Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


zimbonz

96 posts

Master Geek


#105003 25-Jun-2012 10:18
Send private message

With the question of security etc in mind - are Private SIP trunks possible, or even feasible?
What I mean by that, is say you have a direct data circuit to a SIP provider, with no internet access on the circuit, like a closed VPN. Then connect to the SIP proxy internal address across the data circuit, to provide outside connectivity to your ip-pbx?

Or is this a fundemental voilation of SIP's protocol, being peer to peer?
This eliminates the possibility to use stun, and I am not sure that having the ippbx not accessible at all from the internet would cause problems or not.
It would certainly help with hacking though, given that the 5060 ports are not accessible...
Any suggestions/recommendations?

Cheers,
Z

Create new topic
sbiddle
30853 posts

Uber Geek

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #645730 25-Jun-2012 10:22
Send private message

SIP isn't a peer to peer protocol.

Many providers will only deliver VoIP connections over dedicated data connections (HSNS for example) and it's certainly very common in the industry.




antoniosk
2358 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #645763 25-Jun-2012 10:55
Send private message

Yep - Gen-I and TelstraClear offer private network SIP products now, and I'm sure the public operators offer private connections too.

A




________

 

Antoniosk


zimbonz

96 posts

Master Geek


  #645799 25-Jun-2012 11:54
Send private message

Many thanks guys - appreciate the feedback.
Sounds like this is the way to go then.

cheers,



Zeon
3916 posts

Uber Geek

Trusted

  #645833 25-Jun-2012 12:44
Send private message

While security etc. is really important I do agree, unless QoS is an issue over the public internet I see no reason for a private connection. At the end of the day the security risk is at the carrier's gateway, not your system. This is because you can fully firewall your system so that the only ingress and egress traffic go to the carrier's gateway IP.

The problem with private circuits is that you will lose the redundancy you get with the internet e.g. if my fibre connection gets cut, I can drop in a 3g connection basically straight away.




Speedtest 2019-10-14


sbiddle
30853 posts

Uber Geek

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #645845 25-Jun-2012 13:02
Send private message

zimbonz: Many thanks guys - appreciate the feedback.
Sounds like this is the way to go then.

cheers,


Whether or not it's the "way to go" dosn't have a simple answer. There are pros and cons, and at the end of the day depends entirely on how you want to configure things. Security risks of exposing a PBX to the internet can be essentially eliminated by configuring things correctly.


Regs
4066 posts

Uber Geek

Trusted
Snowflake

  #646123 25-Jun-2012 22:35
Send private message

i have a private SIP trunk with callplus. its delivered on a seperate VLAN over the fibre and has a private ip range. it certainly makes firewalling easier, but it also segregates your VoIP traffic from your internet traffic and means you dont have to stuff around with QoS.




Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.