[Kamilio crashing after being hit by malicious SIP messages]

yes, we had similar issue earlier, but once we updated  to 4.3.58 , issue was gone, now it seems to have hit back.

[Kamilio crashing after being hit by malicious SIP messages]

nstalled Packages
Name        : kazoo-kamailio
Arch        : noarch
Version     : 4.3
Release     : 25.el7.centos
Size        : 0.0
Repo        : installed
From repo   : kazoo4

[root@d1k1 ~]# kamailio -version
version: kamailio 5.1.9-rc1 (x86_64/linux)

[Kamilio crashing after being hit by malicious SIP messages]

4.3 version (4.3.58)

[Kamilio crashing after being hit by malicious SIP messages]

IS anyone else facing same issue in kazoo cluster?

kazoo Kamilio  Module is crashing after being hit by  malicious SIP messages , which is causing kamailio to crash and dump core files.

root@d1k1 ~]# ls -lh /tmp
total 2.4G
-rw-------. 1 kamailio daemon 1.4G Sep  9 09:18 core.4419
-rw-------. 1 kamailio daemon 1.4G Sep  9 08:39 core.4422
-rw-------. 1 kamailio daemon 216M Sep  9 10:29 core.4426

 

Even a single malicious attempt is crashing module.

 

Dumps are being created, which ultimately fills disk space.

when one kamailio   module fails, other in cluster also fail  in matter of seconds.

 

 

 

 

 

[Regarding dividing cluster]

Hello

We have Setup Kazoo cluster across  different metal servers at different locations (datacenters).

Motive is that person can use nearest datacenter for low latency

Problem occurs when We have network connectivity issue in servers , All DB instances go down and thereby each zone indvidually also stop working.   The solution is divide Couch cluster per datacenter with periodic replications. Can someone guide how to go about it or has someone worked on it.

 

Another issue we face is , if say Kamillio on one Zone Goes down, it pulls down all kamillio on other zones..