${translate(${destination_number} GB-DEST-IN)}" />

<action application="set" data="inherit_codec=true"/>

<action application="set" data="sip_copy_custom_headers=false"/>

<action application="set" data="ringback=${cn-ring}"/>

<action application="export" data="nolocal:sip_h_Allow=INVITE,ACK,BYE,CANCEL,REGISTER,INFO,PRACK,SUBSCRIBE,NOTIFY,UPDATE,MESSAGE,REFER"/>

<action application="unset" data="X-FS-Support"/>

<action application="bridge" data="{${as_record_param},sip_h_CSeq=1 INVITE,

sip_contact_user=${effective_caller_id_number},sip_invite_contact_params=user=phone,sip_cid_type=none,

sip_invite_to_params=user=phone,sip_invite_from_params=transport=udp;user=phone,sip_invite_from_uri=${effective_caller_id_number}@1.2.3.4:5066,

sip_invite_params=user=phone,sip_invite_call_id=${sip_call_id}

}sofia/external5066/sip:${destination_number}@1.2.3.4:5060"/>

</condition>

</extension>

</context>

<context name="in2out">

<extension name="sbc-in2out" continue="true">

<condition field="${acl(${network_addr} list_in)}" expression="true"/>

<condition field="destination_number" expression="^\+(\d+)$">

<action application="set" data="effective_caller_id_name=${translate(${caller_id_name} GB-CALLER-OUT)}" />

<action application="set" data="effective_caller_id_number=${translate(${caller_id_number} GB-CALLER-OUT)}" />

<action application="set" data="destination_number=${translate(${destination_number} GB-DEST-OUT)}" />

<action application="set" data="inherit_codec=true"/>

<action application="set" data="sip_copy_custom_headers=false"/>

<action application="bridge" data="{${as_record_param},

sip_invite_params=user=phone,sip_invite_call_id=${sip_call_id}

}sofia/external3060/sip:${destination_number}@1.2.3.4:5080"/>

</condition>

</extension>

</context>

</include>

sip_profiles/external3060.xml

<profile name="external3060">

<param name="user-agent-string" value="sbc001"/>

<param name="username" value="sbc001"/>

<param name="pass-callee-id" value="false"/>

<param name="session-timeout" value="10800"/>

<param name="sip-port" value="3060"/>

<param name="context" value="out2in"/>

<param name="enable-100rel" value="true"/>

<param name="rtp-ip" value="$${local_ip_v4}"/>

<param name="sip-ip" value="$${local_ip_v4}"/>

<param name="ext-rtp-ip" value="$${external_rtp_ip}"/>

<param name="ext-sip-ip" value="$${external_sip_ip}"/>

sip_profiles/external5066.xml

<profile name="external5066">

<param name="user-agent-string" value="sbc001"/>

<param name="username" value="sbc001"/>

<param name="pass-callee-id" value="false"/>

<param name="session-timeout" value="10800"/>

<param name="sip-port" value="5066"/>

<param name="context" value="in2out"/>

<param name="enable-100rel" value="true"/>

<param name="rtp-ip" value="$${local_ip_v4}"/>

<param name="sip-ip" value="$${local_ip_v4}"/>

<param name="ext-rtp-ip" value="$${external_rtp_ip}"/>

<param name="ext-sip-ip" value="$${external_sip_ip}"/>

bin脚本

bin目录下需要一些简单的维护脚本。

clear_log.sh

clear_wav.sh

monitorfs.sh

防火墙

防火墙配置结果如下。

ports: 22/tcp 20000-60000/udp

rule family="ipv4" source address="1.2.3.4/32" port port="3060" protocol="udp" accept

rule family="ipv4" source address="1.2.3.4/32" port port="5066" protocol="udp" accept

系统配置

系统资源限制

vi /etc/security/limits.conf

* soft core unlimited

* hard core unlimited

* soft data unlimited

* hard data unlimited

* soft fsize unlimited

* hard fsize unlimited

* soft sigpending unlimited

* hard sigpending unlimited

* soft nofile 65536

* hard nofile 65536

* soft msgqueue unlimited

* hard msgqueue unlimited

* soft nproc 65536

* hard nproc 65536

* soft locks unlimited

* hard locks unlimited

* soft memlock unlimited

* hard memlock unlimited

修改账户启动执行脚本。

vi ./bash_profile

ulimit -c unlimited

ulimit -d unlimited

ulimit -f unlimited

ulimit -i unlimited

ulimit -n 65536

ulimit -q unlimited

ulimit -u 65536

ulimit -x unlimited

ulimit -l unlimited

系统端口范围

查看linux系统端口范围

sysctl -a | grep ipv4.ip_local_port_range

修改sysctl.conf

vi /etc/sysctl.conf

net.ipv4.ip_local_port_range = 20000    60999

使sysctl配置立即生效：

sysctl -p

非本机IP绑定

vi /etc/sysctl.conf

net.ipv4.ip_nonlocal_bind=1

定时任务

sudo crontab -e

00 4 * * * sh /usr/local/freeswitch/bin/clear_log.sh 15

30 4 * * * /usr/sbin/ntpdate cn.pool.ntp.org; /sbin/hwclock -w

0 5 * * * /usr/local/freeswitch/bin/fs_cli -x "fsctl sync_clock_when_idle"

总结

freeswitch的基础功能基本可以满足SBC的功能需求，通过简单配置即可使用。

sbc作为公私网的信令和媒体通道，安全性一定是最重要的考虑项。

空空如常

求真得真