George Joseph d8df207318 WebSocket Enhancements: Proxies and Keepalives for ARI and Media Outbound Websockets.
See the notes below for high-level descriptions of the new features.

* Proxies

Outbound/forward HTTP proxies are now supported and configurable in
websocket_client.conf. You can specify a host:port plus optional proxy_username
and proxy_password. Because WebSockets aren't consistently supported among
proxies (specifically passing through UPGRADEs), the CONNECT method is always
used to establish a TCP tunnel through the proxy. This is required if a TLS
session is to be established with the WebSocket server anyway.  It's important
to understand that that negotiation with the proxy is ALWAYS unsecured. Once
the proxy establishes the tunnel, the TLS session will be negotiated directly
with the remote WebSocket server via the tunnel.

* Keepalives

Both TCP-level and WebSocket PING/PONG keepalives can be configured and are
available with either the curl or tcptls client implementations. The TCP
keepalives are handled entirely by the operating system and require no
resources from Asterisk but by their very nature, they can't traverse proxies.
WebSocket PING/PONGs are implemented in the Asterisk websocket code and require
a scheduler thread to keep track of them so they're a bit more complicated but
they do traverse proxies.  Which one is used is completely up to the admin.
You could use both.

* Other Changes

A few changes were needed to res/ari/ari_websockets and
res/res_aeap/transport_websocket to add explicit calls to ast_websocket_close.
They had been assuming that the websocket session destructor would close the
websocket when it unreffed it but the keepalive process now holds a reference
so the destructor wouldn't actually run without the call to ast_websocket_close
to stop the keepalives.

A few new methods were added to tcptls.c to allow switching an existing
connection from unsecured to TLS.  These were required because the initial
connection and handshake with a proxy is always unsecured but then needs
to be switched to TLS if required for the remote WebSocket server.

There was a bug in sorcery.h where the ast_sorcery_register_uint macro
was referencing _stringify (which doesn't exist) instead of _sorcery_stringify.

Resolves: #1881
Resolves: #1933

UserNote: Forward/outbound proxies can now be specified for outbound websockets.
See the websocket_client.conf.sample file for configuration information.

UserNote: TCP-level or WebSocket PING/PONG keepalives can now be enabled on
outbound websockets.  They can help detect network failures even when a
persistent connection is idle. See the websocket_client.conf.sample
file for configuration information.

DeveloperNote: The addition of the proxy and keepalive configuration parameters
pushed the websocket client parameter count over 32. This necessitated changing
the size of the ast_ws_client_fields enum from a 32 bit bitfield to a 64-bit
bitfield with a corresponding change to the ast_websocket_client structure.
2026-06-09 14:22:56 +00:00
2024-12-10 13:25:02 +00:00
2008-07-01 16:28:43 +00:00
2023-12-08 13:11:48 +00:00
2025-03-28 15:29:13 +00:00
2025-10-13 15:07:23 +00:00
2025-03-13 13:15:01 +00:00

The Asterisk(R) Open Source PBX

By Mark Spencer <markster@digium.com> and the Asterisk.org developer community.
Copyright (C) 2001-2025 Sangoma Technologies Corporation and other copyright holders.

SECURITY

It is imperative that you read and fully understand the contents of the security information document before you attempt to configure and run an Asterisk server.

See Important Security Considerations for more information.

WHAT IS ASTERISK ?

Asterisk is an Open Source PBX and telephony toolkit. It is, in a sense, middleware between Internet and telephony channels on the bottom, and Internet and telephony applications at the top. However, Asterisk supports more telephony interfaces than just Internet telephony. Asterisk also has a vast amount of support for traditional PSTN telephony, as well.

For more information on the project itself, please visit the Asterisk Home Page and the official Asterisk Documentation.

SUPPORTED OPERATING SYSTEMS

Linux

The Asterisk Open Source PBX is developed and tested primarily on the GNU/Linux operating system, and is supported on every major GNU/Linux distribution.

Others

Asterisk has also been 'ported' and reportedly runs properly on other operating systems as well, Apple's Mac OS X, and the BSD variants.

GETTING STARTED

Most users are using VoIP/SIP exclusively these days but if you need to interface to TDM or analog services or devices, be sure you've got supported hardware.

Supported telephony hardware includes:

  • All Analog and Digital Interface cards from Sangoma
  • Any full duplex sound card supported by PortAudio
  • The Xorcom Astribank channel bank

UPGRADING FROM AN EARLIER VERSION

If you are updating from a previous version of Asterisk, make sure you read the Change Logs.

Change Logs

NEW INSTALLATIONS

Ensure that your system contains a compatible compiler and development libraries. Asterisk requires either the GNU Compiler Collection (GCC) version 4.1 or higher, or a compiler that supports the C99 specification and some of the gcc language extensions. In addition, your system needs to have the C library headers available, and the headers and libraries for ncurses.

There are many modules that have additional dependencies. To see what libraries are being looked for, see ./configure --help, or run make menuselect to view the dependencies for specific modules.

On many distributions, these dependencies are installed by packages with names like 'glibc-devel', 'ncurses-devel', 'openssl-devel' and 'zlib-devel' or similar. The contrib/scripts/install_prereq script can be used to install the dependencies for most Debian and Redhat based Linux distributions. The script also handles SUSE, Arch, Gentoo, FreeBSD, NetBSD and OpenBSD but those distributions mightnoit have complete support or they might be out of date.

So, let's proceed:

  1. Read the documentation.
    The Asterisk Documentation website has full information for building, installing, configuring and running Asterisk.

  2. Run ./configure
    Execute the configure script to guess values for system-dependent variables used during compilation. If the script indicates that some required components are missing, you can run ./contrib/scripts/install_prereq install to install the necessary components. Note that this will install all dependencies for every functionality of Asterisk. After running the script, you will need to rerun ./configure.

  3. Run make menuselect
    This is needed if you want to select the modules that will be compiled and to check dependencies for various optional modules.

  4. Run make
    Assuming the build completes successfully:

  5. Run make install
    If this is your first time working with Asterisk, you may wish to install the sample PBX, with demonstration extensions, etc. If so, run:

  6. Run make samples
    Doing so will overwrite any existing configuration files you have installed.

  7. Finally, you can launch Asterisk in the foreground mode (not a daemon) with asterisk -vvvc
    You'll see a bunch of verbose messages fly by your screen as Asterisk initializes (that's the "very very verbose" mode). When it's ready, if you specified the "c" then you'll get a command line console, that looks like this:
    *CLI>
    You can type core show help at any time to get help with the system. For help with a specific command, type core show help <command>.

man asterisk at the Unix/Linux command prompt will give you detailed information on how to start and stop Asterisk, as well as all the command line options for starting Asterisk.

ABOUT CONFIGURATION FILES

All Asterisk configuration files share a common format. Comments are delimited by ; (since # of course, being a DTMF digit, may occur in many places). A configuration file is divided into sections whose names appear in []'s. Each section typically contains statements in the form variable = value although you may see variable => value in older samples.

SPECIAL NOTE ON TIME

Those using SIP phones should be aware that Asterisk is sensitive to large jumps in time. Manually changing the system time using date(1) (or other similar commands) may cause SIP registrations and other internal processes to fail. For this reason, you should always use a time synchronization package to keep your system time accurate. All OS/distributions make one or more of the following packages available:

  • ntpd/ntpsec
  • chronyd
  • systemd-timesyncd

Be sure to install and configure one (and only one) of them.

FILE DESCRIPTORS

Depending on the size of your system and your configuration, Asterisk can consume a large number of file descriptors. In UNIX, file descriptors are used for more than just files on disk. File descriptors are also used for handling network communication (e.g. SIP, IAX2, or H.323 calls) and hardware access (e.g. analog and digital trunk hardware). Asterisk accesses many on-disk files for everything from configuration information to voicemail storage.

Most systems limit the number of file descriptors that Asterisk can have open at one time. This can limit the number of simultaneous calls that your system can handle. For example, if the limit is set at 1024 (a common default value) Asterisk can handle approximately 150 SIP calls simultaneously. To change the number of file descriptors follow the instructions for your system below:

PAM-BASED LINUX SYSTEM

If your system uses PAM (Pluggable Authentication Modules) edit /etc/security/limits.conf. Add these lines to the bottom of the file:

root            soft    nofile          4096
root            hard    nofile          8196
asterisk        soft    nofile          4096
asterisk        hard    nofile          8196

(adjust the numbers to taste). You may need to reboot the system for these changes to take effect.

GENERIC UNIX SYSTEM

If there are no instructions specifically adapted to your system above you can try adding the command ulimit -n 8192 to the script that starts Asterisk.

MORE INFORMATION

Visit the Asterisk Documentation website for more documentation on various features and please read all the configuration samples that include documentation on the configuration options.

Finally, you may wish to join the Asterisk Community Forums

Welcome to the growing worldwide community of Asterisk users!

        Mark Spencer, and the Asterisk.org development community

Asterisk is a trademark of Sangoma Technologies Corporation

[Sangoma] [Home Page] [Support] [Documentation] [Community Forums] [Release Notes] [Security] [Mailing List Archive]

S
Description
The official Asterisk Project repository.
Readme 470 MiB
Languages
C 96.3%
Python 1%
Shell 0.8%
M4 0.6%
Makefile 0.4%
Other 0.5%