www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

Issues with internet failover

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
Montikore



Joined: 19 Jan 2016
Posts: 64

PostPosted: Mon Sep 11, 2017 9:18 am    Post subject: Issues with internet failover Reply with quote

Hi,

Since 2 weeks, i'm experiencing lot of troubles with my VoIP services : it sticks on the failover device (4G modem), even when there is no problem with the main connection. All other connections are using the main link, but the VoIP service is not... And is not working as well.
I'm using this configuration since month's without problems, and updated to 3.8.0 one month ago. Is there any issue with internet failover on this version? Something changed? Is there any differences between x86 and x64 versions?

Thanks
Back to top
View user's profile Send private message
DrmCa



Joined: 12 Apr 2011
Posts: 233

PostPosted: Mon Sep 11, 2017 4:17 pm    Post subject: Reply with quote

Try a previous version, and see. I did not have issues with 3.5.0 while I still used load balancing configuration.
Back to top
View user's profile Send private message
virgiox



Joined: 08 Sep 2014
Posts: 3

PostPosted: Fri Sep 22, 2017 12:16 am    Post subject: Reply with quote

We use load balancing with balancing rules routing SIP traffic to a preferred gateway. When it fails a new one is chosen, but while UDP NAT sessions are alive on the new gateway, it is used regardless the status of the preferred one.

The only way to switch your gateway back is to let NAT sessions expire (turn SIP user agents off) or manually disable the new gateway. I guess it does not happen with http connections because their lifespan is shorter, while UDP ones could last forever.
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 64

PostPosted: Tue Sep 26, 2017 8:43 am    Post subject: Reply with quote

virgiox wrote:
When it fails a new one is chosen, but while UDP NAT sessions are alive on the new gateway, it is used regardless the status of the preferred one.


This sounds pretty logical in regard of our situation. And indeed, this issue affected only our VoIP services.
By the way, i didn't find how to configure/disable SIP user agents you talk about. Where can i do that?

So i guess to solve this issue, you have to set UDP NAT session timeout to very short time... ?
Back to top
View user's profile Send private message
virgiox



Joined: 08 Sep 2014
Posts: 3

PostPosted: Sat Oct 07, 2017 12:38 pm    Post subject: Reply with quote

Montikore wrote:

By the way, i didn't find how to configure/disable SIP user agents you talk about. Where can i do that?

So i guess to solve this issue, you have to set UDP NAT session timeout to very short time... ?


SIP user agents are the SIP devices you are using through your NAT. It could be your IP-PBX if on premises or your IP phones if your PBX is in cloud.

Reducing UDP NAT sessions timeout to a value lower than SIP register refresh is not a good idea as by doing so incoming requests will often find a closed door. Neither is turning your PBX or phones off until their NAT sessions time out.

I usually flush all NAT sessions: security->firewall->connection tracking->flush.

Quick and dirty (very dirty)
Back to top
View user's profile Send private message
Montikore



Joined: 19 Jan 2016
Posts: 64

PostPosted: Mon Oct 09, 2017 7:44 am    Post subject: Reply with quote

dirty things can be done once in a while Wink
ok thank you for the information! i think i'll have some testing to do around it
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group