====== SIP Router: Core Cookbook ====== This tutorial collects the functions and parameters exported by SIP Router core to configuration file. (Note: if you can't find what you're looking for here, try [[http://git.sip-router.org/cgi-bin/gitweb.cgi?p=sip-router;a=blob_plain;f=NEWS|sip_router/NEWS]], which contains an up-to-date list of features and script commands). **Note:** The parameters on this page are **NOT** in alphabetical order. ===== Config Pre-Processor Directives ===== ==== include_file ==== include_file "path_to_file" Include the content of the file in config before parsing. path_to_file must be a static string. Including file operation is done at startup. If you change the content of included file, you have to restart the SIP server to become effective. The path_to_file can be relative or absolute. If it is not absolute path, first attempt is to locate it relative to current directory, and if fails, relative to directory of the file that includes it. There is no restriction where include can be used or what can contain - any part of config file is ok. There is a limit of maximum 10 includes in depth, otherwise you can use as many includes as you want. Reporting of the cfg file syntax errors prints now the file name for easier troubleshooting. If the included file is not found, the config file parser throws error. You can use also the syntax **#!include_file** or **!!include_file**. Example of usage: route { ... include_file "/sr/checks.cfg" ... } --- /sr/checks.cfg --- if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); exit; } --- ==== import_file ==== import_file "path_to_file" Similar to **include_file**, but does not throw error if the included file is not found. ==== define ==== Control in C-style what parts of the config file are executed. The parts in non-defined zones are not loaded, ensuring lower memory usage and faster execution. Available directives: * #!define NAME - define a keyword * #!define NAME VALUE - define a keyword with value * #!ifdef NAME - check if a keyword is defined * #!ifndef - check if a keyword is not defined * #!else - swtich to false branch of ifdef/ifndef region * #!endif - end ifdef/ifndef region Among benefits: * easy way to enable/disable features (e.g., see default cfg for 3.0.0 -- controlling support of nat traversal, presence, etc...) * switch control for parts where conditional statements were not possible (e.g., global parameters, module settings) * faster by not using conditional statements inside routing blocks when switching between running environments Example: how to make config to be used in two environments, say testbed and production, controlled just by one define to switch between the two modes: ... #!define TESTBED_MODE #!ifdef TESTBED_MODE debug=5 log_stderror=yes listen=192.168.1.1 #!else debug=2 log_stderror=no listen=10.0.0.1 #!endif ... #!ifdef TESTBED_MODE modparam("acc|auth_db|usrloc", "db_url", "mysql://openser:openserrw@localhost/openser_testbed") #!else modparam("acc|auth_db|usrloc", "db_url", "mysql://openser:openserrw@10.0.0.2/openser_production") #!endif ... #!ifdef TESTBED_MODE route[DEBUG] { xlog("SCRIPT: SIP $rm from: $fu to: $ru - srcip: $si"\n); } #!endif ... route { #!ifdef TESTBED_MODE route(DEBUG); #!endif ... } ... * you can define values for IDs #!define MYINT 123 #!define MYSTR "xyz" * defined IDs are replaced at startup, during config parsing, e.g.,: $var(x) = 100 + MYINT; * is interpreted as: $var(x) = 100 + 123; * you can have multi-line defined IDs #!define IDLOOP $var(i) = 0; \ while($var(i)<5) { \ xlog("++++ $var(i)\n"); \ $var(i) = $var(i) + 1; \ } * then in routing block route { ... IDLOOP ... } * number of allowed defines is now set to 256 * notes: * multilines defines are reduced to single line, so line counter should be fine * column counter goes inside the define value, but you have to omit the '\' and CR for the accurate inside-define position * text on the same line as the directive will cause problems. Keep the directive lines clean and only comment on a line before or after. ==== subst ==== * perform substitutions inside the strings of config (note that define is replacing only IDs - alphanumeric tokens not enclosed in quotes) * #!subst offers an easy way to search and replace inside strings before cfg parsing. E.g.,: #!subst "/regexp/subst/flags" * flags is optional and can be: 'i' - ignore case; 'g' - global replacement Example: #!subst "/DBPASSWD/xyz/" modparam("acc", "db_url", "mysql://user:DBPASSWD@localhost/db") * will do the substitution of db password in db_url parameter value ==== substdef ==== #!subst "/ID/subst/" Similar to **subst**, but in addition it adds a **#!define ID subst**. ===== Core Keywords ===== Keywords specific to SIP messages which can be used mainly in '''if''' expressions. ==== af ==== The address family of the received SIP message. It is INET if the message was received over IPv4 or INET6 if the message was received over IPv6. Exampe of usage: if (af==INET6) { log("Message received over IPv6 link\n"); } ==== dst_ip ==== The IP of the local interface where the SIP message was received. When the proxy listens on many network interfaces, makes possible to detect which was the one that received the packet. Example of usage: if(dst_ip==127.0.0.1) { log("message received on loopback interface\n"); }; ==== dst_port ==== The local port where the SIP packet was received. When SIP-Router is listening on many ports, it is useful to learn which was the one that received the SIP packet. Example of usage: if(dst_port==5061) { log("message was received on port 5061\n"); }; ==== from_uri ==== This script variable is a reference to the URI of 'From' header. It can be used to test 'From'- header URI value. Example of usage: if(is_method("INVITE") && from_uri=~".*@sip-router.org") { log("the caller is from sip-router.org\n"); }; ==== method ==== The variable is a reference to the SIP method of the message. Example of usage: if(method=="REGISTER") { log("this SIP request is a REGISTER message\n"); }; ==== msg:len ==== The variable is a reference to the size of the message. It can be used in 'if' constructs to test message's size. Example of usage: if(msg:len>2048) { sl_send_reply("413", "message too large"); exit; }; . ==== proto ==== This variable can be used to test the transport protocol of the SIP message. Example of usage: if(proto==UDP) { log("SIP message received over UDP\n"); }; ==== status ==== If used in onreply_route, this variable is a referece to the status code of the reply. If it used in a standard route block, the variable is a reference to the status of the last reply sent out for the current request. Example of usage: if(status=="200") { log("this is a 200 OK reply\n"); }; ==== snd_af ==== ==== snd_ip ==== ==== snd_port ==== ==== snd_proto ==== ==== src_ip ==== Reference to source IP address of the SIP message. Example of usage: if(src_ip==127.0.0.1) { log("the message was sent from localhost!\n"); }; ==== src_port ==== Reference to source port of the SIP message (from which port the message was sent by previous hop). Example of usage: if(src_port==5061) { log("message sent from port 5061\n"); } ==== to_ip ==== ==== to_port ==== ==== to_uri ==== This variable can be used to test the value of URI from To header. Example of usage: if(to_uri=~"sip:.+@sip-router.org") { log("this is a request for sip-router.org users\n"); }; ==== uri ==== This variable can be used to test the value of the request URI. Example of usage: if(uri=~"sip:.+@sip-router.org") { log("this is a request for sip-router.org users\n"); }; ===== Core Values ===== Values that can be used in '''if''' expressions to check against Core Keywords ==== INET ==== This keyword can be used to test whether the SIP packet was received over an IPv4 connection. Example of usage: if (af==INET) { log("the SIP message was received over IPv4\n"); } ==== INET6 ==== This keyword can be used to test whether the SIP packet was received over an IPv6 connection. Example of usage: if(af==INET6) { log("the SIP message was received over IPv6\n"); }; ==== TCP ==== This keyword can be used to test the value of 'proto' and check whether the SIP packet was received over TCP or not. Example of usage: if(proto==TCP) { log("the SIP message was received over TCP\n"); }; ==== UDP ==== This keyword can be used to test the value of 'proto' and check whether the SIP packet was received over UDP or not. Example of usage: if(proto==UDP) { log("the SIP message was received over UDP\n"); }; ==== max_len ==== Note: This command was removed. ==== myself ==== It is a reference to the list of local IP addresses, hostnames and aliases that has been set in SIP-Router configuration file. This lists contain the domains served by SIP-Router. The variable can be used to test if the host part of an URI is in the list. The usefulness of this test is to select the messages that has to be processed locally or has to be forwarded to another server. See "alias" to add hostnames,IP addresses and aliases to the list. Example of usage: if(uri==myself) { log("the request is for local processing\n"); }; ===== Core parameters ===== ==== advertised_address ==== It can be an IP address or string and represents the address advertised in Via header and other destination lumps (e.g RR header). If empty or not set (default value) the socket address from where the request will be sent is used. WARNING: - don't set it unless you know what you are doing (e.g. nat traversal) - you can set anything here, no check is made (e.g. foo.bar will be accepted even if foo.bar doesn't exist) Example of usage: advertised_address="sip-router.org" ==== advertised_port ==== The port advertised in Via header and other destination lumps (e.g. RR). If empty or not set (default value) the port from where the message will be sent is used. Same warnings as for 'advertised_address'. Example of usage: advertised_port=5080 ==== alias ==== Parameter to set alias hostnames for the server. It can be set many times, each value being added in a list to match the hostname when 'myself' is checked. It is necessary to include the port (the port value used in the "port=" or "listen=" defintions) in the alias definition otherwise the loose_route() function will not work as expected for local forwards. Even if you do not use 'myself' explicitly (for example if you use the domain module), it is often necessary to set the alias as these aliases are used by the loose_routing function and might be needed to handle requests with pre-loaded route set correctly. Example of usage: alias=other.domain.com:5060 alias=another.domain.com:5060 ==== check_via ==== Check if the address in top most via of replies is local. Default value is 0 (check disabled). Example of usage: check_via=1 ==== children ==== Number of children to fork for the UDP interfaces (one set for each interface - ip:port). Default value is 8. For example if you configure the proxy to listen on 3 UDP ports, it will create 3xchildren processes which handle the incoming UDP messages. For configuration of the TCP/TLS worker threads see the option "tcp_children". Example of usage: children=16 ==== chroot ==== The value must be a valid path in the system. If set, sip-router will chroot (change root directory) to its value. Example of usage: chroot=/other/fakeroot ==== corelog ==== Set the debug level used to print some log messages from core, which might become annoying and don't represent critical errors. For example, such case is failure to parse incoming traffic from the network as SIP message, due to someone sending invalid content. Default value is -1 (L_ERR). Example of usage: corelog=1 ==== debug ==== Set the debug level. Higher values make sip-router to print more debug messages. Log messages are usually sent to syslog, except logging to stderr was activated (see [[#log_stderror]] parameter). The following log levels are defined: L_ALERT -5 L_BUG -4 L_CRIT2 -3 L_CRIT -2 L_ERR -1 L_WARN 0 L_NOTICE 1 L_INFO 2 L_DBG 3 A log message will be logged if its log-level is lower than the defined debug level. Log messages are either produced by the the code, or manually in configuration script using log() or xlog() functions. For a production server you usually use a log value between -1 and 2. Default value: L_WARN (debug=0) Examples of usage: * debug=3: print all log messages. This is only usefull for debugging of problems. Note: this produces a lot of data and therefore should not be used on production servers (on a busy server this can easily fill up your hard disk with log messages) * debug=0: This will only log warning, errors and more critical messages. * debug=-6: This will disable all log messages. Value of 'debug' parameter can also be get and set dynamically using 'debug' Core MI function, e.g.: sercmd cfg.get core debug sercmd cfg.set_now_int core debug 2 sercmd cfg.set_now_int core debug -- -1 Note: There is a difference in log-levels between sip-router and Kamailio<=1.5: Up to Kamailio 1.5 the log level started with 4, whereas in sip-router the log level starts with 3. Thus, if you were using debug=3 in older Kamailio/Openser, now use debug=2. For configuration of logging of the memory manager see the parameters [[#memlog]] and [[#memdbg]]. Further information can also be bound at: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages ==== description ==== **Alias name: descr desc** ==== disable_core_dump ==== Can be 'yes' or 'no'. By default core dump limits are set to unlimited or a high enough value. Set this config variable to 'yes' to disable core dump-ing (will set core limits to 0). Default value is 'no'. Example of usage: disable_core_dump=yes ==== disable_tls ==== **Alias name: tls_disable** Global parameter to disable TLS support in the SIP server. Default value is 'no'. Note: Make sure to load the "tls" module to get tls functionality. Example of usage: disable_tls=yes In sip-router TLS is implemented as a module. Thus, the TLS configuration is done as module configuration. For more details see the README of the TLS module: http://sip-router.org/docbook/sip-router/branch/master/modules/tls/tls.html ==== enable_tls ==== **Alias name: tls_enable** Reverse Meaning of the disable_tls parameter. See disable_tls parameter. enable_tls=yes # enable tls support in core ==== exit_timeout ==== **Alias name: ser_kill_timeout** How much time ser will wait for all the shutdown procedures to complete. If this time is exceeded, all the remaining processes are immediately killed and ser exits immediately (it might also generate a core dump if the cleanup part takes too long). Default: 60 s. Use 0 to disable. exit_timeout = seconds ==== flags ==== **Alias name: bool** ==== force_rport ==== yes/no: Similar to the force_rport() function, but activates symmetric response routing globally. ==== fork ==== If set to 'yes' the proxy will fork and run in daemon mode - one process will be created for each network interface the proxy listens to and for each protocol (TCP/UDP), multiplied with the value of 'children' parameter. When set to 'no', the proxy will stay bound to the terminal and runs as single process. First interface is used for listening to. This is equivalent to setting the server option "-F". Default value is 'yes'. Example of usage: fork=no ==== group ==== **Alias name: gid** The group id to run sip-router. Example of usage: group="siprouter" ==== listen ==== Set the network addresses the SIP server should listen to. It can be an IP address, hostname or network iterface id or combination of protocol:address:port (e.g., udp:10.10.10.10:5060). This parameter can be set multiple times in same configuration file, the server listening on all addresses specified. Example of usage: listen=10.10.10.10 listen=eth1:5062 listen=udp:10.10.10.10:5064 If you omit this directive then the SIP server will listen on all interfaces. On start the SIP server reports all the interfaces that it is listening on. Even if you specify only UDP interfaces here, the server will start the TCP engine too. If you don't want this, you need to disable the TCP support completly with the core parameter disable_tcp. If you specify IPv6 addresses, you should put them into square brackets, e.g.: listen=udp:[2a02:1850:1:1::13]:5060 ==== loadmodule ==== Loads a module for later usage in the configuration script. The modules is searched in the path specified by **loadpath**. Prototype: **loadmodule "modulepath"** If modulepath is only modulename or modulename.so, then SIP Router will try to search also for **modulename/modulename.so**, very useful when usining directly the version compiled in the source tree. Example of usage: loadpath "/usr/local/lib/sip-router/:usr/local/lib/sip-router/modules/" loadmodule "/usr/local/lib/sip-router/modules/db_mysql.so" loadmodule "modules_k/usrloc.so" loadmodule "tm" loadmodule "dialplan.so" ==== loadpath ==== **Alias name: mpath** Set the module search path. loadpath takes a list of directories separated by ':'. The list is searched in-order. For each directory d, $d/${module_name}.so and $d/${module_name}/${module_name}.so are tried. This can be used to simplify the loadmodule parameter and can include many paths separated by colon. First module found is used. Example of usage: loadpath "/usr/local/lib/sip-router/modules:/usr/local/lib/sip-router/modules_k" loadmodule "mysql" loadmodule "uri" loadmodule "uri_db" loadmodule "sl" loadmodule "tm" The proxy tries to find the modules in a smart way, e.g: loadmodule "uri" tries to find uri.so in the loadpath, but also uri/uri.so. If you have installed Kamailio and ser modules, and want to load them in a certain order, you can for example use the following technique: # common modules loadpath "/usr/lib/sip-router/modules" loadmodule "db_mysql" ... # Kamailio modules loadpath "/usr/lib/sip-router/modules_k" loadmodule "cfgutils" ... # ser modules loadpath "/usr/lib/sip-router/modules_s" loadmodule "ctl" ... ==== log_facility ==== If sip-router logs to syslog, you can control the facility for logging. Very useful when you want to divert all sip-router logs to a different log file. See the man page syslog(3) for more details. For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages Default value is LOG_DAEMON. Example of usage: log_facility=LOG_LOCAL0 ==== log_name ==== Allows to configure a log_name prefix which will be used when printing to syslog. This is useful to filter log messages when running many instance of sip-router on same server ==== log_stderror ==== With this parameter you can make sip-router to write log and debug messages to standard error. Possible values are: - "yes" - write the messages to standard error - "no" - write the messages to syslog Default value is "no". For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages Example of usage: log_stderror=yes ==== maxbuffer ==== The size in bytes not to be exceeded during the auto-probing procedure of descovering the maximum buffer size for receiving UDP messages. Default value is 262144. Example of usage: maxbuffer=65536 ==== sql_buffer_size ==== The size in bytes of the SQL buffer created for data base queries. For database drivers that use the core db_query library, this will be maximum size object that can be written or read from a database. Default value is 65535. Example of usage: sql_buffer_size=131070 ==== max_while_loops ==== The parameters set the value of maximum loops that can be done within a "while". Comes as a protection to avoid infinite loops in config file execution. Default is 100. Example of usage: max_while_loops=200 ==== mcast_loopback ==== It can be 'yes' or 'no'. If set to 'yes', multicast datagram are sent over loopback. Default value is 'no'. Example of usage: mcast_loopback=yes ==== mcast_ttl ==== Set the value for multicast ttl. Default value is OS specific (usually 1). Example of usage: mcast_ttl=32 ==== memdbg ==== **Alias name: mem_dbg** This parameter specifies on which log level the memory debugger messages will be logged. If memdbg is active, every request (alloc, free) to the memory manager will be logged. (Note: if compile option NO_DEBUG is specified, there will never be logging from the memory manager). Default value: L_DBG (memdbg=3) For example, memdbg=2 means that memory debugging is activated if the debug level is 2 or higher. debug=3 # no memory debugging as debug level memdbg=4 # is lower than memdbg debug=3 # memory debugging is active as the debug level memdbg=2 # is higher or equal memdbg Please see also [[#memlog]] and [[#debug]]. ==== memlog ==== **Alias name: mem_log** This parameter specifies on which log level the memory statistics will be logged. If memlog is active, sip-router will log memory statistics on shutdown (or if requested via signal SIGUSR1). This can be useful for debugging of memory leaks. Default value: L_DBG (memlog=3) For example, memlog=2 means that memory statistics dumping is activated if the debug level is 2 or higher. debug=3 # no memory statistics as debug level memlog=4 # is lower than memlog debug=3 # dumping of memory statistics is active as the memlog=2 # debug level is higher or equal memlog Please see also [[#memdbg]] and [[#debug]]. ==== mem_summary ==== Parameter to control printing of mmemory debugging information displayed on exit or SIGUSR1. The value can be composed by following flags: * 1 - dump all the pkg used blocks (status) * 2 - dump all the shm used blocks (status) * 4 - summary of pkg used blocks * 8 - summary of shm used blocks If set to 0, nothing is printed. Default value: 3 Example: mem_summary=15 ==== mhomed ==== Set the server to try to locate outbound interface on multihomed host. This parameter affects the selection of the outgoing socket for forwarding requests. By default is off (0) - it is rather time consuming. When decativated, the incoming socket will be used or the first one for a different protocol, disregarding the destination location. When activated, sip-router will select a socket that can reach the destination (to be able to connect to the remote address). (sip-router opens a UDP socket to the destination, then it retrieves the local IP which was assigned by the operating system to the new UDP socket. Then this socket will be closed and the retrieved IP address will be used as IP address in the Via/Record-Route headers) Example of usage: mhomed=1 ==== mlock_pages ==== Locks all ser pages into memory making it unswappable (in general one doesn't want his sip proxy swapped out :-)) mlock_pages = yes |no (default no) ==== modparam ==== The modparam command will be used to set the options of the modules. Example: modparam("usrloc", "db_mode", 2) modparam("usrloc", "nat_bflag", 6) See the documenation of the respective module to find out the available options. ==== open_files_limit ==== If set and bigger than the current open file limit, sip-router will try to increase its open file limit to this number. Note: sip-router must be started as root to be able to increase a limit past the hard limit (which, for open files, is 1024 on most systems). Example of usage: open_files_limit=2048 ==== phone2tel ==== By enabling this feature, SIP-Router internally treats SIP URIs with user=phone parameter as TEL URIs. If you do not want thi behavior, you have to turn it off. Default value: 1 (enabled) phone2tel = 0 ==== pmtu_discovery ==== If enabled, the Don't Fragment (DF) bit will be set in outbound IP packets. pmtu_discovery = 0 | 1 (default 0) ==== port ==== The port the SIP server listens to. The default value for it is 5060. Example of usage: port=5080 ==== pv_buffer_size ==== The size in bytes of internal buffer to print dynamic strings with pseudo-variables inside. The default value is 1024. Example of usage: pv_buffer_size=2048 ==== pv_buffer_slots ==== The number of internal buffer slots to print dynamic strings with pseudo-variables inside. The default value is 10. Example of usage: pv_buffer_slots=12 ==== reply_to_via ==== If it is set to 1, any local reply is sent to the IP address advertised in top most Via of the request instead of the IP address from which the request was received. Default value is 0 (off). Example of usage: reply_to_via=0 ==== server_id ==== A configurable unique server id that can be used to discriminate server instances within a cluster of servers when all other information, such as IP addresses are the same. server_id = number ==== server_header ==== Set the value of Server header for replies generated by SIP router. It must contain the header name, but not the ending CRLF. Example of usage: server_header="Server: My Super SIP Server" ==== server_signature ==== This parameter controls the "Server" header in any locally generated message. Example of usage: server_signature=no If it is enabled (default=yes) a header is generated as in the following example: Server: SIP Router ( (/)) ==== shm_force_alloc ==== Tries to pre-fault all the shared memory, before starting. When "on", start time will increase, but combined with mlock_pages will guarantee ser will get all its memory from the beginning (no more kswapd slow downs) shm_force_alloc = yes | no (default no) ==== sip_warning (noisy feedback) ==== Can be 0 or 1. If set to 1 (default value) a 'Warning' header is added to each reply generated by sip-router. The header contains several details that help troubleshooting using the network traffic dumps, but might reveal details of your network infrastructure and internall SIP routing. Example of usage: sip_warning=0 ==== statistics ==== ==== stun_allow_fp ==== Use FINGERPRINT attribute in STUN server stun_allow_fp = 0 | 1 (off | on); default: 1 ==== stun_allow_stun ==== Activate internal STUN server. stun_allow_stun = 0 | 1 (off | on); default 1 Note: STUN support is only available if sip-router/Kamailio was compiled with STUN support ("make STUN=1 cfg") ==== stun_refresh_interval ==== Value for the REFRESH INTERVAL attribute of the internal STUN server stun_refresh_interval = number in millisecond (default 0) ==== syn_branch ==== The parameter controls how the branch parameter is calculated for stateless forwarding. It also applies to statefull forwarding of ACK requests following 2xx responses. If syn_branch is turned off, calculation is derived from transaction key, i.e., as an md5 of From/To/CallID/ CSeq exactly the same way as TM does. This is good for reboot - than messages belonging to transaction lost due to reboot will still be forwarded with the same branch parameter and will be match-able downstream. If it is turned on, just a simple value is put into the branch paramter (better for performance) ==== tos ==== The TOS (Type Of Service) to be used for the sent IP packages (both TCP and UDP). Example of usage: tos=IPTOS_LOWDELAY tos=0x10 tos=IPTOS_RELIABILITY ==== udp_mtu ==== Fallback to another protocol (udp_mtu_try_proto must be set also either globally or per packet) if the constructed request size is greater then udp_mtu. RFC 3261 specified size: 1300. Default: 0 (off). udp_mtu = number ==== udp_mtu_try_proto ==== If udp_mtu !=0 and udp forwarded request size (after adding all the "local" headers) > udp_mtu, use this protocol instead of udp. Only the Via header will be updated (e.g. The Record-Route will be the one built for udp). **Warning:** Although RFC3261 mandates automatic transport protocol changing, enabling this feature can lead to problems with clients which do not support other protocols or are behind a firewall or NAT. Use this only when you know what you do! See also udp_mtu_try_proto(proto) function. Default: UDP (off). Recommended: TCP. udp_mtu_try_proto = TCP|TLS|SCTP|UDP ==== user ==== **Alias name: uid** The user id to run sip-router (sip-router will suid to it). Example of usage: user="siprouter" ==== user_agent_header ==== Set the value of User-Agent header for requests generated by SIP router. It must contain header name as well, but not the ending CRLF. user_agent_header="User-Agent: My Super SIP Server" ==== version_table ==== Set the name of the table holding the table version. Usefull if the proxy is sharing a database within a project and during upgrades. Default value is "version". Example of usage: table_version=sr_table_version ==== workdir ==== **Alias name: wdir** The working directory used by sip-router at runtime. You might find it usefull when come to generating core files :) Example of usage: wdir="/usr/local/siprouter" or wdir=/usr/openser_wd ===== DNS Parameters ===== SIP-Router has an internal DNS resolver with caching capabilities. If this caching resolver is activated (default setting) then the system's stub resolver won't be used. Thus, also local name resolution configuration like /etc/hosts entries will not be used. If the dns cache is deactivated (use_dns_cache=no), then system's resolver will be used. The DNS failover functionality in tm module references directly records in the DNS cache (which saves a lot of memory) and hence DNS based failover only works if the internal DNS cache is enabled. ^ DNS resolver comparison ^ internal resolver ^ system resolver ^ | Caching of resolved records | yes | no* | | NAPTR/SRV lookups with correct weighting | yes | yes | | DNS based failover | yes | no | * Of course you can use the resolving name servers configured in /etc/resolv.conf as caching nameservers. If the internal resolver/cache is enabled you can add/remove records by hand (using sercmd or xmlrpc) using the DNS RPCs, e.g. dns.add_a, dns.add_srv, dns.delete_a a.s.o. For more info on DNS RPCs see http://sip-router.org/docbook/sip-router/branch/master/rpc_list/rpc_list.html#dns.add_a Note: During startup of SIP-Router, before the internal resolver is loaded, the system resolver will be used (it will be used for queries done from module register functions or modparams fixups, but not for queries done from mod_init() or normal fixups). Note: The dns cache uses the DNS servers configured on your server (/etc/resolv.conf), therefore even if you use the internal resolver you should have a working DNS resolving configuration on your server. SIP-Router also allows you to finetune the DNS resolver settings. The maximum time a dns request can take (before failing) is (if dns_try_ipv6 is yes, mutliply it again by 2; if SRV and NAPTR lookups are enabled, it can take even longer!): (dns_retr_time*(dns_retr_no+1)*dns_servers_no)*(search_list_domains) Note: During DNS lookups, the process which performs the DNS lookup blocks. To minimize the blocked time the following parameters can be used (max 2s): dns_try_ipv6=no dns_retr_time=1 dns_retr_no=1 dns_use_search_list=no ==== dns ==== This parameter controls if the SIP server will try doing a DNS lookup on the address in the Via header of a received sip request to decide if adding a received= parameter to the Via is necessary. Note that Vias containing DNS names (instead of IPs) should have received= added, so turning dns to yes is not recommended. Default is no. ==== rev_dns ==== This parameter controls if the SIP server will try doing a reverse DNS lookup on the source IP of a sip request to decide if adding a received= parameter to the Via is necessary (if the Via contains a DNS name instead of an IP address, the result of the reverse dns on the source IP will be compared with the DNS name in the Via). See also dns (the effect is cumulative, both can be turned on and in that case if the DNS lookup test fails the reverse DNS test will be tried). Note that Vias containing DNS names (instead of IPs) should have received= added, so turning rev_dns to yes is not recommended. Default is no. ==== dns_cache_del_nonexp ==== **Alias name: dns_cache_delete_nonexpired** dns_cache_del_nonexp = yes | no (default: no) allow deletion of non-expired records from the cache when there is no more space left for new ones. The last-recently used entries are deleted first. ==== dns_cache_flags ==== dns_cache_flags = number (default 0) - dns cache specific resolver flags, used for overriding the default behaviour (low level). Possible values: 1 - ipv4 only: only DNS A requests are performed, even if ser listens also on ipv6 addresses. 2 - ipv6 only: only DNS AAAA requests are performed. Ignored if dns_try_ipv6 is off or ser doesn't listen on any ipv6 address. 4 - prefer ipv6: try first to resolve a host name to an ipv6 address (DNS AAAA request) and only if this fails try an ipv4 address (DNS A request). By default the ipv4 addresses are preferred. ==== dns_cache_gc_interval ==== Interval in seconds after which the dns cache is garbage collected (default: 120 s) dns_cache_gc_interval = number ==== dns_cache_init ==== If off, the dns cache is not initialized at startup and cannot be enabled runtime, that saves some memory. dns_cache_init = on | off (default on) ==== dns_cache_max_ttl ==== dns_cache_max_ttl = time in seconds (default MAXINT) ==== dns_cache_mem ==== Maximum memory used for the dns cache in KB (default 500 K) dns_cache_mem = number ==== dns_cache_min_ttl ==== dns_cache_min_ttl = time in seconds (default 0) ==== dns_cache_negative_ttl ==== Tells how long to keep negative DNS responses in cache. If set to 0, disables caching of negative responses. Default is 60 (seconds). ==== dns_retr_no ==== Number of dns retransmissions before giving up. Default value is system specific, depends also on the '/etc/resolv.conf' content (usually 4). Example of usage: dns_retr_no=3 ==== dns_retr_time ==== Time in seconds before retrying a dns request. Default value is system specific, depends also on the '/etc/resolv.conf' content (usually 5s). Example of usage: dns_retr_time=3 ==== dns_search_full_match ==== When name was resolved using dns search list, check the domain added in the answer matches with one from the search list (small performance hit, but more safe) dns_search_full_match = yes | no (default yes) ==== dns_servers_no ==== How many dns servers from the ones defined in '/etc/resolv.conf' will be used. Default value is to use all of them. Example of usage: dns_servers_no=2 ==== dns_srv_lb ==== **Alias name: dns_srv_loadbalancing** Enable dns srv weight based load balancing (see doc/dns.txt) dns_srv_lb = yes | no (default no) ==== dns_try_ipv6 ==== Can be 'yes' or 'no'. If it is set to 'yes' and a DNS lookup fails, it will retry it for ipv6 (AAAA record). Default value is 'no'. Note: If dns_try_ipv6 is off, no hostname resolving that would result in an ipv6 address would succeed - it doesn't matter if an actual DNS lookup is to be performed or the host is already an ip address. Thus, if the proxy should forward requests to IPv6 targets, this option must be turned on! Example of usage: dns_try_ipv6=yes ==== dns_try_naptr ==== Enable NAPTR support according to RFC 3263 (see doc/dns.txt for more info) dns_try_naptr = yes | no (default no) ==== dns_sctp_pref, dns_tcp_pref, dns_tls_pref, dns_udp_pref ==== **Alias name: dns_sctp_preference, dns_tcp_preference, dns_tls_preference, dns_udp_preference** Set preference for each protocol when doing naptr lookups. By default dns_udp_pref=30, dns_tcp_pref=20, dns_tls_pref=10 and dns_sctp_pref=20. To use the remote site preferences set all dns_*_pref to the same positive value (e.g. dns_udp_pref=1, dns_tcp_pref=1, dns_tls_pref=1, dns_sctp_pref=1). To completely ignore NAPTR records for a specific protocol, set the corresponding protocol preference to -1 (or any other negative number). (see doc/dns.txt for more info) dns_{udp,tcp,tls,sctp}_pref = number ==== dns_use_search_list ==== Can be 'yes' or 'no'. If set to 'no', the search list in '/etc/resolv.conf' will be ignored (=> fewer lookups => gives up faster). Default value is 'yes'. HINT: even if you don't have a search list defined, setting this option to 'no' will still be "faster", because an empty search list is in fact search "" (so even if the search list is empty/missing there will still be 2 dns queries, eg. foo+'.' and oo+""+'.') Example of usage: dns_use_search_list=no ==== use_dns_cache ==== Tells if DNS responses are cached - this means that the internal DNS resolver (instead of the system's stub resolver) will be used. If set to "off", disables caching of DNS responses and, as side effect, DNS failover. Default is "on". Settings can be changed also during runtime (switch from niternal to system resolver and back). ==== use_dns_failover ==== use_dns_failover = on | off (default off) ===== TCP Parameters ===== The following parameters allows to tweak the TCP behaviour. ==== disable_tcp ==== Global parameter to disable TCP support in the SIP server. Default value is 'no'. Example of usage: disable_tcp=yes ==== tcp_accept_aliases ==== If a message received over a tcp connection has "alias" in its via a new tcp alias port will be created for the connection the message came from (the alias port will be set to the via one). Based on draft-ietf-sip-connect-reuse-00.txt, but using only the port (host aliases are dangerous, involve extra DNS lookups and the need for them is questionable) See force_tcp_alias for more details. Note: For NAT traversal of TCP clients it is better to not use tcp_accept_aliases but just use nathelper module and fix_nated_[contact|register] functions. tcp_accept_aliases= yes|no ==== tcp_accept_no_cl ==== Control whether to throw or not error when there is no Content-Length header for requests received over TCP. It is required to be set to **yes** for XCAP traffic sent over HTTP/1.1 which does not use Content-Length header, but splits large bodies in many chunks. The module **sanity** can be used then to restrict this permission to HTTP traffic only, testing in route block in order to stay RFC3261 compliant about this mandatory header for SIP requests over TCP. Default value is **no**. tcp_accept_no_cl=yes ==== tcp_async ==== **Alias name: tcp_buf_write** If enabled, all the tcp writes that would block / wait for connect to finish, will be queued and attempted latter (see also tcp_conn_wq_max and tcp_wq_max). **Note:** It also applies for TLS. tcp_async = yes | no (default yes) ==== tcp_children ==== Number of children processes to be created for reading from TCP connections. If no value is explicitly set, the same number of TCP children as UDP children (see "children" parameter) will be used. Example of usage: tcp_children=4 ==== tcp_connection_lifetime ==== Lifetime in seconds for TCP sessions. TCP sessions which are inactive for longer than **tcp_connection_lifetime** will be closed by sip-router. Default value is defined in tcp_conn.h: #define DEFAULT_TCP_CONNECTION_LIFETIME 120. Setting this value to 0 will close the TCP connection pretty quick ;-). Note: As many SIP clients are behind NAT/Firewalls, the SIP proxy should not close the TCP connection as it is not capable of opening a new one. Example of usage: tcp_connection_lifetime=3605 ==== tcp_connect_timeout ==== Time in seconds before an ongoing attempt to establish a new TCP connection will be aborted. Lower this value for faster detection of TCP connection problems. The default value is 10s. Example of usage: tcp_connect_timeout=5 ==== tcp_conn_wq_max ==== Maximum bytes queued for write allowed per connection. Attempting to queue more bytes would result in an error and in the connection being closed (too slow). If tcp_write_buf is not enabled, it has no effect. tcp_conn_wq_max = bytes (default 32 K) ==== tcp_crlf_ping ==== Enable SIP outbound TCP keep-alive using PING-PONG (CRLFCRLF - CRLF). tcp_crlf_ping = yes | no default: yes) ==== tcp_defer_accept ==== Tcp accepts will be delayed until some data is received (improves performance on proxies with lots of opened tcp connections). See linux tcp(7) TCP_DEFER_ACCEPT or freebsd ACCF_DATA(0). For now linux and freebsd only. WARNING: the linux TCP_DEFER_ACCEPT is buggy (<=2.6.23) and doesn't work exactly as expected (if no data is received it will retransmit syn acks for ~ 190 s, irrespective of the set timeout and then it will silently drop the connection without sending a RST or FIN). Try to use it together with tcp_syncnt (this way the number of retrans. SYNACKs can be limited => the timeout can be controlled in some way). On FreeBSD: tcp_defer_accept = yes | no (default no) On Linux: tcp_defer_accept = number of seconds before timeout (default disabled) ==== tcp_delayed_ack ==== Initial ACK for opened connections will be delayed and sent with the first data segment (see linux tcp(7) TCP_QUICKACK). For now linux only. tcp_delayed_ack = yes | no (default yes when supported) ==== tcp_fd_cache ==== If enabled FDs used for sending will be cached inside the process calling tcp_send (performance increase for sending over tcp at the cost of slightly slower connection closing and extra FDs kept open) tcp_fd_cache = yes | no (default yes) ==== tcp_keepalive ==== Enables keepalive for tcp (sets SO_KEEPALIVE socket option) tcp_keepalive = yes | no (default yes) ==== tcp_keepcnt ==== Number of keepalives sent before dropping the connection (TCP_KEEPCNT socket option). Linux only. tcp_keepcnt = number (not set by default) ==== tcp_keepidle ==== Time before starting to send keepalives, if the connection is idle (TCP_KEEPIDLE socket option). Linux only. tcp_keepidle = seconds (not set by default) ==== tcp_keepintvl ==== Time interval between keepalive probes, when the previous probe failed (TCP_KEEPINTVL socket option). Linux only. tcp_keepintvl = seconds (not set by default) ==== tcp_linger2 ==== Lifetime of orphaned sockets in FIN_WAIT2 state (overrides tcp_fin_timeout on, see linux tcp(7) TCP_LINGER2). Linux only. tcp_linger2 = seconds (not set by default) ==== tcp_max_connections ==== Maximum number of tcp connections (if the number is exceeded no new tcp connections will be accepted). Default is defined in tcp_conn.h: #define DEFAULT_TCP_MAX_CONNECTIONS 2048 Example of usage: tcp_max_connections=4096 ==== tcp_no_connect ==== Stop outgoing TCP connects (also stops TLS) by setting tcp_no_connect to yes. You can do this any time, even even if sip-router is already started (in this case using sercmd cfg.set_now_int tcp no_connect 1). ==== tcp_poll_method ==== Poll method used (by default the best one for the current OS is selected). For available types see io_wait.c and poll_types.h: none, poll, epoll_lt, epoll_et, sigio_rt, select, kqueue, /dev/poll Example of usage: tcp_poll_method=select ==== tcp_rd_buf_size ==== Buffer size used for tcp reads. A high buffer size increases performance on server with few connections and lot of traffic on them, but also increases memory consumption (so for lots of connection is better to use a low value). Note also that this value limits the maximum datagram size that can be received over tcp. Default: 4096, can be changed at runtime. ==== tcp_send_timeout ==== Time in seconds after a TCP connection will be closed if it is not available for writing in this interval (and sip-router wants to send something on it). Lower this value for faster detection of broken TCP connections. The default value is 10s. Example of usage: tcp_send_timeout=3 ==== tcp_source_ipv4, tcp_source_ipv6 ==== Set the source IP for all outbound TCP connections. If setting of the IP fails, the TCP connection will use the default IP address. tcp_source_ipv4 = IPv4 address tcp_source_ipv6 = IPv6 address ==== tcp_syncnt ==== Number of SYN retransmissions before aborting a connect attempt (see linux tcp(7) TCP_SYNCNT). Linux only. tcp_syncnt = number of syn retr. (default not set) ==== tcp_wq_blk_size ==== Block size used for tcp async writes. It should be big enough to hold a few datagrams. If it's smaller then a datagram (in fact a tcp write()) size, it will be rounded up. It has no influenced on the number of datagrams queued (for that see tcp_conn_wq_max or tcp_wq_max). It has mostly debugging and testing value (can be ignored). Default: 2100 (~ 2 INVITEs), can be changed at runtime. ==== tcp_wq_max ==== Maximum bytes queued for write allowed globally. It has no effect if tcp_write_buf is not enabled. tcp_wq_max = bytes (default 10 Mb) ===== SCTP Parameters ===== ==== disable_sctp ==== Global parameter to disable SCTP support in the SIP server. see enable_sctp Default value is 'auto'. Example of usage: disable_sctp=yes ==== enable_sctp ==== enable_sctp = 0/1/2 - SCTP disabled (0)/ SCTP enabled (1)/auto (2), default auto (2) ==== sctp_children ==== sctp children no (similar to udp children) sctp_children = number ==== sctp_socket_rcvbuf ==== Size for the sctp socket receive buffer **Alias name: sctp_socket_receive_buffer** sctp_socket_rcvbuf = number ==== sctp_socket_sndbuf ==== Size for the sctp socket send buffer **Alias name: sctp_socket_send_buffer** sctp_socket_sndbuf = number ==== sctp_autoclose ==== Number of seconds before autoclosing an idle association (default: 180 s). Can be changed at runtime, but it will affect only new associations. E.g.: $ sercmd cfg.set_now_int sctp autoclose 120 sctp_autoclose = seconds ==== sctp_send_ttl ==== Number of milliseconds before an unsent message/chunk is dropped (default: 32000 ms or 32 s). Can be changed at runtime, e.g.: $ sercmd cfg.set_now_int sctp send_ttl 180000 sctp_send_ttl = milliseconds - n ==== sctp_send_retries ==== How many times to attempt re-sending a message on a re-opened association, if the sctp stack did give up sending it (it's not related to sctp protocol level retransmission). Useful to improve reliability with peers that reboot/restart or fail over to another machine. WARNING: use with care and low values (e.g. 1-3) to avoid "multiplying" traffic to unresponding hosts (default: 0).Can be changed at runtime. sctp_send_retries = 1 ==== sctp_assoc_tracking ==== Controls whether or not sctp associations are tracked inside ser/sip-router. Turning it off would result in less memory being used and slightly better performance, but it will also disable some other features that depend on it (e.g. sctp_assoc_reuse). Default: yes. Can be changed at runtime (sercmd sctp assoc_tracking 0), but changes will be allowed only if all the other features that depend on it are turned off (for example it can be turned off only if first sctp_assoc_reuse was turned off). Note: turning sctp_assoc_tracking on/off will delete all the tracking information for all the currently tracked associations and might introduce a small temporary delay in the sctp processing if lots of associations were tracked. Config options depending on sctp_assoc_tracking being on: sctp_assoc_reuse. sctp_assoc_tracking = yes/no ==== sctp_assoc_reuse ==== Controls sctp association reuse. For now only association reuse for replies is affected by it. Default: yes. Depends on sctp_assoc_tracking being on. Note that even if turned off, if the port in via corresponds to the source port of the association the request was sent on or if rport is turned on (force_rport() or via containing a rport option), the association will be automatically reused by the sctp stack. Can be changed at runtime (sctp assoc_reuse), but it can be turned on only if sctp_assoc_tracking is on. sctp_assoc_reuse = yes/no ==== sctp_max_assocs ==== Maximum number of allowed open sctp associations. -1 means maximum allowed by the OS. Default: -1. Can be changed at runtime (e.g.: sercmd cfg.set_now_int sctp max_assocs 10 ). When the maximum associations number is exceeded and a new associations is opened by a remote host, the association will be immediately closed. However it is possible that some sip packets get through (especially if they are sent early, as part of the 4-way handshake). When ser/sip-router tries to open a new association and the max_assocs is exceeded the exact behaviour depends on whether or not sctp_assoc_tracking is on. If on, the send triggering the active open will gracefully fail, before actually opening the new association and no packet will be sent. However if sctp_assoc_tracking is off, the association will first be opened and then immediately closed. In general this means that the initial sip packet will be sent (as part of the 4-way handshake). ==== sctp_max_assocs ==== sctp_max_assocs = number ==== sctp_srto_initial ==== Initial value of the retr. timeout, used in RTO calculations (default: OS specific). Can be changed at runtime (sctp srto_initial) but it will affect only new associations. sctp_srto_initial = milliseconds ==== sctp_srto_max ==== Maximum value of the retransmission timeout (RTO) (default: OS specific). WARNING: values lower then the sctp sack_delay will cause lots of retransmissions and connection instability (see sctp_srto_min for more details). Can be changed at runtime (sctp srto_max) but it will affect only new associations. sctp_srto_max = milliseconds ==== sctp_srto_min ==== Minimum value of the retransmission timeout (RTO) (default: OS specific). WARNING: values lower then the sctp sack_delay of any peer might cause retransmissions and possible interoperability problems. According to the standard the sack_delay should be between 200 and 500 ms, so avoid trying values lower then 500 ms unless you control all the possible sctp peers and you do make sure their sack_delay is higher or their sack_freq is 1. Can be changed at runtime (sctp srto_min) but it will affect only new associations. sctp_srto_min = milliseconds ==== sctp_asocmaxrxt ==== Maximum retransmissions attempts per association (default: OS specific). It should be set to sctp_pathmaxrxt * no. of expected paths. Can be changed at runtime (sctp asocmaxrxt) but it will affect only new associations. sctp_asocmaxrxt = number ==== sctp_init_max_attempts ==== Maximum INIT retransmission attempts (default: OS specific). Can be changed at runtime (sctp init_max_attempts). sctp_init_max_attempts = number ==== sctp_init_max_timeo ==== Maximum INIT retransmission timeout (RTO max for INIT). Default: OS specific. Can be changed at runtime (sctp init_max_timeo). sctp_init_max_timeo = milliseconds ==== sctp_hbinterval ==== sctp heartbeat interval. Setting it to -1 will disable the heartbeats. Default: OS specific. Can be changed at runtime (sctp hbinterval) but it will affect only new associations. sctp_hbinterval = milliseconds ==== sctp_pathmaxrxt ==== Maximum retransmission attempts per path (see also sctp_asocmaxrxt). Default: OS specific. Can be changed at runtime (sctp pathmaxrxt) but it will affect only new associations. sctp_pathmaxrxt = number ==== sctp_sack_delay ==== Delay until an ACK is generated after receiving a packet. Default: OS specific. WARNING: a value higher then srto_min can cause a lot of retransmissions (and strange problems). A value higher then srto_max will result in very high connections instability. According to the standard the sack_delay value should be between 200 and 500 ms. Can be changed at runtime (sctp sack_delay) but it will affect only new associations. sctp_sack_delay = milliseconds ==== sctp_sack_freq ==== Number of packets received before an ACK is sent (without waiting for the sack_delay to expire). Default: OS specific. Note: on linux with lksctp up to and including 1.0.9 is not possible to set this value (having it in the config will produce a warning on startup). Can be changed at runtime (sctp sack_freq) but it will affect only new associations. sctp_sack_freq = number ==== sctp_max_burst ==== Maximum burst of packets that can be emitted by an association. Default: OS specific. Can be changed at runtime (sctp max_burst) but it will affect only new associations. sctp_max_burst = number ===== Blacklist Parameters ===== ==== dst_blacklist_expire ==== **Alias name: dst_blacklist_ttl** How much time a blacklisted destination will be kept in the blacklist (w/o any update). dst_blacklist_expire = time in s (default 60 s) ==== dst_blacklist_gc_interval ==== How often the garbage collection will run (eliminating old, expired entries). dst_blacklist_gc_interval = time in s (default 60 s) ==== dst_blacklist_init ==== If off, the blacklist is not initialized at startup and cannot be enabled runtime, that saves some memory. dst_blacklist_init = on | off (default on) ==== dst_blacklist_mem ==== Maximum shared memory amount used for keeping the blacklisted destinations. dst_blacklist_mem = size in Kb (default 250 Kb) ==== use_dst_blacklist ==== Enable the destination blacklist: Each failed send attempt will cause the destination to be added to the blacklist. Before any send, this blacklist will be checked and if a match is found, the send is no longer attempted (an error is returned immediately). Note: using the blacklist incurs a small performance penalty. See also doc/dst_blacklist.txt. use_dst_blacklist = on | off (default off) ===== Real-Time Parameters ===== ==== real_time ==== Sets real time priority for all the ser processes, or the timers (bitmask). Possible values: 0 - off 1 - the "fast" timer 2 - the "slow" timer 4 - all processes, except the timers Example: real_time= 7 => everything switched to real time priority. real_time = (flags) (default off) ==== rt_policy ==== Real time scheduling policy, 0 = SCHED_OTHER, 1= SCHED_RR and 2=SCHED_FIFO rt_policy= <0..3> (default 0) ==== rt_prio ==== Real time priority used for everything except the timers, if real_time is enabled. rt_prio = (default 0) ==== rt_timer1_policy ==== **Alias name: rt_ftimer_policy** Like rt_policy but for the "fast" timer. rt_timer1_policy=<0..3> (default 0) ==== rt_timer1_prio ==== **Alias name: rt_fast_timer_prio, rt_ftimer_prio** Like rt_prio but for the "fast" timer process (if real_time & 1). rt_timer1_prio= (default 0) ==== rt_timer2_policy ==== **Alias name: rt_stimer_policy** Like rt_policy but for the "slow" timer. rt_timer2_policy=<0..3> (default 0) ==== rt_timer2_prio ==== **Alias name: rt_stimer_prio** Like rt_prio but for the "slow" timer. rt_timer2_prio= (default 0) ===== Core functions ===== Functions exported by core that can be used in route blocks. ==== add_local_rport ==== Add **rport** parameter to local generated Via header -- see RFC3581. In effect for forwarded SIP requests. Example of usage: add_local_rport(); ==== append_branch ==== Similarly to t_fork_to, it extends destination set by a new entry. The difference is that current URI is taken as new entry. Without parameter, the function copies the current URI into a new branch. Thus, leaving the main branch (the URI) for further manipulation. With a parameter, the function copies the URI in the parameter into a new branch. Thus, the current URI is not manipulated. Note: append_branch(uri) still copies the destination URI, which is usually not what you want. Thus it is better to call append_branch without parameter and then modify the main branch. Note that it's not possible to append a new branch in "on_failure_route" block if a 6XX response has been previously received (it would be against RFC 3261). Example of usage: # if someone calls B, the call should be forwarded to C too. # if (method=="INVITE" && uri=~"sip:B@xx.xxx.xx ") { # copy the current branch (branches[0]) into # a new branch (branches[1]) append_branch(); # all URI manipulation functions work on branches[0] # thus, URI manipulation does not touch the # appended branch (branches[1]) seturi("sip:C@domain"); # now: branch 0 = C@domain # branch 1 = B@xx.xx.xx.xx # and if you need a third destination ... # copy the current branch (branches[0]) into # a new branch (branches[2]) append_branch(); # all URI manipulation functions work on branches[0] # thus, URI manipulation does not touch the # appended branch (branches[1-2]) seturi("sip:D@domain"); # now: branch 0 = D@domain # branch 1 = B@xx.xx.xx.xx # branch 2 = C@domain t_relay(); exit; }; # You could also use append_branch("sip:C@domain") which adds a branch with the new URI: if(method=="INVITE" && uri=~"sip:B@xx.xxx.xx ") { # append a new branch with the second destionation append_branch("sip:user@domain"); # now: branch 0 = B@xx.xx.xx.xx # now: branch 1 = C@domain t_relay(); exit; } ==== avpflags ==== ==== break ==== 'break' statement can be used to end a 'case' block in a 'switch' statement or exit from a 'while' statement. ==== drop ==== Stop the execution of the configuration script and alter the implicit action which is done afterwards. If the function is called in a 'branch_route' then the branch is discarded (implicit action for 'branch_route' is to forward the request). If the function is called in the default 'onreply_route' then you can drop any response. If the function is called in a named 'onreply_route' (transaction stateful) then any provisional reply is discarded. (Implicit action for 'onreply_route' is to send the reply upstream according to Via header.) Example of usage: onreply_route { if(status=="200") { drop(); # this works } } onreply_route[FOOBAR] { if(status=="200") { drop(); # this is ignored } } ==== exit ==== Stop the execution of the configuration script -- it has the same behaviour as return(0). It does not affect the implicit action to be taken after script execution. route { if (route(2)) { xlog("L_NOTICE","method $rm is INVITE\n"); } else { xlog("L_NOTICE","method is $rm\n"); }; } route[2] { if (is_method("INVITE")) { return(1); } else if (is_method("REGISTER")) { return(-1); } else if (is_method("MESSAGE")) { sl_send_reply("403","IM not allowed"); exit; }; } ==== error ==== ==== exec ==== ==== force_rport ==== Force_rport() adds the rport parameter to the first Via header of the received message. Thus, sip-router will add the received port to the top most via header in the SIP message, even if the client does not indicate support for rport. This enables subsequent SIP messages to return to the proper port later on in a SIP transaction. This is useful for NAT traversal, to enforce symmetric response signaling. The rport parameter is defined in RFC 3581. Note: there is also a force_rport parameter which changes the gobal behavior of the SIP proxy. Example of usage: force_rport(); ==== add_rport ==== Alias for force_rport(); ==== force_send_socket ==== Force to send the message from the specified socket (it _must_ be one of the sockets specified with the "listen" directive). If the protocol doesn't match (e.g. UDP message "forced" to a TCP socket) the closest socket of the same protocol is used. Example of usage: force_send_socket(10.10.10.10:5060); ==== force_tcp_alias ==== **Alias name: add_tcp_alias** force_tcp_alias(port) adds a tcp port alias for the current connection (if tcp). Usefull if you want to send all the trafic to port_alias through the same connection this request came from [it could help for firewall or nat traversal]. With no parameters adds the port from the message via as the alias. When the "aliased" connection is closed (e.g. it's idle for too much time), all the port aliases are removed. ==== forward ==== Forward the SIP request to the given destination in stateless mode. This has the format of [proto:]host[:port]. Host can be an IP or hostname; supported protocols are UDP, TCP and TLS. (For TLS, you need to compile the TLS support into core). If proto or port are not specified, NAPTR and SRV lookups will be used to determine them (if possible). If destination parameter is missing, the forward will be done based on RURI. Example of usage: forward("10.0.0.10:5060"); #or forward(); ==== forward_sctp ==== ==== forward_tcp ==== ==== forward_tls ==== ==== forward_udp ==== ==== isavpflagset ==== ==== isflagset ==== Test if a flag is set for current processed message (if the flag value is 1). The value of the parameter can be in range of 0..31. For more see http://www.kamailio.org/dokuwiki/doku.php/tutorials:openser-flag-operations or [[utils:flags]]. Example of usage: if(isflagset(3)) { log("flag 3 is set\n"); }; SIP-Router also supports named flags. They have to be declared at the beginning of the config file with: flags flag1_name[:position], flag2_name ... Example: flags test, a:1, b:2 ; route{ setflag(test); if (isflagset(a)){ # equiv. to isflagset(1) .... } resetflag(b); # equiv. to resetflag(2) ==== log ==== Write text message to standard error terminal or syslog. You can specify the log level as first parameter. For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages Example of usage: log("just some text message\n"); ==== prefix ==== Add the string parameter in front of username in R-URI. Example of usage: prefix("00"); ==== resetavpflag ==== ==== resetflag ==== ==== return ==== The return() function allows you to return any integer value from a called route() block. You can test the value returned by a route using [[devel#retcode|$retcode]] or $? variable. return(0) is same as [[devel#exit|exit()]]; In bool expressions: * Negative and ZERO is FALSE * Positive is TRUE If no value is specified, or a route reaches its end without executing a return statement, it returns 1. If return is used in the top level route is equivalent with exit [val]. Example usage: route { if (route(2)) { xlog("L_NOTICE","method $rm is INVITE\n"); } else { xlog("L_NOTICE","method $rm is REGISTER\n"); }; } route[2] { if (is_method("INVITE")) { return(1); } else if (is_method("REGISTER")) { return(-1); } else { return(0); }; } ==== revert_uri ==== Set the R-URI to the value of the R-URI as it was when the request was received by server (undo all changes of R-URI). Example of usage: revert_uri(); ==== rewritehostport ==== **Alias name: sethostport, sethp** Rewrite the domain part and port of the R-URI with the value of function's parameter. Other parts of the R-URI like username and URI parameters remain unchanged. Example of usage: rewritehostport("1.2.3.4:5080"); ==== rewritehostporttrans ==== **Alias name: sethostporttrans, sethpt** Rewrite the domain part and port of the R-URI with the value of function's parameter. Also allows to specify the transport parameter. Other parts of the R-URI like username and URI parameters remain unchanged. Example of usage: rewritehostporttrans(???"1.2.3.4:5080"???); ==== rewritehost ==== **Alias name: sethost, seth** Rewrite the domain part of the R-URI with the value of function's parameter. Other parts of the R-URI like username, port and URI parameters remain unchanged. Example of usage: rewritehost("1.2.3.4"); ==== rewriteport ==== **Alias name: setport, setp** Rewrites/sets the port part of the R-URI with the value of function's parameter. Example of usage: rewriteport("5070"); ==== rewriteuri ==== **Alias name: seturi** Rewrite the request URI. Example of usage: rewriteuri("sip:test@openser.org"); ==== rewriteuserpass ==== **Alias name: setuserpass, setup** Rewrite the password part of the R-URI with the value of function's parameter. Example of usage: rewriteuserpass("my_secret_passwd"); ==== rewriteuser ==== **Alias name: setuser, setu** Rewrite the user part of the R-URI with the value of function's parameter. Example of usage: rewriteuser("newuser"); ==== route ==== Execute route block given in parameter. Parameter may be name of the block or a string valued expression. Examples of usage: route(REGISTER_REQUEST); route(@received.proto + "_proto_" + $var(route_set)); ==== send ==== Send the original SIP message to a specific destination in stateless mode. No changes are applied to received message, no Via header is added. Host can be an IP or hostname. Used protocol: UDP Parameter is mandatory and has string format. Example of usage: send("10.10.10.10:5070"); ==== send_tcp ==== Send the original SIP message to a specific destination in stateless mode. No changes are applied to received message, no Via header is added. Host can be an IP or hostname. Used protocol: UDP Parameter is mandatory and has string format. Example of usage: send_tcp("10.10.10.10:5070"); ==== set_advertised_address ==== Same as 'advertised_address' but it affects only the current message. It has priority if 'advertised_address' is also set. Example of usage: set_advertised_address("openser.org"); ==== set_advertised_port ==== Same as 'advertised_port' but it affects only the current message. It has priority over 'advertised_port'. Example of usage: set_advertised_port(5080); ==== set_forward_no_connect ==== The message will be forwarded only if there is already an existing connection to the destination. It applies only to connection oriented protocols like TCP and TLS (TODO: SCTP), for UDP it will be ignored. The behavior depends in which route block the function is called: * normal request route: affects stateless forwards and tm. For tm it affects all the branches and the possible retransmissions (in fact there are no retransission for tcp/tls). * onreply_route[0] (stateless): equivalent to set_reply_*() (it's better to use set_reply_* though) * onreply_route[!=0] (tm): ignored * branch_route: affects the current branch only (all messages sent on this branch, like possible retransmissions and CANCELs). * onsend_route: like branch route Example of usage: route { ... if (lookup()) { //requests to local users. They are usually behind NAT so it does not make sense to try //to establish a new TCP connection set_forward_no_connect(); t_relay(); } ... } ==== set_forward_close ==== Try to close the connection (the one on which the message is sent out) after forwarding the current message. Can be used in same route blocks as set_forward_no_connect(). Note: Use with care as you might not receive the replies anymore as the connection is closed. ==== set_reply_no_connect ==== Like set_forward_no_connect(), but for replies to the current message (local generated replies and replies forwarded by tm). The behavior depends in which route block the function is called: * normal request route: affects all replies sent back on the transaction (either local or forwarded) and all local stateless replies (sl_reply()). * onreply_route: affects the current reply (so the send_flags set in the onreply_route will be used if the reply for which they were set is the winning final reply or it's a provisional reply that is forwarded) * branch_route: ignored. * onsend_route: ignored Example of usage: route[4] { //requests from local users. There are usually behind NAT so it does not make sense to try //to establish a new TCP connection for the replies set_reply_no_connect(); // do authentication and call routing ... } ==== set_reply_close ==== Like set_reply_no_connect, but closes the TCP connection after sending. Can be used in same route blocks as set_reply_no_connect. Example of usage: route { ... if (...caller-is-not-registered...) { // reject unregistered client // if request was received via TCP/TLS close the connection, as // this may trigger re-registration of the client. set_reply_close(); sl_send_reply("403","REGISTER first"); exit; } ... } ==== setavpflag ==== ==== setflag ==== Set a flag for current processed message. The value of the parameter can be in range of 0..31. The flags are used to mark the message for special processing (e.g., accounting) or to keep some state (e.g., message authenticated). For more see http://www.kamailio.org/dokuwiki/doku.php/tutorials:openser-flag-operations . Example of usage: setflag(3); ==== strip ==== Strip the first N-th characters from username of R-URI (N is the value of the parameter). Example of usage: strip(3); ==== strip_tail ==== Strip the last N-th characters from username of R-URI (N is the value of the parameter). Example of usage: strip_tail(3); ==== udp_mtu_try_proto(proto) ==== * proto - TCP|TLS|SCTP|UDP - like udp_mtu_try_proto global parameter but works on a per packet basis and not globally. Example: if($rd=="10.10.10.10") udp_mtu_try_proto(SCTP); ==== userphone ==== ===== Routing blocks ===== SIP-Router has support for named routes. Names can be used instead of numbers in all the route commads or route declarations. Note: route(number) is equivalent to route("number") Example: route{ ... route("test"); ... } route["test"]{ ... } ==== route ==== Request routing block. It contains a set of actions to be taken for SIP requests. The main 'route' block identified by 'route{...}' or 'route[0]{...}' is executed for each SIP request. The implicit action after execution of the main route block is to drop the SIP request. To send a reply or forward the request, explicit actions must be called inside the route block. Example of usage: route { if(is_method("OPTIONS")) { # send reply for each options request sl_send_reply("200", "ok"); exit(); } route(1); } route[1] { # forward according to uri forward(); } ==== branch_route ==== Request's branch routing block. It contains a set of actions to be taken for each branch of a SIP request. It is executed only by TM module after it was armed via t_on_branch("branch_route_index"). Example of usage: route { lookup("location"); t_on_branch("1"); if(!t_relay()) { sl_send_reply("500", "relaying failed"); } } branch_route[1] { if(uri=~"10\.10\.10].10") { # discard branches that go to 10.10.10.10 drop(); } } ==== failure_route ==== Failed transaction routing block. It contains a set of actions to be taken each transaction that received only negative replies (>=300) for all branches. The 'failure_route' is executed only by TM module after it was armed via t_on_failure("failure_route_index"). Note that in 'failure_route' is processed the request that initiated the transaction, not the reply . Example of usage: route { lookup("location"); t_on_failure("1"); if(!t_relay()) { sl_send_reply("500", "relaying failed"); } } failure_route[1] { if(is_method("INVITE")) { # call failed - relay to voice mail t_relay_to_udp("voicemail.server.com","5060"); } } ==== onreply_route ==== Reply routing block. It contains a set of actions to be taken for SIP replies. The main 'onreply_route' identified by 'onreply_route {...}' or 'onreply_route[0] {...}' is executed for all replies received. Certain 'onreply_route' blocks can be executed by TM module for special replies. For this, the 'onreply_route' must be armed for the SIP requests whose replies should be processed within it, via t_on_reply("onreply_route_index"). Main 'onreply_route' block is executed before a possible tm 'onreply_route' block. route { lookup("location"); t_on_reply("1"); if(!t_relay()) { sl_send_reply("500", "relaying failed"); } } onreply_route { if(!t_check_trans()) { drop; } } onreply_route[1] { if(status=~"1[0-9][0-9]") { log("provisional response\n"); } } ==== onsend_route ==== The route is executed in when a SIP request is sent out. Only a limited number of commands are allowed (drop, if + all the checks, msg flag manipulations, send(), log(), textops::search()). In this route the final destination of the message is available an can be checked (with snd_ip, snd_port, to_ip, to_port, snd_proto, snd_af). This route is executed only when forwarding requests - it is not executed for replies, retransmissions, or locally generated messages (e.g. via fifo uac). Example: onsend_route{ if(to_ip==1.2.3.4 && !isflagset(12)){ log(1, "message blocked\n"); drop; } } * snd_ip, snd_port - behave like src_ip/src_port, but contain the ip/port ser will use to send the message * to_ip, to_port - like above, but contain the ip/port the message will be sent to (not to be confused with dst_ip/dst_port, which are the destination of the original received request: ser's ip and port on which the message was received) * snd_proto, snd_af - behave like proto/af but contain the protocol/address family that ser will use to send the message * msg:len - when used in an onsend_route, msg:len will contain the length of the message on the wire (after all the changes in the script are applied, Vias are added a.s.o) and not the lentgh of the original message. ==== event_route ==== Generic type of route executed when specific events happen. Prototype: event_route[groupid:eventid] * groupid - should be the name of the module that triggers the event * eventid - some meaningful short text describing the event Implementations: * **event_route[htable:mod-init]** - executed by **htable** module after all modules have been initialised. Good for initialising values in hash tables. modparam("htable", "htable", "a=>size=4;") event_route[htable:mod-init] { $sht(a=>calls-to::10.10.10.10) = 0; $sht(a=>max-calls-to::10.10.10.10) = 100; } route { if(is_method("INVITE") && !has_totag()) { switch($rd) { case "10.10.10.10": lock("calls-to::10.10.10.10"); $sht(a=>calls-to::10.10.10.10) = $sht(a=>calls-to::10.10.10.10) + 1; unlock("calls-to::10.10.10.10"); if($sht(a=>calls-to::10.10.10.10)>$sht(a=>max-calls-to::10.10.10.10)) { sl_send_reply("500", "To many calls to .10"); exit; } break; ... } } } * **event_route [tm:local-request]** - executed on locally generated requests. event_route [tm:local-request] { # Handle locally generated requests xlog("L_INFO", "Routing locally generated $rm to <$ru>\n"); t_set_fr(10000, 10000); } ===== Script statements ===== ==== if ==== IF-ELSE statement Prototype: if(expr) { actions; } else { actions; } The 'expr' should be a valid logical expression. The logical operators that can be used in 'expr': == equal != not equal =~ regular expression matching: Note: Posix regular expressions will be used, e.g. use [[:digit:]]{3} instead of \d\d\d !~ regular expression not-matching > greater >= greater or equal < less <= less or equal && logical AND || logical OR ! logical NOT [ ... ] test operator - inside can be any arithmetic expression Example of usage: if(is_method("INVITE")) { log("this sip message is an invite\n"); } else { log("this sip message is not an invite\n"); } ==== switch ==== SWITCH statement - it can be used to test the value of a pseudo-variable. IMPORTANT NOTE: 'break' can be used only to mark the end of a 'case' branch (as it is in shell scripts). If you are trying to use 'break' outside a 'case' block the script will return error -- you must use 'return' there. Example of usage: route { route(1); switch($retcode) { case -1: log("process INVITE requests here\n"); break; case 1: log("process REGISTER requests here\n"); break; case 2: case 3: log("process SUBSCRIBE and NOTIFY requests here\n"); break; default: log("process other requests here\n"); } # switch of R-URI username switch($rU) { case "101": log("destination number is 101\n"); break; case "102": log("destination number is 102\n"); break; case "103": case "104": log("destination number is 103 or 104\n"); break; default: log("unknown destination number\n"); } } route[1]{ if(is_method("INVITE")) { return(-1); }; if(is_method("REGISTER")) return(1); } if(is_method("SUBSCRIBE")) return(2); } if(is_method("NOTIFY")) return(3); } return(-2); } NOTE: take care while using 'return' - 'return(0)' stops the execution of the script. ==== while ==== while statement Example of usage: $var(i) = 0; while($var(i) < 10) { xlog("counter: $var(i)\n"); $var(i) = $var(i) + 1; } ===== Script operations ===== Assignments together with string and arithmetic operations can be done directly in configuration file. ==== Assignment ==== Assignments can be done like in C, via '=' (equal). The following pseudo-variables can be used in left side of an assignment: * AVPs - to set the value of an AVP * script variables ($var(...)) - to set the value of a script variable * shared variables ($shv(...)) * $ru - to set R-URI * $rd - to set domain part of R-URI * $rU - to set user part of R-URI * $rp - to set the port of R-URI * $du - to set dst URI * $fs - to set send socket * $br - to set branch * $mf - to set message flags value * $sf - to set script flags value * $bf - to set branch flags value $var(a) = 123; For avp's there a way to remove all values and assign a single value in one statement (in other words, delete existing AVPs with same name, add a new one with the right side value). This replaces the := assignment operator from kamailio < 3.0. $(avp(i:3)[*]) = 123; $(avp(i:3)[*]) = $null; ==== String operations ==== For strings, '+' is available to concatenate. $var(a) = "test"; $var(b) = "sip:" + $var(a) + "@" + $fd; ==== Arithmetic operations ==== For numbers, one can use: * + : plus * - : minus * / : divide * * : multiply * % : modulo (Kamailio uses 'mod' instead of '%') * | : bitwise OR * & : bitwise AND * ^ : bitwise XOR * ~ : bitwise NOT * << : bitwise left shift * >> : bitwise right shift Example: $var(a) = 4 + ( 7 & ( ~2 ) ); NOTE: to ensure the priority of operands in expression evaluations do use __parenthesis__. Arithmetic expressions can be used in condition expressions via test operator ' [ ... ] '. if( [ $var(a) & 4 ] ) log("var a has third bit set\n"); ===== Operators ===== - type casts operators: (int), (str). - string comparison: eq, ne - integer comparison: ieq, ine Note: The names are not yet final (use them at your own risk). Future version might use ==/!= only for ints (ieq/ine) and eq/ne for strings (under debate). They are almost equivalent to == or !=, but they force the conversion of their operands (eq to string and ieq to int), allowing among other things better type checking on startup and more optimizations. Non equiv. examples: 0 == "" (true) is not equivalent to 0 eq "" (false: it evaluates to "0" eq ""). "a" ieq "b" (true: (int)"a" is 0 and (int)"b" is 0) is not equivalent to "a" == "b" (false). Note: internally == and != are converted on startup to eq/ne/ieq/ine whenever possible (both operand types can be safely determined at start time and they are the same). - sip-router tries to guess what the user wanted when operators that support multiple types are used on different typed operands. In general convert the right operand to the type of the left operand and then perform the operation. Exception: the left operand is undef. This applies to the following operators: +, == and !=. Special case: undef as left operand: For +: undef + expr -> undef is converted to string => "" + expr. For == and !=: undef == expr -> undef is converted to type_of expr. If expr is undef, then undef == undef is true (internally is converted to string). - expression evaluation changes: sip-router will auto-convert to integer or string in function of the operators: int(undef)==0, int("")==0, int("123")==123, int("abc")==0 str(undef)=="", str(123)=="123". - script operators for dealing with empty/undefined variables defined expr - returns true if expr is defined, and false if not. Note: only a standalone avp or pvar can be undefined, everything else is defined. strlen(expr) - returns the lenght of expr evaluated as string. strempty(expr) - returns true if expr evaluates to the empty string (equivalent to expr==""). Example: if (defined $v && !strempty($v)) $len=strlen($v);