Firewall issue with multiple SIP PROXY / REGISTRAR servers

Posted by MikeBrom on Server Fault See other posts from Server Fault or by MikeBrom
Published on 2010-07-13T13:22:17Z Indexed on 2011/01/09 8:56 UTC
Read the original article Hit count: 392

Filed under:
|
|
|
|

Hi

We have a pair of Internet-facing SIP PROXY/REGISTRAR servers (for resilienced and load-balancing). When a SIP phone registers, it will be handled by one of the REGISTRAR servers (round-robin DNS) - and since this registration is renewed, the firewall port/address translation is maintained. Therefore, when a call is to be sent back to the phone the INVITE message passes successfully through the firewall.

However, it is likely that the phone may register with one of the two servers, but the INVITE may come from the other. In this situation, the call fails since there is no translation in place on the firewall.

Is there a feature in the SIP protocol to facilitate this? Any other ideas? As our traffic grows, we will no doubt end-up with more than two servers - so the problem will escalate.

Thanks,

Mike

© Server Fault or respective owner

Related posts about firewall

Related posts about proxy