opensips 安装 mediaproxy

 opensips 安装 mediaproxy

opensips 可以作为各种sip server。但跟undo server相比缺省不支持rtp报文的中继，也就是sip报文都可通过之，但rtp报文直接在ua间传输。
media proxy 可以完成rtp代理或叫中继，通过修改sip报文中sdp报文层中Connection Information中的地址和端口号完成rtp报文代理过程。
可以通过谷歌查到，有另外两种东西跟这个media proxy有纠葛，Openser Kamailio,其中Openser是opensips 和 kamailio 的前身，开发openser的人一分为二，一帮人弄opensips 另外一些kamailio。这里不多说。
因为我们要用mediaproxy所以直接说它怎么用。
从mediaproxy网站可以知道现在2.0版本明确说明要使用opensips，为了不引起麻烦，我也是先装了openser 后装了kamailio，最后才装opensips（前两种都因各种原因失败）。
opensips的文档中以debian版本为讲解对象，许多地方都是用的debian特有命令。
mediaproxy当前只提供给debian的unstable 也就是testing版本有现成安装包。顾在经历了失败后我最终选用了，debian testing版本。
先说安装opensips，首先要安装INSTALL文件中所有要求预安装包，没有那些，编译的时候会出错。

如果安装后无图形界面 使用命令 apt-get install gnome-core 安装 gnome 然后重启

使用debian包管理工具apt-get install 或者 图形界面工具synaptic，可以很容易安装，依次选择安装即可。但要注意有的软件版本已经更新，顾 可以试着去掉包名最后的数字试试。
安装mediaproxy 更是简单，按照INSTALL说明，在/etc/apt/sources.list中添加ag链接，直接apt-get install 那三个包名，即可。
配置opensips
缺省的opensips安装不支持认证，需要安装mysql或其他熟悉的数据库，让opensips跟mysql合作完成认证操作。当然用户名，密码等信息放在了数据库里。

配置mediaproxy
mediaproxy 分为media-dispatcher 和 media-relay 两部分，前者通过unix文件跟opensips通信，后者通过sock跟前者通信，

安装目的
让opensips完成sipserver的功能，并且使用mysql中的表项完成认证，且配合mediaproxy完成rtp流的代理，即没有mediaproxy时rtp流不经过opensips server，使用后可以完成rtp代理功能



下载安装debian testing版本,因mediaproxy只有testing版本的包，故选择testing版本的debian
安装完成后使用图形界面登陆，如果安装过程中没有使用网络安装，需要配置apt代理
配置文件/etc/apt/apt.conf
Acquire::http::Proxy "http://username:password@10.19.0.7:80";
将/etc/apt/source.list文件增加如下配置，
# AG Projects software
deb http://ag-projects.com/debian/ unstable main
deb-src http://ag-projects.com/debian/ unstable main
# Opensips software
deb http://www.opensips.org/apt/ sid main
#
图形化界面中可以使用包管理工具synaptic，首先选择reload，更新包的信息，然后可以搜 mediaproxy 然后
会列出四项，包括common dispatch relay 和web文件 全部选中然后apply，后mediaproxy即安装完毕
搜mysql，安装mysql 5.1，以及mysql client，安装过程中需要输入mysql的root密码，记住这个密码
再搜opensips即可安装opensips，其中的mysql包是需要一起安装的。
运行/usr/sbin/opensipsdbctl create 会在数据库中创建相关数据库和表文件，此时需要输入mysql的root密码
因media-relay 需要内核支持ipv4 forwarding，所以需要执行
echo 1 > /proc/sys/net/ipv4/ip_forward
和 在文件/etc/syctl.conf中打开net.ipv4.ip_forward=1 这样即便重启设备，也可以运行mediaproxy了
另外media的dispatcher和relay之间需要通过tls通信，故在/etc/mediaproxy/tls中需要有认证文件
只要把/usr/share/doc/mediaproxy-common/tls中的文件全部拷贝到/etc/mediaproxy/tls下即可
配置/etc/mediaproxy/config.ini
[Relay]
; A list of dispatchers to connect to, separated by spaces. The format is "host[:port] [host[:port] ...]". If a
; port is not specified the default port of 25060 will be used.
;dispatchers = example.com 1.2.3.4:12345
; dispatchers 是dispatcher的ip地址 缺省端口 25060
dispatchers = 172.30.0.249

passport = None

; relay的ip地址
relay_ip = 172.30.0.249
; rtp 的端口范围
port_range = 50000:60000
;日志模式
log_level = DEBUG
stream_timeout = 90
on_hold_timeout = 7200
;dns_check_interval = 60
reconnect_delay = 10
traffic_sampling_period = 15

[Dispatcher]
socket_path = /var/run/mediaproxy/dispatcher.sock
;dispatcher ip地址
listen = 172.30.0.249
listen_management = 172.30.0.249
management_use_tls = yes
passport = None
management_passport = None
log_level = DEBUG
relay_timeout = 1
;accounting =

[TLS]
; tls的路径名称
certs_path = tls
verify_interval = 300

[Database]
; 我们没有暂时没有使用计费功能故此项不用管
; This section needs to be configured if database accounting is enabled
; Database URI in the form: scheme://user:password@host/database
;dburi = mysql://mediaproxy:CHANGEME@localhost/mediaproxy
; Name for the table.
;sessions_table = media_sessions
; Column names. Columns are strings except for info which is a BLOB
;
;callid_column = call_id
;fromtag_column = from_tag
;totag_column = to_tag
;info_column = info

[Radius]
; This section needs to be configured if radius accounting is enabled

; OpenSIPS RADIUS configuration file. All RADIUS cofiguration parameters will
; be read from this file, including dictionary files.
;
;config_file = /etc/opensips/radius/client.conf

; Additional dictionary file with MediaProxy specific attributes.
;additional_dictionary = radius/dictionary

[OpenSIPS]
; 该参数跟opensips的配置参数中的
socket_path = /var/run/opensips/socket
max_connections = 10
配置完成后，使用
/etc/init.d/mediaproxy-dispatcher restart
/etc/init.d/mediaproxy-relay restart
然后使用ps -ef | grep media 查看是否都正常启动了
opensips:/etc/opensips# ps -ef | grep media
root       853 32514 0 13:39 pts/5    00:00:00 grep media
root      8655     1 0 Dec30 ?        00:00:01 /usr/bin/python /usr/bin/media-dispatcher
root      8665     1 0 Dec30 ?        00:00:29 /usr/bin/python /usr/bin/media-relay
如果没有正常启动可以在/var/log/syslog中查看原因

接下来配置opensips,先配置对于数据库的支持，配置文件/etc/opensips/opensipsctlrc
打开所有有用选项,下面列出我打开的选项
SIP_DOMAIN=opensips.org
DBENGINE=MYSQL
DBHOST=localhost
DBNAME=opensips

DB_PATH="/lib/opensips/opensipsctl/dbtext"

DBRWUSER=opensips
DBRWPW="opensipsrw"
DBROUSER=opensipsro
DBROPW=opensipsro
DBROOTUSER="root"
USERCOL="username"
INSTALL_EXTRA_TABLES=ask

INSTALL_PRESENCE_TABLES=ask
STANDARD_MODULES="standard acc lcr domain group permissions registrar usrloc
msilo alias_db uri_db speeddial avpops auth_db pdt dialog
dispatcher dialplan drouting nathelper load_balancer"
EXTRA_MODULES="imc cpl siptrace domainpolicy carrierroute userblacklist"

ALIASES_TYPE="DB"

CTLENGINE=FIFO
OSIPS_FIFO="/tmp/opensips_fifo"

MI_CONNECTOR=FIFO:/tmp/opensips_fifo
MI_CONNECTOR=UNIXSOCK:/tmp/opensips.sock
MI_CONNECTOR=UDP:192.168.2.133:8000
MI_CONNECTOR=XMLRPC:192.168.2.133:8000
VERIFY_ACL=1
ACL_GROUPS="local ld int voicemail free-pstn"
VERBOSE=1
PID_FILE=/var/run/opensips.pid
# STARTOPTIONS=
然后配置/etc/opensips/opensips.cfg
#
# $Id: opensips.cfg 6046 2009-08-30 17:13:08Z bogdan_iancu $
#
# OpenSIPS basic configuration script
#     by Anca Vamanu <[e-mail]>
#
# Please refer to the Core CookBook at:
#      http://www.opensips.org/index.php?n=Resources.DocsCookbooks
# for a explanation of possible statements, functions and parameters.
#


####### Global Parameters #########

debug=3
log_stderror=yes
log_facility=LOG_LOCAL0

fork=yes
children=4

/* uncomment the following lines to enable debugging */
#debug=6
#fork=no
#log_stderror=yes

/* uncomment the next line to disable TCP (default on) */
disable_tcp=yes

/* uncomment the next line to enable the auto temporary blacklisting of
not available destinations (default disabled) */
#disable_dns_blacklist=no

/* uncomment the next line to enable IPv6 lookup after IPv4 dns
lookup failures (default disabled) */
#dns_try_ipv6=yes

/* uncomment the next line to disable the auto discovery of local aliases
based on revers DNS on IPs (default on) */
#auto_aliases=no

/* uncomment the following lines to enable TLS support (default off) */
#disable_tls = no
#listen = tls:172.30.0.249:5061
#tls_verify_server = 1
#tls_verify_client = 1
#tls_require_client_certificate = 0
#tls_method = TLSv1
#tls_private_key = "//etc/opensips/tls/user/user-privkey.pem"
#tls_ca_list = "//etc/opensips/tls/user/user-calist.pem"


port=5060

/* uncomment and configure the following line if you want opensips to
bind on a specific interface/port/proto (default bind on all available) */
listen=udp:172.30.0.249:5060


####### Modules Section ########

#set module path
mpath="//lib/opensips/modules/"

/* uncomment next line for MySQL DB support */
#loadmodule "db_mysql.so"
loadmodule "/usr/lib/opensips/modules/db_mysql.so"
loadmodule "signaling.so"
loadmodule "sl.so"
loadmodule "tm.so"
loadmodule "rr.so"
loadmodule "maxfwd.so"
loadmodule "usrloc.so"
loadmodule "registrar.so"
loadmodule "textops.so"
loadmodule "mi_fifo.so"
loadmodule "uri.so"
loadmodule "xlog.so"
loadmodule "acc.so"
loadmodule "mediaproxy.so"
loadmodule "dialog.so"

/* uncomment next lines for MySQL based authentication support
NOTE: a DB (like db_mysql) module must be also loaded */
#loadmodule "auth.so"
#loadmodule "auth_db.so"
loadmodule "/usr/lib/opensips/modules/auth.so"
loadmodule "/usr/lib/opensips/modules/auth_db.so"
loadmodule "mi_datagram.so"
/* uncomment next line for aliases support
NOTE: a DB (like db_mysql) module must be also loaded */
#loadmodule "alias_db.so"
/* uncomment next line for multi-domain support
NOTE: a DB (like db_mysql) module must be also loaded
NOTE: be sure and enable multi-domain support in all used modules
(see "multi-module params" section ) */
#loadmodule "domain.so"
/* uncomment the next two lines for presence server support
NOTE: a DB (like db_mysql) module must be also loaded */
#loadmodule "presence.so"
#loadmodule "presence_xml.so"



modparam("dialog", "enable_stats", 1)
modparam("dialog", "profiles_no_value", "inbound ; outbound")
#modparam("dialog", "profiles_with_value", "caller ; my_profile")

modparam("mi_datagram", "socket_name", "/var/run/opensips/socket")
modparam("mi_datagram", "children_count", 1)
modparam("mi_datagram", "unix_socket_mode", 0666)
modparam("mediaproxy", "disable", 0)
#modparam("mediaproxy", "mediaproxy_socket", "/var/run/mediaproxy/dispatcher.sock")
modparam("mediaproxy", "mediaproxy_timeout", 500)
modparam("mediaproxy", "signaling_ip_avp", "$avp(s:nat_ip)")
modparam("mediaproxy", "media_relay_avp", "$avp(s:media_relay)")


# ----------------- setting module-specific parameters ---------------


# ----- mi_fifo params -----
modparam("mi_fifo", "fifo_name", "/tmp/opensips_fifo")


# ----- rr params -----
# add value to ;lr param to cope with most of the UAs
modparam("rr", "enable_full_lr", 1)
# do not append from tag to the RR (no need for this script)
modparam("rr", "append_fromtag", 0)


# ----- registrar params -----
/* uncomment the next line not to allow more than 10 contacts per AOR */
#modparam("registrar", "max_contacts", 10)


# ----- usrloc params -----
modparam("usrloc", "db_mode",   0)
/* uncomment the following lines if you want to enable DB persistency
for location entries */
modparam("usrloc", "db_mode",   2)
modparam("usrloc", "db_url",
"mysql://opensips:opensipsrw@localhost/opensips")


# ----- uri params -----
modparam("uri", "use_uri_table", 0)


# ----- acc params -----
/* what sepcial events should be accounted ? */
modparam("acc", "early_media", 1)
modparam("acc", "report_ack", 1)
modparam("acc", "report_cancels", 1)
/* by default ww do not adjust the direct of the sequential requests.
if you enable this parameter, be sure the enable "append_fromtag"
in "rr" module */
modparam("acc", "detect_direction", 0)
/* account triggers (flags) */
modparam("acc", "failed_transaction_flag", 3)
modparam("acc", "log_flag", 1)
modparam("acc", "log_missed_flag", 2)
/* uncomment the following lines to enable DB accounting also */
modparam("acc", "db_flag", 1)
modparam("acc", "db_missed_flag", 2)


# ----- auth_db params -----
/* uncomment the following lines if you want to enable the DB based
authentication */
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("auth_db", "db_url",
"mysql://opensips:opensipsrw@localhost/opensips")
modparam("auth_db", "load_credentials", "")


# ----- alias_db params -----
/* uncomment the following lines if you want to enable the DB based
aliases */
#modparam("alias_db", "db_url",
#       "mysql://opensips:opensipsrw@localhost/opensips")


# ----- domain params -----
/* uncomment the following lines to enable multi-domain detection
support */
#modparam("domain", "db_url",
#       "mysql://opensips:opensipsrw@localhost/opensips")
#modparam("domain", "db_mode", 1)   # Use caching


# ----- multi-module params -----
/* uncomment the following line if you want to enable multi-domain support
in the modules (dafault off) */
#modparam("alias_db|auth_db|usrloc|uri", "use_domain", 1)


# ----- presence params -----
/* uncomment the following lines if you want to enable presence */
#modparam("presence|presence_xml", "db_url",
#       "mysql://opensips:opensipsrw@localhost/opensips")
#modparam("presence_xml", "force_active", 1)
#modparam("presence", "server_address", "sip:172.30.0.249:5060")


####### Routing Logic ########


# main request routing logic

route{

if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
exit;
}


if (has_totag()) {
# sequential request withing a dialog should
# take the path determined by record-routing
if (loose_route()) {
if (is_method("BYE")) {
setflag(1); # do accounting ...
setflag(3); # ... even if the transaction fails
} else if (is_method("INVITE")) {
# even if in most of the cases is useless, do RR for
# re-INVITEs alos, as some buggy clients do change route set
# during the dialog.
record_route();
}
# route it out to whatever destination was set by loose_route()
# in $du (destination URI).
route(1);
} else {
/* uncomment the following lines if you want to enable presence */
##if (is_method("SUBSCRIBE") && $rd == "your.server.ip.address") {
##      # in-dialog subscribe requests
##      route(2);
##      exit;
##}
if ( is_method("ACK") ) {
if ( t_check_trans() ) {
# non loose-route, but stateful ACK; must be an ACK after
# a 487 or e.g. 404 from upstream server
t_relay();
exit;
} else {
# ACK without matching transaction ->
# ignore and discard
exit;
}
}
sl_send_reply("404","Not here");
}
exit;
} else {
if (is_method("INVITE") ) {
engage_media_proxy();
}
}

#initial requests

# CANCEL processing
if (is_method("CANCEL"))
{
if (t_check_trans())
t_relay();
exit;
}

t_check_trans();

# authenticate if from local subscriber (uncomment to enable auth)
# authenticate all initial non-REGISTER request that pretend to be
# generated by local subscriber (domain from FROM URI is local)
##if (!(method=="REGISTER") && from_uri==myself) /*no multidomain version*/
##if (!(method=="REGISTER") && is_from_local()) /*multidomain version*/
##{
##      if (!proxy_authorize("", "subscriber")) {
##              proxy_challenge("", "0");
##              exit;
##      }
##      if (!check_from()) {
##              sl_send_reply("403","Forbidden auth ID");
##              exit;
##      }
##
##      consume_credentials();
##      # caller authenticated
##}

# preloaded route checking
if (loose_route()) {
xlog("L_ERR",
"Attempt to route with preloaded Route's [$fu/$tu/$ru/$ci]");
if (!is_method("ACK"))
sl_send_reply("403","Preload Route denied");
exit;
}

# record routing
if (!is_method("REGISTER|MESSAGE"))
record_route();

# account only INVITEs
if (is_method("INVITE")) {
setflag(1); # do accounting
}
if (!uri==myself)
## replace with following line if multi-domain support is used
##if (!is_uri_host_local())
{
append_hf("P-hint: outbound\r\n");
# if you have some interdomain connections via TLS
##if($rd=="tls_domain1.net") {
##      t_relay("tls:domain1.net");
##      exit;
##} else if($rd=="tls_domain2.net") {
##      t_relay("tls:domain2.net");
##      exit;
##}
route(1);
}

# requests for my domain

## uncomment this if you want to enable presence server
##   and comment the next 'if' block
##   NOTE: uncomment also the definition of route[2] from below
##if( is_method("PUBLISH|SUBSCRIBE"))
##              route(2);

if (is_method("PUBLISH"))
{
sl_send_reply("503", "Service Unavailable");
exit;
}


if (is_method("REGISTER"))
{
# authenticate the REGISTER requests (uncomment to enable auth)
if (!www_authorize("opensips", "subscriber"))
{
www_challenge("opensips", "0");
exit;
}
##
##if (!check_to())
##{
##      sl_send_reply("403","Forbidden auth ID");
##      exit;
##}

if (!save("location"))
sl_reply_error();

exit;
}

if ($rU==NULL) {
# request with no Username in RURI
sl_send_reply("484","Address Incomplete");
exit;
}

# apply DB based aliases (uncomment to enable)
##alias_db_lookup("dbaliases");

# do lookup with method filtering
if (!lookup("location","m")) {
switch ($retcode) {
case -1:
case -3:
t_newtran();
t_reply("404", "Not Found");
exit;
case -2:
sl_send_reply("405", "Method Not Allowed");
exit;
}
}

# when routing via usrloc, log the missed calls also
setflag(2);

route(1);
}


route[1] {
# for INVITEs enable some additional helper routes
if (is_method("INVITE")) {
t_on_branch("2");
t_on_reply("2");
t_on_failure("1");
}

if (!t_relay()) {
sl_reply_error();
};
exit;
}


# Presence route
/* uncomment the whole following route for enabling presence
NOTE: do not forget to enable the call of this route from the main
route */
##route[2]
##{
##      if (!t_newtran())
##      {
##              sl_reply_error();
##              exit;
##      };
##
##      if(is_method("PUBLISH"))
##      {
##              handle_publish();
##              t_release();
##      }
##      else
##      if( is_method("SUBSCRIBE"))
##      {
##              handle_subscribe();
##              t_release();
##      }
##
##      exit;
##}


branch_route[2] {
xlog("new branch at $ru\n");
}


onreply_route[2] {
xlog("incoming reply\n");
}


failure_route[1] {
if (t_was_cancelled()) {
exit;
}

# uncomment the following lines if you want to block client
# redirect based on 3xx replies.
##if (t_check_status("3[0-9][0-9]")) {
##t_reply("404","Not found");
##      exit;
##}

# uncomment the following lines if you want to redirect the failed
# calls to a different new destination
##if (t_check_status("486|408")) {
##      sethostport("192.168.2.100:5060");
##      # do not set the missed call flag again
##      t_relay();
##}
}
最后启用opensips 在文件/etc/default/opensips 中配置RUN_OPENSIPS=yes (默认为no）
最最后启动opensips /etc/init.d/opensips restart
参考链接
http://www.debian.org/CD/http-ftp/
http://mediaproxy.ag-projects.com/
http://opensips.org/