<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi,</div><div>looks like the tcp connection got timeout.</div><div>Are you sure to have the port you need opened (5060 tcp and 5061 tcp) ?</div><div><br></div><div>Daniel</div><div><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"H Yavari" <hyavari@rocketmail.com><br><b>To: </b>"Daniel Grotti" <dgrotti@sipwise.com>, spce-user@lists.sipwise.com<br><b>Sent: </b>Sunday, January 18, 2015 8:43:42 AM<br><b>Subject: </b>Re: [Spce-user] Peering two SPCE over TLS<br><div><br></div><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px" data-mce-style="color: #000; background-color: #fff; font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;"><div dir="ltr" id="yui_3_16_0_1_1421561394248_17877"><span>Hi,</span></div><div id="yui_3_16_0_1_1421561394248_17921" dir="ltr"><span id="yui_3_16_0_1_1421561394248_17922">I tested it with TCP and I received "ERROR: <core> [tcp_main.c:4422]: tcpconn_main_timeout(): connect Public IP of peer server :5060 failed (timeout)" <br></span></div><div id="yui_3_16_0_1_1421561394248_17960"><br></div><div id="yui_3_16_0_1_1421561394248_18049"><br></div><div id="yui_3_16_0_1_1421561394248_18051" dir="ltr">Regards,</div><div id="yui_3_16_0_1_1421561394248_18053" dir="ltr">H. Yavari<br></div><div id="yui_3_16_0_1_1421561394248_17804" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;" data-mce-style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;"><div id="yui_3_16_0_1_1421561394248_17803" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" data-mce-style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"><div id="yui_3_16_0_1_1421561394248_17802" dir="ltr"><hr size="1"><span id="yui_3_16_0_1_1421561394248_17806" size="2" face="Arial" data-mce-style="font-family: Arial; font-size: small;" style="font-family: Arial; font-size: small;"> <b id="yui_3_16_0_1_1421561394248_17875"><span id="yui_3_16_0_1_1421561394248_17874" style="font-weight:bold;" data-mce-style="font-weight: bold;">From:</span></b> Daniel Grotti <dgrotti@sipwise.com><br> <br> </span></div><div id="yui_3_16_0_1_1421561394248_17863" class="y_msg_container"><br><div id="yiv6641070616"><div id="yui_3_16_0_1_1421561394248_17925"><div id="yui_3_16_0_1_1421561394248_17924" dir="ltr">No, as long as the message its relay in TLS with no errors, there are no problems.</div><div id="yui_3_16_0_1_1421561394248_17927" dir="ltr">I guess it fails for timeout, since you don't get any message on the peer side, isn't?</div><div id="yui_3_16_0_1_1421561394248_17933" dir="ltr">Daniel</div><div class="qtdSeparateBR"><br><div><br></div></div><div class="yiv6641070616yqt4598452263" id="yiv6641070616yqt84781"><div id="yui_3_16_0_1_1421561394248_17939" class="yiv6641070616gmail_quote">On 17 Jan 2015 14:17, H Yavari <hyavari@rocketmail.com> wrote:<br clear="none"><blockquote id="yui_3_16_0_1_1421561394248_17938" class="yiv6641070616quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;" data-mce-style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><div id="yui_3_16_0_1_1421561394248_17937"><div id="yui_3_16_0_1_1421561394248_17936" style="color:#000;background-color:#fff;font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:13px;" data-mce-style="color: #000; background-color: #fff; font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 13px;"><div id="yui_3_16_0_1_1421561394248_17935" dir="ltr">Hi,</div><div id="yui_3_16_0_1_1421561394248_17951" dir="ltr"><br clear="none"></div><div id="yui_3_16_0_1_1421561394248_17949" dir="ltr">Yes I checked, There isn't any error and I see "transport=tls" too.</div><div id="yui_3_16_0_1_1421561394248_17941" dir="ltr">I should define any thing on the other server?</div><div id="yui_3_16_0_1_1421561394248_17947" dir="ltr"><br clear="none"></div><div id="yui_3_16_0_1_1421561394248_17943" dir="ltr"><br clear="none"></div><div id="yui_3_16_0_1_1421561394248_17945" dir="ltr">Regards,</div><div id="yui_3_16_0_1_1421561394248_18055" dir="ltr">H. Yavari</div><br clear="none"><div style="font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:13px;" data-mce-style="font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 13px;"><div style="font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:16px;" data-mce-style="font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 16px;"><div dir="ltr"><hr size="1"><span size="2" face="Arial" data-mce-style="font-family: Arial; font-size: small;" style="font-family: Arial; font-size: small;"> <b><span style="font-weight:bold;" data-mce-style="font-weight: bold;">From:</span></b> Daniel Grotti <dgrotti@sipwise.com><br clear="none"> <br clear="none"> </span></div><div><br clear="none"><div><div><div dir="ltr">Can you check in the LB log you see what's happening? Do you see errors? Do you see its using TLS socket ?</div><div dir="ltr">Daniel</div><div><br clear="none"><br clear="none"></div><div><div>On 17 Jan 2015 13:35, H Yavari <hyavari@rocketmail.com> wrote:<br clear="none"><blockquote style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex;" data-mce-style="margin: 0 0 0 0.8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><div><div style="color:#000;background-color:#fff;font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:13px;" data-mce-style="color: #000; background-color: #fff; font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 13px;"><div dir="ltr">Hi,</div><div dir="ltr">I mean in the proxy-log, not any request received by peer server. Yes I checked and TLS is enabled on 5061 port.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Regards,</div><div dir="ltr">H. Yavari</div><br clear="none"><div style="font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:13px;" data-mce-style="font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 13px;"><div style="font-family:'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif;font-size:16px;" data-mce-style="font-family: 'helveticaneue' , 'helvetica neue' , 'helvetica' , 'arial' , 'lucida grande' , sans-serif; font-size: 16px;"><div dir="ltr"><hr size="1"><span size="2" face="Arial" data-mce-style="font-family: Arial; font-size: small;" style="font-family: Arial; font-size: small;"> <b><span style="font-weight:bold;" data-mce-style="font-weight: bold;">From:</span></b> Daniel Grotti <dgrotti@sipwise.com><br clear="none"> <br clear="none"> </span></div><div><br clear="none"><div dir="ltr">Hi,<br clear="none"></div><div dir="ltr">What do you mean no message received on the peer?<br clear="none"></div><div dir="ltr">Did you enable TLS on your server in config.yml?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">What does the kamailio-lb.log say?<br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr">DanielOn 17 Jan 2015 13:08, H Yavari <<a rel="nofollow" shape="rect" target="_blank" href="mailto:hyavari@rocketmail.com" data-mce-href="mailto:hyavari@rocketmail.com">hyavari@rocketmail.com</a>> wrote:<br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">> Hi,<br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">> I want to create a trunk between 2 CPE in the internet over TLS, and only one of them has static ip address. I checked config.yml too and TLS is enabled on both server.<br clear="none"></div><div dir="ltr">> So I defined an peer server with TLS protocol over port 5061 in that server that has dynamic ip. But when I make a call on this server, not any request received in the other Server. (Everything is ok over UDP )<br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">> How can I solve this ? Should I defined any peer on the other Server? <br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">><br clear="none"></div><div dir="ltr">> Regards,<br clear="none"></div><div dir="ltr">> H. Yavari<br clear="none"></div><br clear="none"><br clear="none"></div></div></div></div></div></blockquote></div></div></div></div><br clear="none"><br clear="none"></div></div></div></div></div></blockquote></div></div></div></div><br><div><br></div></div></div></div></div></div><div><br></div></div></body></html>