Kamailio SIP Server v3.2.x: Core Cookbook
This tutorial collects the functions and parameters exported by Kamailio core to configuration file.
Note: The parameters on this page are NOT in alphabetical order.
Config Pre-Processor Directives
include_file
include_file "path_to_file"
Include the content of the file in config before parsing. path_to_file must be a static string. Including file operation is done at startup. If you change the content of included file, you have to restart the SIP server to become effective.
The path_to_file can be relative or absolute. If it is not absolute path, first attempt is to locate it relative to current directory, and if fails, relative to directory of the file that includes it. There is no restriction where include can be used or what can contain - any part of config file is ok. There is a limit of maximum 10 includes in depth, otherwise you can use as many includes as you want. Reporting of the cfg file syntax errors prints now the file name for easier troubleshooting.
If the included file is not found, the config file parser throws error.
You can use also the syntax #!include_file or !!include_file.
Example of usage:
route {
...
include_file "/sr/checks.cfg"
...
}
--- /sr/checks.cfg ---
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
exit;
}
---
import_file
import_file "path_to_file"
Similar to include_file, but does not throw error if the included file is not found.
define
Control in C-style what parts of the config file are executed. The parts in non-defined zones are not loaded, ensuring lower memory usage and faster execution.
Available directives:
-
!define NAME - define a keyword
-
!define NAME VALUE - define a keyword with value
-
!ifdef NAME - check if a keyword is defined
-
!ifndef - check if a keyword is not defined
-
!else - swtich to false branch of ifdef/ifndef region
-
!endif - end ifdef/ifndef region
-
!trydef - add a define if not already defined
-
!redefine - force redefinition even if already defined
Among benefits:
- easy way to enable/disable features (e.g., see default cfg for 3.0.0 -- controlling support of nat traversal, presence, etc...)
- switch control for parts where conditional statements were not possible (e.g., global parameters, module settings)
- faster by not using conditional statements inside routing blocks when switching between running environments
Example: how to make config to be used in two environments, say testbed and production, controlled just by one define to switch between the two modes:
...
#!define TESTBED_MODE
#!ifdef TESTBED_MODE
debug=5
log_stderror=yes
listen=192.168.1.1
#!else
debug=2
log_stderror=no
listen=10.0.0.1
#!endif
...
#!ifdef TESTBED_MODE
modparam("acc|auth_db|usrloc", "db_url",
"mysql://openser:openserrw@localhost/openser_testbed")
#!else
modparam("acc|auth_db|usrloc", "db_url",
"mysql://openser:openserrw@10.0.0.2/openser_production")
#!endif
...
#!ifdef TESTBED_MODE
route[DEBUG] {
xlog("SCRIPT: SIP $rm from: $fu to: $ru - srcip: $si"\n);
}
#!endif
...
route {
#!ifdef TESTBED_MODE
route(DEBUG);
#!endif
...
}
...
- you can define values for IDs
- defined IDs are replaced at startup, during config parsing, e.g.,:
- is interpreted as:
- you can have multi-line defined IDs
#!define IDLOOP $var(i) = 0; \
while($var(i)<5) { \
xlog("++++ $var(i)\n"); \
$var(i) = $var(i) + 1; \
}
- then in routing block
- number of allowed defines is now set to 256
- notes:
- multilines defines are reduced to single line, so line counter should be fine
- column counter goes inside the define value, but you have to omit the '\' and CR for the accurate inside-define position
- text on the same line as the directive will cause problems. Keep the directive lines clean and only comment on a line before or after.
subst
- perform substitutions inside the strings of config (note that define is replacing only IDs - alphanumeric tokens not enclosed in quotes)
-
!subst offers an easy way to search and replace inside strings
before cfg parsing. E.g.,:
- flags is optional and can be: 'i' - ignore case; 'g' - global replacement
Example:
- will do the substitution of db password in db_url parameter value
substdef
Similar to subst, but in addition it adds a #!define ID subst.
Core Keywords
Keywords specific to SIP messages which can be used mainly in 'if
'
expressions.
af
The address family of the received SIP message. It is INET if the message was received over IPv4 or INET6 if the message was received over IPv6.
Exampe of usage:
dst_ip
The IP of the local interface where the SIP message was received. When the proxy listens on many network interfaces, makes possible to detect which was the one that received the packet.
Example of usage:
dst_port
The local port where the SIP packet was received. When SIP-Router is listening on many ports, it is useful to learn which was the one that received the SIP packet.
Example of usage:
from_uri
This script variable is a reference to the URI of 'From' header. It can be used to test 'From'- header URI value.
Example of usage:
if(is_method("INVITE") && from_uri=~".*@sip-router.org")
{
log("the caller is from sip-router.org\n");
};
method
The variable is a reference to the SIP method of the message.
Example of usage:
msg:len
The variable is a reference to the size of the message. It can be used in 'if' constructs to test message's size.
Example of usage:
.
proto
This variable can be used to test the transport protocol of the SIP message.
Example of usage:
status
If used in onreply_route, this variable is a referece to the status code of the reply. If it used in a standard route block, the variable is a reference to the status of the last reply sent out for the current request.
Example of usage:
snd_af
snd_ip
snd_port
snd_proto
src_ip
Reference to source IP address of the SIP message.
Example of usage:
src_port
Reference to source port of the SIP message (from which port the message was sent by previous hop).
Example of usage:
to_ip
to_port
to_uri
This variable can be used to test the value of URI from To header.
Example of usage:
uri
This variable can be used to test the value of the request URI.
Example of usage:
Core Values
Values that can be used in 'if
' expressions to check against Core
Keywords
INET
This keyword can be used to test whether the SIP packet was received over an IPv4 connection.
Example of usage:
INET6
This keyword can be used to test whether the SIP packet was received over an IPv6 connection.
Example of usage:
TCP
This keyword can be used to test the value of 'proto' and check whether the SIP packet was received over TCP or not.
Example of usage:
UDP
This keyword can be used to test the value of 'proto' and check whether the SIP packet was received over UDP or not.
Example of usage:
max_len
Note: This command was removed.
myself
It is a reference to the list of local IP addresses, hostnames and aliases that has been set in SIP-Router configuration file. This lists contain the domains served by SIP-Router.
The variable can be used to test if the host part of an URI is in the list. The usefulness of this test is to select the messages that has to be processed locally or has to be forwarded to another server.
See "alias" to add hostnames,IP addresses and aliases to the list.
Example of usage:
Core parameters
advertised_address
It can be an IP address or string and represents the address advertised in Via header and other destination lumps (e.g RR header). If empty or not set (default value) the socket address from where the request will be sent is used.
WARNING:
- don't set it unless you know what you are doing (e.g. nat traversal)
- you can set anything here, no check is made (e.g. foo.bar will be accepted even if foo.bar doesn't exist)
Example of usage:
advertised_address="sip-router.org"
advertised_port
The port advertised in Via header and other destination lumps (e.g. RR). If empty or not set (default value) the port from where the message will be sent is used. Same warnings as for 'advertised_address'.
Example of usage:
advertised_port=5080
alias
Parameter to set alias hostnames for the server. It can be set many times, each value being added in a list to match the hostname when 'myself' is checked.
It is necessary to include the port (the port value used in the "port=" or "listen=" defintions) in the alias definition otherwise the loose_route() function will not work as expected for local forwards. Even if you do not use 'myself' explicitly (for example if you use the domain module), it is often necessary to set the alias as these aliases are used by the loose_routing function and might be needed to handle requests with pre-loaded route set correctly.
Example of usage:
alias=other.domain.com:5060
alias=another.domain.com:5060
check_via
Check if the address in top most via of replies is local. Default value is 0 (check disabled).
Example of usage:
check_via=1
children
Number of children to fork for the UDP interfaces (one set for each interface - ip:port). Default value is 8. For example if you configure the proxy to listen on 3 UDP ports, it will create 3xchildren processes which handle the incoming UDP messages.
For configuration of the TCP/TLS worker threads see the option "tcp_children".
Example of usage:
children=16
chroot
The value must be a valid path in the system. If set, sip-router will chroot (change root directory) to its value.
Example of usage:
chroot=/other/fakeroot
corelog
Set the debug level used to print some log messages from core, which might become annoying and don't represent critical errors. For example, such case is failure to parse incoming traffic from the network as SIP message, due to someone sending invalid content.
Default value is -1 (L_ERR).
Example of usage:
corelog=1
debug
Set the debug level. Higher values make sip-router to print more debug messages. Log messages are usually sent to syslog, except logging to stderr was activated (see #log_stderror parameter).
The following log levels are defined:
L_ALERT -5
L_BUG -4
L_CRIT2 -3
L_CRIT -2
L_ERR -1
L_WARN 0
L_NOTICE 1
L_INFO 2
L_DBG 3
A log message will be logged if its log-level is lower than the defined debug level. Log messages are either produced by the the code, or manually in configuration script using log() or xlog() functions. For a production server you usually use a log value between -1 and 2.
Default value: L_WARN (debug=0)
Examples of usage:
- debug=3: print all log messages. This is only useful for debugging of problems. Note: this produces a lot of data and therefore should not be used on production servers (on a busy server this can easily fill up your hard disk with log messages)
- debug=0: This will only log warning, errors and more critical messages.
- debug=-6: This will disable all log messages.
Value of 'debug' parameter can also be obtained and set dynamically using 'debug' Core MI function, e.g.:
sercmd cfg.get core debug
sercmd cfg.set_now_int core debug 2
sercmd cfg.set_now_int core debug -- -1
Note: There is a difference in log-levels between sip-router and Kamailio\<=1.5: Up to Kamailio 1.5 the log level started with 4, whereas in sip-router the log level starts with 3. Thus, if you were using debug=3 in older Kamailio/Openser, now use debug=2.
For configuration of logging of the memory manager see the parameters #memlog and #memdbg.
Further information can also be bound at: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages
description
Alias name: descr desc
disable_core_dump
Can be 'yes' or 'no'. By default core dump limits are set to unlimited or a high enough value. Set this config variable to 'yes' to disable core dump-ing (will set core limits to 0).
Default value is 'no'.
Example of usage:
disable_core_dump=yes
disable_tls
Alias name: tls_disable
Global parameter to disable TLS support in the SIP server. Default value is 'no'.
Note: Make sure to load the "tls" module to get tls functionality.
Example of usage:
disable_tls=yes
In sip-router TLS is implemented as a module. Thus, the TLS configuration is done as module configuration. For more details see the README of the TLS module: http://sip-router.org/docbook/sip-router/branch/master/modules/tls/tls.html
enable_tls
Alias name: tls_enable
Reverse Meaning of the disable_tls parameter. See disable_tls parameter.
enable_tls=yes # enable tls support in core
exit_timeout
Alias name: ser_kill_timeout
How much time ser will wait for all the shutdown procedures to complete. If this time is exceeded, all the remaining processes are immediately killed and ser exits immediately (it might also generate a core dump if the cleanup part takes too long).
Default: 60 s. Use 0 to disable.
exit_timeout = seconds
flags
Alias name: bool
force_rport
yes/no: Similar to the force_rport() function, but activates symmetric response routing globally.
fork
If set to 'yes' the proxy will fork and run in daemon mode - one process will be created for each network interface the proxy listens to and for each protocol (TCP/UDP), multiplied with the value of 'children' parameter.
When set to 'no', the proxy will stay bound to the terminal and runs as single process. First interface is used for listening to. This is equivalent to setting the server option "-F".
Default value is 'yes'.
Example of usage:
fork=no
group
Alias name: gid
The group id to run sip-router.
Example of usage:
group="siprouter"
listen
Set the network addresses the SIP server should listen to. It can be an
IP address, hostname or network iterface id or combination of
protocol:address:port (e.g.,
Example of usage:
listen=10.10.10.10
listen=eth1:5062
listen=udp:10.10.10.10:5064
If you omit this directive then the SIP server will listen on all interfaces. On start the SIP server reports all the interfaces that it is listening on. Even if you specify only UDP interfaces here, the server will start the TCP engine too. If you don't want this, you need to disable the TCP support completly with the core parameter disable_tcp.
If you specify IPv6 addresses, you should put them into square brackets, e.g.:
listen=udp:[2a02:1850:1:1::13]:5060
loadmodule
Loads a module for later usage in the configuration script. The modules is searched in the path specified by loadpath.
Prototype: loadmodule "modulepath"
If modulepath is only modulename or modulename.so, then Kamailio will try to search also for modulename/modulename.so, very useful when using directly the version compiled in the source tree.
Example of usage:
loadpath "/usr/local/lib/sip-router/:usr/local/lib/sip-router/modules/"
loadmodule "/usr/local/lib/sip-router/modules/db_mysql.so"
loadmodule "modules_k/usrloc.so"
loadmodule "tm"
loadmodule "dialplan.so"
loadpath
Alias name: mpath
Set the module search path. loadpath takes a list of directories separated by ':'. The list is searched in-order. For each directory d, $d/${module_name}.so and $d/${module_name}/${module_name}.so are tried.
This can be used to simplify the loadmodule parameter and can include many paths separated by colon. First module found is used.
Example of usage:
loadpath "/usr/local/lib/sip-router/modules:/usr/local/lib/sip-router/modules_k"
loadmodule "mysql"
loadmodule "uri"
loadmodule "uri_db"
loadmodule "sl"
loadmodule "tm"
The proxy tries to find the modules in a smart way, e.g: loadmodule "uri" tries to find uri.so in the loadpath, but also uri/uri.so.
If you have installed Kamailio and ser modules, and want to load them in a certain order, you can for example use the following technique:
# common modules
loadpath "/usr/lib/sip-router/modules"
loadmodule "db_mysql"
...
# Kamailio modules
loadpath "/usr/lib/sip-router/modules_k"
loadmodule "cfgutils"
...
# ser modules
loadpath "/usr/lib/sip-router/modules_s"
loadmodule "ctl"
...
log_facility
If sip-router logs to syslog, you can control the facility for logging. Very useful when you want to divert all sip-router logs to a different log file. See the man page syslog(3) for more details.
For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages
Default value is LOG_DAEMON.
Example of usage:
log_facility=LOG_LOCAL0
log_name
Allows to configure a log_name prefix which will be used when printing to syslog. This is useful to filter log messages when running many instance of sip-router on same server
log_stderror
With this parameter you can make sip-router to write log and debug messages to standard error. Possible values are:
- "yes" - write the messages to standard error
- "no" - write the messages to syslog
Default value is "no".
For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages
Example of usage:
log_stderror=yes
maxbuffer
The size in bytes multiplied by 2 not to be exceeded during the auto-probing procedure of discovering the maximum buffer size for receiving UDP messages. Default value is 262144.
Example of usage:
maxbuffer=65536
sql_buffer_size
The size in bytes of the SQL buffer created for data base queries. For database drivers that use the core db_query library, this will be maximum size object that can be written or read from a database. Default value is 65535.
Example of usage:
sql_buffer_size=131070
max_while_loops
The parameters set the value of maximum loops that can be done within a "while". Comes as a protection to avoid infinite loops in config file execution. Default is 100.
Example of usage:
max_while_loops=200
mcast_loopback
It can be 'yes' or 'no'. If set to 'yes', multicast datagram are sent over loopback. Default value is 'no'.
Example of usage:
mcast_loopback=yes
mcast_ttl
Set the value for multicast ttl. Default value is OS specific (usually 1).
Example of usage:
mcast_ttl=32
memdbg
Alias name: mem_dbg
This parameter specifies on which log level the memory debugger messages will be logged. If memdbg is active, every request (alloc, free) to the memory manager will be logged. (Note: if compile option NO_DEBUG is specified, there will never be logging from the memory manager).
Default value: L_DBG (memdbg=3)
For example, memdbg=2 means that memory debugging is activated if the debug level is 2 or higher.
debug=3 # no memory debugging as debug level
memdbg=4 # is lower than memdbg
debug=3 # memory debugging is active as the debug level
memdbg=2 # is higher or equal memdbg
Please see also #memlog and #debug.
memlog
Alias name: mem_log
This parameter specifies on which log level the memory statistics will be logged. If memlog is active, sip-router will log memory statistics on shutdown (or if requested via signal SIGUSR1). This can be useful for debugging of memory leaks.
Default value: L_DBG (memlog=3)
For example, memlog=2 means that memory statistics dumping is activated if the debug level is 2 or higher.
debug=3 # no memory statistics as debug level
memlog=4 # is lower than memlog
debug=3 # dumping of memory statistics is active as the
memlog=2 # debug level is higher or equal memlog
Please see also #memdbg and #debug.
mem_summary
Parameter to control printing of memory debugging information displayed on exit or SIGUSR1. The value can be composed by following flags:
- 1 - dump all the pkg used blocks (status)
- 2 - dump all the shm used blocks (status)
- 4 - summary of pkg used blocks
- 8 - summary of shm used blocks
If set to 0, nothing is printed.
Default value: 3
Example:
mem_summary=15
mhomed
Set the server to try to locate outbound interface on multihomed host. This parameter affects the selection of the outgoing socket for forwarding requests. By default is off (0) - it is rather time consuming. When deactivated, the incoming socket will be used or the first one for a different protocol, disregarding the destination location. When activated, sip-router will select a socket that can reach the destination (to be able to connect to the remote address). (sip-router opens a UDP socket to the destination, then it retrieves the local IP which was assigned by the operating system to the new UDP socket. Then this socket will be closed and the retrieved IP address will be used as IP address in the Via/Record-Route headers)
Example of usage:
mhomed=1
mlock_pages
Locks all ser pages into memory making it unswappable (in general one doesn't want his sip proxy swapped out :-))
mlock_pages = yes |no (default no)
modparam
The modparam command will be used to set the options of the modules.
Example:
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "nat_bflag", 6)
See the documenation of the respective module to find out the available options.
open_files_limit
If set and bigger than the current open file limit, sip-router will try to increase its open file limit to this number. Note: sip-router must be started as root to be able to increase a limit past the hard limit (which, for open files, is 1024 on most systems).
Example of usage:
open_files_limit=2048
phone2tel
By enabling this feature, SIP-Router internally treats SIP URIs with user=phone parameter as TEL URIs. If you do not want this behavior, you have to turn it off.
Default value: 1 (enabled)
phone2tel = 0
pmtu_discovery
If enabled, the Don't Fragment (DF) bit will be set in outbound IP packets.
pmtu_discovery = 0 | 1 (default 0)
port
The port the SIP server listens to. The default value for it is 5060.
Example of usage:
port=5080
pv_buffer_size
The size in bytes of internal buffer to print dynamic strings with pseudo-variables inside. The default value is 1024.
Example of usage:
pv_buffer_size=2048
pv_buffer_slots
The number of internal buffer slots to print dynamic strings with pseudo-variables inside. The default value is 10.
Example of usage:
pv_buffer_slots=12
reply_to_via
If it is set to 1, any local reply is sent to the IP address advertised in top most Via of the request instead of the IP address from which the request was received. Default value is 0 (off).
Example of usage:
reply_to_via=0
server_id
A configurable unique server id that can be used to discriminate server instances within a cluster of servers when all other information, such as IP addresses are the same.
server_header
Set the value of Server header for replies generated by Kamailio. It must contain the header name, but not the ending CRLF.
Example of usage:
server_signature
This parameter controls the "Server" header in any locally generated message.
Example of usage:
server_signature=no
If it is enabled (default=yes) a header is generated as in the following example:
Server: Kamailio (<version> (<arch>/<os>))
shm_force_alloc
Tries to pre-fault all the shared memory, before starting. When "on", start time will increase, but combined with mlock_pages will guarantee ser will get all its memory from the beginning (no more kswapd slow downs)
shm_force_alloc = yes | no (default no)
sip_warning (noisy feedback)
Can be 0 or 1. If set to 1 (default value) a 'Warning' header is added to each reply generated by sip-router. The header contains several details that help troubleshooting using the network traffic dumps, but might reveal details of your network infrastructure and internall SIP routing.
Example of usage:
sip_warning=0
statistics
stun_allow_fp
Use FINGERPRINT attribute in STUN server
stun_allow_fp = 0 | 1 (off | on); default: 1
stun_allow_stun
Activate internal STUN server.
stun_allow_stun = 0 | 1 (off | on); default 1
Note: STUN support is only available if sip-router/Kamailio was compiled with STUN support ("make STUN=1 cfg")
stun_refresh_interval
Value for the REFRESH INTERVAL attribute of the internal STUN server
stun_refresh_interval = number in millisecond (default 0)
syn_branch
The parameter controls how the branch parameter is calculated for stateless forwarding. It also applies to statefull forwarding of ACK requests following 2xx responses.
If syn_branch is turned off, calculation is derived from transaction key, i.e., as an md5 of From/To/CallID/ CSeq exactly the same way as TM does. This is good for reboot - than messages belonging to transaction lost due to reboot will still be forwarded with the same branch parameter and will be match-able downstream.
If it is turned on (default, value is 1), just a simple value is put into the branch parameter (better for performance)
tos
The TOS (Type Of Service) to be used for the sent IP packages (both TCP and UDP).
Example of usage:
tos=IPTOS_LOWDELAY
tos=0x10
tos=IPTOS_RELIABILITY
udp_mtu
Fallback to another protocol (udp_mtu_try_proto must be set also either globally or per packet) if the constructed request size is greater than udp_mtu.
RFC 3261 specified size: 1300. Default: 0 (off).
udp_mtu = number
udp_mtu_try_proto
If udp_mtu !=0 and udp forwarded request size (after adding all the "local" headers) > udp_mtu, use this protocol instead of udp. Only the Via header will be updated (e.g. The Record-Route will be the one built for udp).
Warning: Although RFC3261 mandates automatic transport protocol changing, enabling this feature can lead to problems with clients which do not support other protocols or are behind a firewall or NAT. Use this only when you know what you do!
See also udp_mtu_try_proto(proto) function.
Default: UDP (off). Recommended: TCP.
udp_mtu_try_proto = TCP|TLS|SCTP|UDP
user
Alias name: uid
The user id to run sip-router (sip-router will suid to it).
Example of usage:
user_agent_header
Set the value of User-Agent header for requests generated by Kamailio. It must contain header name as well, but not the ending CRLF.
workdir
Alias name: wdir
The working directory used by sip-router at runtime. You might find it useful when come to generating core files :)
Example of usage:
wdir="/usr/local/siprouter"
or
wdir=/usr/openser_wd
DNS Parameters
SIP-Router has an internal DNS resolver with caching capabilities. If this caching resolver is activated (default setting) then the system's stub resolver won't be used. Thus, also local name resolution configuration like /etc/hosts entries will not be used. If the dns cache is deactivated (use_dns_cache=no), then system's resolver will be used. The DNS failover functionality in tm module references directly records in the DNS cache (which saves a lot of memory) and hence DNS based failover only works if the internal DNS cache is enabled.
DNS resolver comparison | internal resolver | system resolver |
---|---|---|
Caching of resolved records | yes | no* |
NAPTR/SRV lookups with correct weighting | yes | yes |
DNS based failover | yes | no |
* Of course you can use the resolving name servers configured in /etc/resolv.conf as caching nameservers.
If the internal resolver/cache is enabled you can add/remove records by hand (using sercmd or xmlrpc) using the DNS RPCs, e.g. dns.add_a, dns.add_srv, dns.delete_a a.s.o. For more info on DNS RPCs see http://www.kamailio.org/docs/docbooks/3.2.x/rpc_list/rpc_list.html#dns.add_a
Note: During startup of SIP-Router, before the internal resolver is loaded, the system resolver will be used (it will be used for queries done from module register functions or modparams fixups, but not for queries done from mod_init() or normal fixups).
Note: The dns cache uses the DNS servers configured on your server (/etc/resolv.conf), therefore even if you use the internal resolver you should have a working DNS resolving configuration on your server.
SIP-Router also allows you to finetune the DNS resolver settings.
The maximum time a dns request can take (before failing) is (if dns_try_ipv6 is yes, mutliply it again by 2; if SRV and NAPTR lookups are enabled, it can take even longer!):
(dns_retr_time*(dns_retr_no+1)*dns_servers_no)*(search_list_domains)
Note: During DNS lookups, the process which performs the DNS lookup blocks. To minimize the blocked time the following parameters can be used (max 2s):
dns_try_ipv6=no
dns_retr_time=1
dns_retr_no=1
dns_use_search_list=no
dns
This parameter controls if the SIP server will try doing a DNS lookup on
the address in the Via header of a received sip request to decide if
adding a received=\
Default is no.
rev_dns
This parameter controls if the SIP server will try doing a reverse DNS
lookup on the source IP of a sip request to decide if adding a
received=\
Default is no.
dns_cache_del_nonexp
Alias name: dns_cache_delete_nonexpired
dns_cache_del_nonexp = yes | no (default: no)
allow deletion of non-expired records from the cache when there is no more space
left for new ones. The last-recently used entries are deleted first.
dns_cache_flags
dns_cache_flags = number (default 0) -
dns cache specific resolver flags, used for overriding the default behaviour (low level).
Possible values:
1 - ipv4 only: only DNS A requests are performed, even if ser listens also on ipv6 addresses.
2 - ipv6 only: only DNS AAAA requests are performed. Ignored if dns_try_ipv6 is off or ser
doesn't listen on any ipv6 address.
4 - prefer ipv6: try first to resolve a host name to an ipv6 address (DNS AAAA request) and only
if this fails try an ipv4 address (DNS A request). By default the ipv4 addresses are preferred.
dns_cache_gc_interval
Interval in seconds after which the dns cache is garbage collected (default: 120 s)
dns_cache_gc_interval = number
dns_cache_init
If off, the dns cache is not initialized at startup and cannot be enabled at runtime, this saves some memory.
dns_cache_init = on | off (default on)
dns_cache_max_ttl
dns_cache_max_ttl = time in seconds (default MAXINT)
dns_cache_mem
Maximum memory used for the dns cache in KB (default 500 K)
dns_cache_mem = number
dns_cache_min_ttl
dns_cache_min_ttl = time in seconds (default 0)
dns_cache_negative_ttl
Tells how long to keep negative DNS responses in cache. If set to 0, disables caching of negative responses. Default is 60 (seconds).
dns_retr_no
Number of dns retransmissions before giving up. Default value is system specific, depends also on the '/etc/resolv.conf' content (usually 4).
Example of usage:
dns_retr_no=3
dns_retr_time
Time in seconds before retrying a dns request. Default value is system specific, depends also on the '/etc/resolv.conf' content (usually 5s).
Example of usage:
dns_retr_time=3
dns_search_full_match
When name was resolved using dns search list, check the domain added in the answer matches with one from the search list (small performance hit, but more safe)
dns_search_full_match = yes | no (default yes)
dns_servers_no
How many dns servers from the ones defined in '/etc/resolv.conf' will be used. Default value is to use all of them.
Example of usage:
dns_servers_no=2
dns_srv_lb
Alias name: dns_srv_loadbalancing
Enable dns srv weight based load balancing (see doc/dns.txt)
dns_srv_lb = yes | no (default no)
dns_try_ipv6
Can be 'yes' or 'no'. If it is set to 'yes' and a DNS lookup fails, it will retry it for ipv6 (AAAA record). Default value is 'no'.
Note: If dns_try_ipv6 is off, no hostname resolving that would result in an ipv6 address would succeed - it doesn't matter if an actual DNS lookup is to be performed or the host is already an ip address. Thus, if the proxy should forward requests to IPv6 targets, this option must be turned on!
Example of usage:
dns_try_ipv6=yes
dns_try_naptr
Enable NAPTR support according to RFC 3263 (see doc/dns.txt for more info)
dns_try_naptr = yes | no (default no)
dns_sctp_pref, dns_tcp_pref, dns_tls_pref, dns_udp_pref
Alias name: dns_sctp_preference, dns_tcp_preference, dns_tls_preference, dns_udp_preference
Set preference for each protocol when doing naptr lookups. By default dns_udp_pref=30, dns_tcp_pref=20, dns_tls_pref=10 and dns_sctp_pref=20. To use the remote site preferences set all dns_*_pref to the same positive value (e.g. dns_udp_pref=1, dns_tcp_pref=1, dns_tls_pref=1, dns_sctp_pref=1). To completely ignore NAPTR records for a specific protocol, set the corresponding protocol preference to -1 (or any other negative number). (see doc/dns.txt for more info)
dns_{udp,tcp,tls,sctp}_pref = number
dns_use_search_list
Can be 'yes' or 'no'. If set to 'no', the search list in '/etc/resolv.conf' will be ignored (=> fewer lookups => gives up faster). Default value is 'yes'.
HINT: even if you don't have a search list defined, setting this option to 'no' will still be "faster", because an empty search list is in fact search "" (so even if the search list is empty/missing there will still be 2 dns queries, eg. foo+'.' and oo+""+'.')
Example of usage:
dns_use_search_list=no
use_dns_cache
Tells if DNS responses are cached - this means that the internal DNS resolver (instead of the system's stub resolver) will be used. If set to "off", disables caching of DNS responses and, as side effect, DNS failover. Default is "on". Settings can be changed also during runtime (switch from niternal to system resolver and back).
use_dns_failover
use_dns_failover = on | off (default off)
TCP Parameters
The following parameters allows to tweak the TCP behaviour.
disable_tcp
Global parameter to disable TCP support in the SIP server. Default value is 'no'.
Example of usage:
disable_tcp=yes
tcp_accept_aliases
If a message received over a tcp connection has "alias" in its via a new tcp alias port will be created for the connection the message came from (the alias port will be set to the via one).
Based on draft-ietf-sip-connect-reuse-00.txt, but using only the port (host aliases are dangerous, involve extra DNS lookups and the need for them is questionable)
See force_tcp_alias for more details.
Note: For NAT traversal of TCP clients it is better to not use tcp_accept_aliases but just use nathelper module and fix_nated_[contact|register] functions.
tcp_accept_aliases= yes|no
tcp_accept_no_cl
Control whether to throw or not error when there is no Content-Length header for requests received over TCP. It is required to be set to yes for XCAP traffic sent over HTTP/1.1 which does not use Content-Length header, but splits large bodies in many chunks. The module sanity can be used then to restrict this permission to HTTP traffic only, testing in route block in order to stay RFC3261 compliant about this mandatory header for SIP requests over TCP.
Default value is no.
tcp_async
Alias name: tcp_buf_write
If enabled, all the tcp writes that would block / wait for connect to finish, will be queued and attempted latter (see also tcp_conn_wq_max and tcp_wq_max).
Note: It also applies for TLS.
tcp_async = yes | no (default yes)
tcp_children
Number of children processes to be created for reading from TCP connections. If no value is explicitly set, the same number of TCP children as UDP children (see "children" parameter) will be used.
Example of usage:
tcp_children=4
tcp_connection_lifetime
Lifetime in seconds for TCP sessions. TCP sessions which are inactive for longer than tcp_connection_lifetime will be closed by sip-router. Default value is defined in tcp_conn.h: #define DEFAULT_TCP_CONNECTION_LIFETIME 120. Setting this value to 0 will close the TCP connection pretty quick ;-).
Note: As many SIP clients are behind NAT/Firewalls, the SIP proxy should not close the TCP connection as it is not capable of opening a new one.
Example of usage:
tcp_connection_lifetime=3605
tcp_connect_timeout
Time in seconds before an ongoing attempt to establish a new TCP connection will be aborted. Lower this value for faster detection of TCP connection problems. The default value is 10s.
Example of usage:
tcp_connect_timeout=5
tcp_conn_wq_max
Maximum bytes queued for write allowed per connection. Attempting to queue more bytes would result in an error and in the connection being closed (too slow). If tcp_write_buf is not enabled, it has no effect.
tcp_conn_wq_max = bytes (default 32 K)
tcp_crlf_ping
Enable SIP outbound TCP keep-alive using PING-PONG (CRLFCRLF - CRLF).
tcp_crlf_ping = yes | no default: yes)
tcp_defer_accept
Tcp accepts will be delayed until some data is received (improves performance on proxies with lots of opened tcp connections). See linux tcp(7) TCP_DEFER_ACCEPT or freebsd ACCF_DATA(0). For now linux and freebsd only.
WARNING: the linux TCP_DEFER_ACCEPT is buggy (\<=2.6.23) and doesn't work exactly as expected (if no data is received it will retransmit syn acks for \~ 190 s, irrespective of the set timeout and then it will silently drop the connection without sending a RST or FIN). Try to use it together with tcp_syncnt (this way the number of retrans. SYNACKs can be limited => the timeout can be controlled in some way).
On FreeBSD:
tcp_defer_accept = yes | no (default no)
On Linux:
tcp_defer_accept = number of seconds before timeout (default disabled)
tcp_delayed_ack
Initial ACK for opened connections will be delayed and sent with the first data segment (see linux tcp(7) TCP_QUICKACK). For now linux only.
tcp_delayed_ack = yes | no (default yes when supported)
tcp_fd_cache
If enabled FDs used for sending will be cached inside the process calling tcp_send (performance increase for sending over tcp at the cost of slightly slower connection closing and extra FDs kept open)
tcp_fd_cache = yes | no (default yes)
tcp_keepalive
Enables keepalive for tcp (sets SO_KEEPALIVE socket option)
tcp_keepalive = yes | no (default yes)
tcp_keepcnt
Number of keepalives sent before dropping the connection (TCP_KEEPCNT socket option). Linux only.
tcp_keepcnt = number (not set by default)
tcp_keepidle
Time before starting to send keepalives, if the connection is idle (TCP_KEEPIDLE socket option). Linux only.
tcp_keepidle = seconds (not set by default)
tcp_keepintvl
Time interval between keepalive probes, when the previous probe failed (TCP_KEEPINTVL socket option). Linux only.
tcp_keepintvl = seconds (not set by default)
tcp_linger2
Lifetime of orphaned sockets in FIN_WAIT2 state (overrides tcp_fin_timeout on, see linux tcp(7) TCP_LINGER2). Linux only.
tcp_linger2 = seconds (not set by default)
tcp_max_connections
Maximum number of tcp connections (if the number is exceeded no new tcp connections will be accepted). Default is defined in tcp_conn.h: #define DEFAULT_TCP_MAX_CONNECTIONS 2048
Example of usage:
tcp_max_connections=4096
tcp_no_connect
Stop outgoing TCP connects (also stops TLS) by setting tcp_no_connect to yes. You can do this any time, even even if sip-router is already started (in this case using sercmd cfg.set_now_int tcp no_connect 1).
tcp_poll_method
Poll method used (by default the best one for the current OS is selected). For available types see io_wait.c and poll_types.h: none, poll, epoll_lt, epoll_et, sigio_rt, select, kqueue, /dev/poll
Example of usage:
tcp_poll_method=select
tcp_rd_buf_size
Buffer size used for tcp reads. A high buffer size increases performance on server with few connections and lot of traffic on them, but also increases memory consumption (so for lots of connection is better to use a low value). Note also that this value limits the maximum datagram size that can be received over tcp.
Default: 4096, can be changed at runtime.
tcp_send_timeout
Time in seconds after a TCP connection will be closed if it is not available for writing in this interval (and sip-router wants to send something on it). Lower this value for faster detection of broken TCP connections. The default value is 10s.
Example of usage:
tcp_send_timeout=3
tcp_source_ipv4, tcp_source_ipv6
Set the source IP for all outbound TCP connections. If setting of the IP fails, the TCP connection will use the default IP address.
tcp_source_ipv4 = IPv4 address
tcp_source_ipv6 = IPv6 address
tcp_syncnt
Number of SYN retransmissions before aborting a connect attempt (see linux tcp(7) TCP_SYNCNT). Linux only.
tcp_syncnt = number of syn retr. (default not set)
tcp_wq_blk_size
Block size used for tcp async writes. It should be big enough to hold a few datagrams. If it's smaller than a datagram (in fact a tcp write()) size, it will be rounded up. It has no influenced on the number of datagrams queued (for that see tcp_conn_wq_max or tcp_wq_max). It has mostly debugging and testing value (can be ignored).
Default: 2100 (\~ 2 INVITEs), can be changed at runtime.
tcp_wq_max
Maximum bytes queued for write allowed globally. It has no effect if tcp_write_buf is not enabled.
tcp_wq_max = bytes (default 10 Mb)
SCTP Parameters
disable_sctp
Global parameter to disable SCTP support in the SIP server. see enable_sctp
Default value is 'auto'.
Example of usage:
disable_sctp=yes
enable_sctp
enable_sctp = 0/1/2 - SCTP disabled (0)/ SCTP enabled (1)/auto (2),
default auto (2)
sctp_children
sctp children no (similar to udp children)
sctp_children = number
sctp_socket_rcvbuf
Size for the sctp socket receive buffer
Alias name: sctp_socket_receive_buffer
sctp_socket_rcvbuf = number
sctp_socket_sndbuf
Size for the sctp socket send buffer
Alias name: sctp_socket_send_buffer
sctp_socket_sndbuf = number
sctp_autoclose
Number of seconds before autoclosing an idle association (default: 180 s). Can be changed at runtime, but it will affect only new associations. E.g.:
$ sercmd cfg.set_now_int sctp autoclose 120
sctp_autoclose = seconds
sctp_send_ttl
Number of milliseconds before an unsent message/chunk is dropped (default: 32000 ms or 32 s). Can be changed at runtime, e.g.:
$ sercmd cfg.set_now_int sctp send_ttl 180000
sctp_send_ttl = milliseconds - n
sctp_send_retries
How many times to attempt re-sending a message on a re-opened association, if the sctp stack did give up sending it (it's not related to sctp protocol level retransmission). Useful to improve reliability with peers that reboot/restart or fail over to another machine.
WARNING: use with care and low values (e.g. 1-3) to avoid "multiplying" traffic to unresponding hosts (default: 0). Can be changed at runtime.
sctp_send_retries = 1
sctp_assoc_tracking
Controls whether or not sctp associations are tracked inside ser/sip-router. Turning it off would result in less memory being used and slightly better performance, but it will also disable some other features that depend on it (e.g. sctp_assoc_reuse). Default: yes.
Can be changed at runtime (sercmd sctp assoc_tracking 0), but changes will be allowed only if all the other features that depend on it are turned off (for example it can be turned off only if first sctp_assoc_reuse was turned off).
Note: turning sctp_assoc_tracking on/off will delete all the tracking information for all the currently tracked associations and might introduce a small temporary delay in the sctp processing if lots of associations were tracked.
Config options depending on sctp_assoc_tracking being on: sctp_assoc_reuse.
sctp_assoc_tracking = yes/no
sctp_assoc_reuse
Controls sctp association reuse. For now only association reuse for replies is affected by it. Default: yes. Depends on sctp_assoc_tracking being on.
Note that even if turned off, if the port in via corresponds to the source port of the association the request was sent on or if rport is turned on (force_rport() or via containing a rport option), the association will be automatically reused by the sctp stack. Can be changed at runtime (sctp assoc_reuse), but it can be turned on only if sctp_assoc_tracking is on.
sctp_assoc_reuse = yes/no
sctp_max_assocs
Maximum number of allowed open sctp associations. -1 means maximum allowed by the OS. Default: -1. Can be changed at runtime (e.g.: sercmd cfg.set_now_int sctp max_assocs 10 ). When the maximum associations number is exceeded and a new associations is opened by a remote host, the association will be immediately closed. However it is possible that some sip packets get through (especially if they are sent early, as part of the 4-way handshake).
When ser/sip-router tries to open a new association and the max_assocs is exceeded the exact behaviour depends on whether or not sctp_assoc_tracking is on. If on, the send triggering the active open will gracefully fail, before actually opening the new association and no packet will be sent. However if sctp_assoc_tracking is off, the association will first be opened and then immediately closed. In general this means that the initial sip packet will be sent (as part of the 4-way handshake).
sctp_max_assocs
sctp_max_assocs = number
sctp_srto_initial
Initial value of the retr. timeout, used in RTO calculations (default: OS specific).
Can be changed at runtime (sctp srto_initial) but it will affect only new associations.
sctp_srto_initial = milliseconds
sctp_srto_max
Maximum value of the retransmission timeout (RTO) (default: OS specific).
WARNING: values lower than the sctp sack_delay will cause lots of retransmissions and connection instability (see sctp_srto_min for more details).
Can be changed at runtime (sctp srto_max) but it will affect only new associations.
sctp_srto_max = milliseconds
sctp_srto_min
Minimum value of the retransmission timeout (RTO) (default: OS specific).
WARNING: values lower than the sctp sack_delay of any peer might cause retransmissions and possible interoperability problems. According to the standard the sack_delay should be between 200 and 500 ms, so avoid trying values lower than 500 ms unless you control all the possible sctp peers and you do make sure their sack_delay is higher or their sack_freq is 1.
Can be changed at runtime (sctp srto_min) but it will affect only new associations.
sctp_srto_min = milliseconds
sctp_asocmaxrxt
Maximum retransmissions attempts per association (default: OS specific). It should be set to sctp_pathmaxrxt * no. of expected paths.
Can be changed at runtime (sctp asocmaxrxt) but it will affect only new associations.
sctp_asocmaxrxt = number
sctp_init_max_attempts
Maximum INIT retransmission attempts (default: OS specific).
Can be changed at runtime (sctp init_max_attempts).
sctp_init_max_attempts = number
sctp_init_max_timeo
Maximum INIT retransmission timeout (RTO max for INIT). Default: OS specific.
Can be changed at runtime (sctp init_max_timeo).
sctp_init_max_timeo = milliseconds
sctp_hbinterval
sctp heartbeat interval. Setting it to -1 will disable the heartbeats. Default: OS specific.
Can be changed at runtime (sctp hbinterval) but it will affect only new associations.
sctp_hbinterval = milliseconds
sctp_pathmaxrxt
Maximum retransmission attempts per path (see also sctp_asocmaxrxt). Default: OS specific.
Can be changed at runtime (sctp pathmaxrxt) but it will affect only new associations.
sctp_pathmaxrxt = number
sctp_sack_delay
Delay until an ACK is generated after receiving a packet. Default: OS specific.
WARNING: a value higher than srto_min can cause a lot of retransmissions (and strange problems). A value higher than srto_max will result in very high connections instability. According to the standard the sack_delay value should be between 200 and 500 ms.
Can be changed at runtime (sctp sack_delay) but it will affect only new associations.
sctp_sack_delay = milliseconds
sctp_sack_freq
Number of packets received before an ACK is sent (without waiting for the sack_delay to expire). Default: OS specific.
Note: on linux with lksctp up to and including 1.0.9 is not possible to set this value (having it in the config will produce a warning on startup).
Can be changed at runtime (sctp sack_freq) but it will affect only new associations.
sctp_sack_freq = number
sctp_max_burst
Maximum burst of packets that can be emitted by an association. Default: OS specific.
Can be changed at runtime (sctp max_burst) but it will affect only new associations.
sctp_max_burst = number
UDP Parameters
udp4_raw
Enables raw socket support for sending UDP IPv4 datagrams (40-50% performance increase on linux multi-cpu).
Possible values: 0 - disabled (default), 1 - enabled, -1 auto.
In "auto" mode it will be enabled if possible (sr started as root or with CAP_NET_RAW). udp4_raw can be used on Linux and FreeBSD. For other BSDs and Darwin one must compile with -DUSE_RAW_SOCKS. On Linux one should also set udp4_raw_mtu if the MTU on any network interface that could be used for sending is smaller than 1500.
The parameter can be set at runtime as long as sr was started with enough privileges (core.udp4_raw).
udp4_raw = on
udp4_raw_mtu
MTU value used for UDP IPv4 packets when udp4_raw is enabled. It should be set to the minimum MTU of all the network interfaces that could be used for sending. The default value is 1500. Note that on BSDs it does not need to be set (if set it will be ignored, the proper MTU will be used automatically by the kernel). On Linux it should be set.
The parameter can be set at runtime (core.udp4_raw_mtu).
udp4_raw_ttl
TTL value used for UDP IPv4 packets when udp4_raw is enabled. By default it is set to auto mode (-1), meaning that the same TTL will be used as for normal UDP sockets.
The parameter can be set at runtime (core.udp4_raw_ttl).
Blacklist Parameters
dst_blacklist_expire
Alias name: dst_blacklist_ttl
How much time a blacklisted destination will be kept in the blacklist (w/o any update).
dst_blacklist_expire = time in s (default 60 s)
dst_blacklist_gc_interval
How often the garbage collection will run (eliminating old, expired entries).
dst_blacklist_gc_interval = time in s (default 60 s)
dst_blacklist_init
If off, the blacklist is not initialized at startup and cannot be enabled at runtime, this saves some memory.
dst_blacklist_init = on | off (default on)
dst_blacklist_mem
Maximum shared memory amount used for keeping the blacklisted destinations.
dst_blacklist_mem = size in Kb (default 250 Kb)
use_dst_blacklist
Enable the destination blacklist: Each failed send attempt will cause the destination to be added to the blacklist. Before any send, this blacklist will be checked and if a match is found, the send is no longer attempted (an error is returned immediately).
Note: using the blacklist incurs a small performance penalty.
See also doc/dst_blacklist.txt.
use_dst_blacklist = on | off (default off)
Real-Time Parameters
real_time
Sets real time priority for all the ser processes, or the timers (bitmask).
Possible values: 0 - off
1 - the "fast" timer
2 - the "slow" timer
4 - all processes, except the timers
Example: real_time= 7 => everything switched to real time priority.
real_time = <int> (flags) (default off)
rt_policy
Real time scheduling policy, 0 = SCHED_OTHER, 1= SCHED_RR and 2=SCHED_FIFO
rt_policy= <0..3> (default 0)
rt_prio
Real time priority used for everything except the timers, if real_time is enabled.
rt_prio = <int> (default 0)
rt_timer1_policy
Alias name: rt_ftimer_policy
Like rt_policy but for the "fast" timer.
rt_timer1_policy=<0..3> (default 0)
rt_timer1_prio
Alias name: rt_fast_timer_prio, rt_ftimer_prio
Like rt_prio but for the "fast" timer process (if real_time & 1).
rt_timer1_prio=<int> (default 0)
rt_timer2_policy
Alias name: rt_stimer_policy
Like rt_policy but for the "slow" timer.
rt_timer2_policy=<0..3> (default 0)
rt_timer2_prio
Alias name: rt_stimer_prio
Like rt_prio but for the "slow" timer.
rt_timer2_prio=<int> (default 0)
Core functions
Functions exported by core that can be used in route blocks.
add_local_rport
Add rport parameter to local generated Via header -- see RFC3581. In effect for forwarded SIP requests.
Example of usage:
append_branch
Similarly to t_fork_to, it extends destination set by a new entry. The difference is that current URI is taken as new entry.
Without parameter, the function copies the current URI into a new branch. Thus, leaving the main branch (the URI) for further manipulation.
With a parameter, the function copies the URI in the parameter into a new branch. Thus, the current URI is not manipulated. Note: append_branch(uri) still copies the destination URI, which is usually not what you want. Thus it is better to call append_branch without parameter and then modify the main branch.
Note that it's not possible to append a new branch in "on_failure_route" block if a 6XX response has been previously received (it would be against RFC 3261).
Example of usage:
# if someone calls B, the call should be forwarded to C too.
#
if (method=="INVITE" && uri=~"sip:B@xx.xxx.xx ")
{
# copy the current branch (branches[0]) into
# a new branch (branches[1])
append_branch();
# all URI manipulation functions work on branches[0]
# thus, URI manipulation does not touch the
# appended branch (branches[1])
seturi("sip:C@domain");
# now: branch 0 = C@domain
# branch 1 = B@xx.xx.xx.xx
# and if you need a third destination ...
# copy the current branch (branches[0]) into
# a new branch (branches[2])
append_branch();
# all URI manipulation functions work on branches[0]
# thus, URI manipulation does not touch the
# appended branch (branches[1-2])
seturi("sip:D@domain");
# now: branch 0 = D@domain
# branch 1 = B@xx.xx.xx.xx
# branch 2 = C@domain
t_relay();
exit;
};
# You could also use append_branch("sip:C@domain") which adds a branch with the new URI:
if(method=="INVITE" && uri=~"sip:B@xx.xxx.xx ") {
# append a new branch with the second destionation
append_branch("sip:user@domain");
# now: branch 0 = B@xx.xx.xx.xx
# now: branch 1 = C@domain
t_relay();
exit;
}
avpflags
break
'break' statement can be used to end a 'case' block in a 'switch' statement or exit from a 'while' statement.
drop
Stop the execution of the configuration script and alter the implicit action which is done afterwards.
If the function is called in a 'branch_route' then the branch is discarded (implicit action for 'branch_route' is to forward the request).
If the function is called in the default 'onreply_route' then you can drop any response. If the function is called in a named 'onreply_route' (transaction stateful) then any provisional reply is discarded. (Implicit action for 'onreply_route' is to send the reply upstream according to Via header.)
Example of usage:
onreply_route {
if(status=="200") {
drop(); # this works
}
}
onreply_route[FOOBAR] {
if(status=="200") {
drop(); # this is ignored
}
}
exit
Stop the execution of the configuration script -- it has the same behaviour as return(0). It does not affect the implicit action to be taken after script execution.
route {
if (route(2)) {
xlog("L_NOTICE","method $rm is INVITE\n");
} else {
xlog("L_NOTICE","method is $rm\n");
};
}
route[2] {
if (is_method("INVITE")) {
return(1);
} else if (is_method("REGISTER")) {
return(-1);
} else if (is_method("MESSAGE")) {
sl_send_reply("403","IM not allowed");
exit;
};
}
error
exec
force_rport
Force_rport() adds the rport parameter to the first Via header of the received message. Thus, sip-router will add the received port to the top most via header in the SIP message, even if the client does not indicate support for rport. This enables subsequent SIP messages to return to the proper port later on in a SIP transaction.
This is useful for NAT traversal, to enforce symmetric response signaling.
The rport parameter is defined in RFC 3581.
Note: there is also a force_rport parameter which changes the global behavior of the SIP proxy.
Example of usage:
force_rport();
add_rport
Alias for force_rport();
force_send_socket
Force to send the message from the specified socket (it _must_ be one of the sockets specified with the "listen" directive). If the protocol doesn't match (e.g. UDP message "forced" to a TCP socket) the closest socket of the same protocol is used.
Example of usage:
force_send_socket(10.10.10.10:5060);
force_tcp_alias
Alias name: add_tcp_alias
force_tcp_alias(port)
adds a tcp port alias for the current connection (if tcp). Useful if you want to send all the traffic to port_alias through the same connection this request came from [it could help for firewall or nat traversal]. With no parameters adds the port from the message via as the alias. When the "aliased" connection is closed (e.g. it's idle for too much time), all the port aliases are removed.
forward
Forward the SIP request to the given destination in stateless mode. This has the format of [proto:]host[:port]. Host can be an IP or hostname; supported protocols are UDP, TCP and TLS. (For TLS, you need to compile the TLS support into core). If proto or port are not specified, NAPTR and SRV lookups will be used to determine them (if possible).
If destination parameter is missing, the forward will be done based on RURI.
Example of usage:
forward("10.0.0.10:5060");
#or
forward();
forward_sctp
forward_tcp
forward_tls
forward_udp
isavpflagset
isflagset
Test if a flag is set for current processed message (if the flag value is 1). The value of the parameter can be in range of 0..31.
For more see http://www.kamailio.org/dokuwiki/doku.php/tutorials:openser-flag-operations or Kamailio Flags Operations.
Example of usage:
if(isflagset(3)) {
log("flag 3 is set\n");
};
SIP-Router also supports named flags. They have to be declared at the beginning of the config file with:
flags flag1_name[:position], flag2_name ...
Example:
flags test, a:1, b:2 ;
route{
setflag(test);
if (isflagset(a)){ # equiv. to isflagset(1)
....
}
resetflag(b); # equiv. to resetflag(2)
is_int
Checks if a pseudo variable argument contains integer value.
if(is_int("$avp(foobar)")) {
log("foobar contains an integer\n");
}
log
Write text message to standard error terminal or syslog. You can specify the log level as first parameter.
For more see: http://www.kamailio.org/dokuwiki/doku.php/tutorials:debug-syslog-messages
Example of usage:
log("just some text message\n");
prefix
Add the string parameter in front of username in R-URI.
Example of usage:
prefix("00");
resetavpflag
resetflag
return
The return() function allows you to return any integer value from a called route() block. You can test the value returned by a route using $retcode or $? variable.
return(0) is same as exit();
In bool expressions:
- Negative and ZERO is FALSE
- Positive is TRUE
If no value is specified, or a route reaches its end without executing a return statement, it returns 1. If return is used in the top level route is equivalent with exit [val].
Example usage:
route {
if (route(2)) {
xlog("L_NOTICE","method $rm is INVITE\n");
} else {
xlog("L_NOTICE","method $rm is REGISTER\n");
};
}
route[2] {
if (is_method("INVITE")) {
return(1);
} else if (is_method("REGISTER")) {
return(-1);
} else {
return(0);
};
}
revert_uri
Set the R-URI to the value of the R-URI as it was when the request was received by server (undo all changes of R-URI).
Example of usage:
revert_uri();
rewritehostport
Alias name: sethostport, sethp
Rewrite the domain part and port of the R-URI with the value of function's parameter. Other parts of the R-URI like username and URI parameters remain unchanged.
Example of usage:
rewritehostport("1.2.3.4:5080");
rewritehostporttrans
Alias name: sethostporttrans, sethpt
Rewrite the domain part and port of the R-URI with the value of function's parameter. Also allows to specify the transport parameter. Other parts of the R-URI like username and URI parameters remain unchanged.
Example of usage:
rewritehostporttrans("1.2.3.4:5080");
rewritehost
Alias name: sethost, seth
Rewrite the domain part of the R-URI with the value of function's parameter. Other parts of the R-URI like username, port and URI parameters remain unchanged.
Example of usage:
rewritehost("1.2.3.4");
rewriteport
Alias name: setport, setp
Rewrites/sets the port part of the R-URI with the value of function's parameter.
Example of usage:
rewriteport("5070");
rewriteuri
Alias name: seturi
Rewrite the request URI.
Example of usage:
rewriteuri("sip:test@openser.org");
rewriteuserpass
Alias name: setuserpass, setup
Rewrite the password part of the R-URI with the value of function's parameter.
Example of usage:
rewriteuserpass("my_secret_passwd");
rewriteuser
Alias name: setuser, setu
Rewrite the user part of the R-URI with the value of function's parameter.
Example of usage:
rewriteuser("newuser");
route
Execute route block given in parameter. Parameter may be name of the block or a string valued expression.
Examples of usage:
route(REGISTER_REQUEST);
route(@received.proto + "_proto_" + $var(route_set));
send
Send the original SIP message to a specific destination in stateless mode. No changes are applied to received message, no Via header is added. Host can be an IP or hostname. Used protocol: UDP
Parameter is mandatory and has string format.
Example of usage:
send("10.10.10.10:5070");
send_tcp
Send the original SIP message to a specific destination in stateless mode. No changes are applied to received message, no Via header is added. Host can be an IP or hostname. Used protocol: UDP
Parameter is mandatory and has string format.
Example of usage:
send_tcp("10.10.10.10:5070");
set_advertised_address
Same as 'advertised_address' but it affects only the current message. It has priority if 'advertised_address' is also set.
Example of usage:
set_advertised_address("openser.org");
set_advertised_port
Same as 'advertised_port' but it affects only the current message. It has priority over 'advertised_port'.
Example of usage:
set_advertised_port(5080);
set_forward_no_connect
The message will be forwarded only if there is already an existing connection to the destination. It applies only to connection oriented protocols like TCP and TLS (TODO: SCTP), for UDP it will be ignored. The behavior depends in which route block the function is called:
- normal request route: affects stateless forwards and tm. For tm it affects all the branches and the possible retransmissions (in fact there are no retransission for tcp/tls).
- onreply_route[0] (stateless): equivalent to set_reply_*() (it's better to use set_reply_* though)
- onreply_route[!=0] (tm): ignored
- branch_route: affects the current branch only (all messages sent on this branch, like possible retransmissions and CANCELs).
- onsend_route: like branch route
Example of usage:
route {
...
if (lookup()) {
//requests to local users. They are usually behind NAT so it does not make sense to try
//to establish a new TCP connection
set_forward_no_connect();
t_relay();
}
...
}
set_forward_close
Try to close the connection (the one on which the message is sent out) after forwarding the current message. Can be used in same route blocks as set_forward_no_connect().
Note: Use with care as you might not receive the replies anymore as the connection is http://vdo.com.vn closed.
set_reply_no_connect
Like set_forward_no_connect(), but for replies to the current message (local generated replies and replies forwarded by tm). The behavior depends in which route block the function is called:
- normal request route: affects all replies sent back on the transaction (either local or forwarded) and all local stateless replies (sl_reply()).
- onreply_route: affects the current reply (so the send_flags set in the onreply_route will be used if the reply for which they were set is the winning final reply or it's a provisional reply that is forwarded)
- branch_route: ignored.
- onsend_route: ignored
Example of usage:
route[4] {
//requests from local users. There are usually behind NAT so it does not make sense to try
//to establish a new TCP connection for the replies
set_reply_no_connect();
// do authentication and call routing
...
}
set_reply_close
Like set_reply_no_connect, but closes the TCP connection after sending. Can be used in same route blocks as set_reply_no_connect.
Example of usage:
route {
...
if (...caller-is-not-registered...) {
// reject unregistered client
// if request was received via TCP/TLS close the connection, as
// this may trigger re-registration of the client.
set_reply_close();
sl_send_reply("403","REGISTER first");
exit;
}
...
}
setavpflag
setflag
Set a flag for current processed message. The value of the parameter can be in range of 0..31. The flags are used to mark the message for special processing (e.g., accounting) or to keep some state (e.g., message authenticated).
For more see http://www.kamailio.org/dokuwiki/doku.php/tutorials:openser-flag-operations .
Example of usage:
setflag(3);
strip
Strip the first N-th characters from username of R-URI (N is the value of the parameter).
Example of usage:
strip(3);
strip_tail
Strip the last N-th characters from username of R-URI (N is the value of the parameter).
Example of usage:
strip_tail(3);
udp_mtu_try_proto(proto)
- proto - TCP|TLS|SCTP|UDP - like udp_mtu_try_proto global parameter but works on a per packet basis and not globally.
Example:
if($rd=="10.10.10.10")
udp_mtu_try_proto(SCTP);
userphone
Routing blocks
SIP-Router has support for named routes. Names can be used instead of numbers in all the route commads or route declarations.
Note: route(number) is equivalent to route("number")
Example:
route{
...
route("test");
...
}
route["test"]{
...
}
route
Request routing block. It contains a set of actions to be taken for SIP requests.
The main 'route' block identified by 'route{...}' or 'route[0]{...}' is executed for each SIP request.
The implicit action after execution of the main route block is to drop the SIP request. To send a reply or forward the request, explicit actions must be called inside the route block.
Example of usage:
route {
if(is_method("OPTIONS")) {
# send reply for each options request
sl_send_reply("200", "ok");
exit();
}
route(1);
}
route[1] {
# forward according to uri
forward();
}
branch_route
Request's branch routing block. It contains a set of actions to be taken for each branch of a SIP request. It is executed only by TM module after it was armed via t_on_branch("branch_route_index").
Example of usage:
route {
lookup("location");
t_on_branch("1");
if(!t_relay()) {
sl_send_reply("500", "relaying failed");
}
}
branch_route[1] {
if(uri=~"10\.10\.10].10") {
# discard branches that go to 10.10.10.10
drop();
}
}
failure_route
Failed transaction routing block. It contains a set of actions to be taken each transaction that received only negative replies (>=300) for all branches. The 'failure_route' is executed only by TM module after it was armed via t_on_failure("failure_route_index").
Note that in 'failure_route' is processed the request that initiated the transaction, not the reply .
Example of usage:
route {
lookup("location");
t_on_failure("1");
if(!t_relay()) {
sl_send_reply("500", "relaying failed");
}
}
failure_route[1] {
if(is_method("INVITE")) {
# call failed - relay to voice mail
t_relay_to_udp("voicemail.server.com","5060");
}
}
onreply_route
Reply routing block. It contains a set of actions to be taken for SIP replies.
The main 'onreply_route' identified by 'onreply_route {...}' or 'onreply_route[0] {...}' is executed for all replies received.
Certain 'onreply_route' blocks can be executed by TM module for special replies. For this, the 'onreply_route' must be armed for the SIP requests whose replies should be processed within it, via t_on_reply("onreply_route_index").
Main 'onreply_route' block is executed before a possible tm 'onreply_route' block.
route {
lookup("location");
t_on_reply("1");
if(!t_relay()) {
sl_send_reply("500", "relaying failed");
}
}
onreply_route {
if(!t_check_trans()) {
drop;
}
}
onreply_route[1] {
if(status=~"1[0-9][0-9]") {
log("provisional response\n");
}
}
onsend_route
The route is executed in when a SIP request is sent out. Only a limited number of commands are allowed (drop, if + all the checks, msg flag manipulations, send(), log(), textops::search()).
In this route the final destination of the message is available and can be checked (with snd_ip, snd_port, to_ip, to_port, snd_proto, snd_af).
This route is executed only when forwarding requests - it is not executed for replies, retransmissions, or locally generated messages (e.g. via fifo uac).
Example:
onsend_route{
if(to_ip==1.2.3.4 && !isflagset(12)){
log(1, "message blocked\n");
drop;
}
}
- snd_ip, snd_port - behave like src_ip/src_port, but contain the ip/port ser will use to send the message
- to_ip, to_port - like above, but contain the ip/port the message will be sent to (not to be confused with dst_ip/dst_port, which are the destination of the original received request: ser's ip and port on which the message was received)
- snd_proto, snd_af - behave like proto/af but contain the protocol/address family that ser will use to send the message
- msg:len - when used in an onsend_route, msg:len will contain the length of the message on the wire (after all the changes in the script are applied, Vias are added a.s.o) and not the lentgh of the original message.
event_route
Generic type of route executed when specific events happen.
Prototype: event_route[groupid:eventid]
- groupid - should be the name of the module that triggers the event
- eventid - some meaningful short text describing the event
Implementations:
- event_route[htable:mod-init] - executed by htable module after all modules have been initialised. Good for initialising values in hash tables.
modparam("htable", "htable", "a=>size=4;")
event_route[htable:mod-init] {
$sht(a=>calls-to::10.10.10.10) = 0;
$sht(a=>max-calls-to::10.10.10.10) = 100;
}
route {
if(is_method("INVITE") && !has_totag())
{
switch($rd) {
case "10.10.10.10":
lock("calls-to::10.10.10.10");
$sht(a=>calls-to::10.10.10.10) =
$sht(a=>calls-to::10.10.10.10) + 1;
unlock("calls-to::10.10.10.10");
if($sht(a=>calls-to::10.10.10.10)>$sht(a=>max-calls-to::10.10.10.10))
{
sl_send_reply("500", "To many calls to .10");
exit;
}
break;
...
}
}
}
- event_route [tm:local-request] - executed on locally generated requests.
event_route [tm:local-request] { # Handle locally generated requests
xlog("L_INFO", "Routing locally generated $rm to <$ru>\n");
t_set_fr(10000, 10000);
}
Script statements
if
IF-ELSE statement
Prototype:
if(expr) {
actions;
} else {
actions;
}
The 'expr' should be a valid logical expression.
The logical operators that can be used in 'expr':
== equal
!= not equal
=~ case-insensitive regular expression matching: Note: Posix regular expressions will be used, e.g. use [[:digit:]]{3} instead of \d\d\d
> greater
>= greater or equal
< less
<= less or equal
&& logical AND
|| logical OR
! logical NOT
[ ... ] test operator - inside can be any arithmetic expression
Example of usage:
if(is_method("INVITE"))
{
log("this sip message is an invite\n");
} else {
log("this sip message is not an invite\n");
}
switch
SWITCH statement - it can be used to test the value of a pseudo-variable.
IMPORTANT NOTE: 'break' can be used only to mark the end of a 'case' branch (as it is in shell scripts). If you are trying to use 'break' outside a 'case' block the script will return error -- you must use 'return' there.
Example of usage:
route {
route(1);
switch($retcode)
{
case -1:
log("process INVITE requests here\n");
break;
case 1:
log("process REGISTER requests here\n");
break;
case 2:
case 3:
log("process SUBSCRIBE and NOTIFY requests here\n");
break;
default:
log("process other requests here\n");
}
# switch of R-URI username
switch($rU)
{
case "101":
log("destination number is 101\n");
break;
case "102":
log("destination number is 102\n");
break;
case "103":
case "104":
log("destination number is 103 or 104\n");
break;
default:
log("unknown destination number\n");
}
}
route[1]{
if(is_method("INVITE"))
{
return(-1);
};
if(is_method("REGISTER"))
return(1);
}
if(is_method("SUBSCRIBE"))
return(2);
}
if(is_method("NOTIFY"))
return(3);
}
return(-2);
}
NOTE: take care while using 'return' - 'return(0)' stops the execution of the script.
while
while statement
Example of usage:
$var(i) = 0;
while($var(i) < 10)
{
xlog("counter: $var(i)\n");
$var(i) = $var(i) + 1;
}
Script operations
Assignments together with string and arithmetic operations can be done directly in configuration file.
Assignment
Assignments can be done like in C, via '=' (equal). The following pseudo-variables can be used in left side of an assignment: * AVPs - to set the value of an AVP * script variables ($var(...)) - to set the value of a script variable * shared variables ($shv(...)) * $ru - to set R-URI * $rd - to set domain part of R-URI * $rU - to set user part of R-URI * $rp - to set the port of R-URI * $du - to set dst URI * $fs - to set send socket * $br - to set branch * $mf - to set message flags value * $sf - to set script flags value * $bf - to set branch flags value
$var(a) = 123;
For avp's there a way to remove all values and assign a single value in one statement (in other words, delete existing AVPs with same name, add a new one with the right side value). This replaces the := assignment operator from kamailio \< 3.0.
$(avp(i:3)[*]) = 123;
$(avp(i:3)[*]) = $null;
String operations
For strings, '+' is available to concatenate.
$var(a) = "test";
$var(b) = "sip:" + $var(a) + "@" + $fd;
Arithmetic operations
For numbers, one can use:
- + : plus
- - : minus
- / : divide
- * : multiply
- % : modulo (Kamailio uses 'mod' instead of '%')
- | : bitwise OR
- & : bitwise AND
- ^ : bitwise XOR
- \~ : bitwise NOT
- \<\< : bitwise left shift
- >> : bitwise right shift
Example:
$var(a) = 4 + ( 7 & ( ~2 ) );
NOTE: to ensure the priority of operands in expression evaluations do use parenthesis.
Arithmetic expressions can be used in condition expressions via test operator ' [ ... ] '.
if( [ $var(a) & 4 ] )
log("var a has third bit set\n");
Operators
- type casts operators: (int), (str).
- string comparison: eq, ne
- integer comparison: ieq, ine
Note: The names are not yet final (use them at your own risk). Future version might use ==/!= only for ints (ieq/ine) and eq/ne for strings (under debate). They are almost equivalent to == or !=, but they force the conversion of their operands (eq to string and ieq to int), allowing among other things better type checking on startup and more optimizations.
Non equiv. examples:
0 == "" (true) is not equivalent to 0 eq "" (false: it evaluates to "0" eq "").
"a" ieq "b" (true: (int)"a" is 0 and (int)"b" is 0) is not equivalent to "a" == "b" (false).
Note: internally == and != are converted on startup to eq/ne/ieq/ine whenever possible (both operand types can be safely determined at start time and they are the same).
- sip-router tries to guess what the user wanted when operators that support multiple types are used on different typed operands. In general convert the right operand to the type of the left operand and then perform the operation. Exception: the left operand is undef. This applies to the following operators: +, == and !=.
Special case: undef as left operand:
For +: undef + expr -> undef is converted to string => "" + expr.
For == and !=: undef == expr -> undef is converted to type_of expr.
If expr is undef, then undef == undef is true (internally is converted
to string).
- expression evaluation changes: sip-router will auto-convert to integer or string in function of the operators:
int(undef)==0, int("")==0, int("123")==123, int("abc")==0
str(undef)=="", str(123)=="123".
- script operators for dealing with empty/undefined variables
defined expr - returns true if expr is defined, and false if not.
Note: only a standalone avp or pvar can be
undefined, everything else is defined.
strlen(expr) - returns the lenght of expr evaluated as string.
strempty(expr) - returns true if expr evaluates to the empty
string (equivalent to expr=="").
Example: if (defined $v && !strempty($v)) $len=strlen($v);