-
-
Notifications
You must be signed in to change notification settings - Fork 88
Access Service
Minh edited this page Sep 10, 2021
·
10 revisions
Access Service is an component that enable the LibreSBC communicate to public network (internet) and serve the access functions include:
- Registrar
- Location Service
- Authentication
- Routing
- Topology Hiding
- Multi-Domain Policy
- Antiflooding
- Bruteforce Prevention
- Microsoft Teams Direct Routing (under-development)
Parameter | Category | Description |
---|---|---|
name |
string required
|
The name of access service |
desc | string |
description |
server_header | string |
Server Header |
transports | list |
list of binding transport protocol udp tcp tls
|
sip_address | string |
IP address via NetAlias use for SIP Signalling |
antiflooding | map |
security function for antifloofing/ddos |
authfailure | map |
security function for authentication failure/bruteforce/intrusion detection |
attackavoid | map |
security function for attack avoidance |
blackips | list |
denied ip list |
whiteips | list |
allowed ip list |
domains | list |
list of policy domain |
Antiflooding Map
Parameter | Category | Description |
---|---|---|
sampling | int |
sampling time unit (in second) |
density | int |
number of request that allow in sampling time, then will be ignore within window time |
window | int |
evaluated window time in second |
threshold | int |
number of flooding threshold that will be banned |
bantime | int |
firewall ban time in second |
Authfailure Map
Parameter | Category | Description |
---|---|---|
window | int |
evaluated window time in second |
threshold | int |
number of authentication failure threshold that will be banned |
bantime | int |
firewall ban time in second |
Attackavoid Map
Parameter | Category | Description |
---|---|---|
window | int |
evaluated window time in second |
threshold | int |
number of request threshold that will be banned |
bantime | int |
firewall ban time in second |
Parameter | Category | Description |
---|---|---|
domain |
string required
|
The sip domain |
srcsocket | map |
listen socket of sip between proxy and b2bua |
dstsocket | map |
forward socket of sip between proxy and b2bua |
srcsocket/dstsocket Map
Parameter | Category | Description |
---|---|---|
ip |
string required
|
ip address |
Parameter | Category | Description |
---|---|---|
domain |
string required
|
The sip domain |
id |
string required
|
user identifier |
secret |
string required
|
password of digest auth for inbound |