Add Docker files to build RTPEngine used by PCSCF
This commit is contained in:
herlesupreeth
47
rtpengine/Dockerfile
Normal file
47
rtpengine/Dockerfile
Normal file
@@ -0,0 +1,47 @@
|
|||||||
|
# BSD 2-Clause License
|
||||||
|
|
||||||
|
# Copyright (c) 2020, Supreeth Herle
|
||||||
|
# All rights reserved.
|
||||||
|
|
||||||
|
# Redistribution and use in source and binary forms, with or without
|
||||||
|
# modification, are permitted provided that the following conditions are met:
|
||||||
|
|
||||||
|
# 1. Redistributions of source code must retain the above copyright notice, this
|
||||||
|
# list of conditions and the following disclaimer.
|
||||||
|
|
||||||
|
# 2. Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
# this list of conditions and the following disclaimer in the documentation
|
||||||
|
# and/or other materials provided with the distribution.
|
||||||
|
|
||||||
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
||||||
|
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||||||
|
# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
||||||
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
||||||
|
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
||||||
|
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
||||||
|
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||||
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
FROM ubuntu:bionic
|
||||||
|
|
||||||
|
ENV DEBIAN_FRONTEND=noninteractive
|
||||||
|
ENV DEB_BUILD_PROFILES="pkg.ngcp-rtpengine.nobcg729"
|
||||||
|
|
||||||
|
# Install updates and dependencies
|
||||||
|
RUN apt-get update && \
|
||||||
|
apt-get -y install git vim tmux dpkg-dev debhelper default-libmysqlclient-dev gperf iptables-dev libavcodec-dev libavfilter-dev libavformat-dev \
|
||||||
|
libavutil-dev libbencode-perl libcrypt-openssl-rsa-perl libcrypt-rijndael-perl libdigest-crc-perl libdigest-hmac-perl \
|
||||||
|
libevent-dev libhiredis-dev libio-multiplex-perl libio-socket-inet6-perl libiptc-dev libjson-glib-dev libnet-interface-perl \
|
||||||
|
libpcap0.8-dev libpcre3-dev libsocket6-perl libspandsp-dev libssl-dev libswresample-dev libsystemd-dev libxmlrpc-core-c3-dev \
|
||||||
|
markdown dkms module-assistant keyutils libnfsidmap2 nfs-common rpcbind libglib2.0-dev zlib1g-dev libavcodec-extra \
|
||||||
|
libcurl4-openssl-dev netcat-openbsd netcat iptables iproute2 net-tools iputils-ping
|
||||||
|
|
||||||
|
# Fetch RTPEngine code (tag mr7.4.1), build and install
|
||||||
|
RUN git clone https://github.com/sipwise/rtpengine && \
|
||||||
|
cd rtpengine && git checkout mr7.4.1 && dpkg-checkbuilddeps && \
|
||||||
|
dpkg-buildpackage -b -uc -us && cd .. && \
|
||||||
|
dpkg -i *.deb && ldconfig && mkdir /var/spool/rtpengine
|
||||||
|
|
||||||
|
CMD /mnt/rtpengine/rtpengine_init.sh
|
||||||
84
rtpengine/rtpengine_init.sh
Executable file
84
rtpengine/rtpengine_init.sh
Executable file
@@ -0,0 +1,84 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# BSD 2-Clause License
|
||||||
|
|
||||||
|
# Copyright (c) 2020, Supreeth Herle
|
||||||
|
# All rights reserved.
|
||||||
|
|
||||||
|
# Redistribution and use in source and binary forms, with or without
|
||||||
|
# modification, are permitted provided that the following conditions are met:
|
||||||
|
|
||||||
|
# 1. Redistributions of source code must retain the above copyright notice, this
|
||||||
|
# list of conditions and the following disclaimer.
|
||||||
|
|
||||||
|
# 2. Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
# this list of conditions and the following disclaimer in the documentation
|
||||||
|
# and/or other materials provided with the distribution.
|
||||||
|
|
||||||
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
||||||
|
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||||||
|
# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
||||||
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
||||||
|
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
||||||
|
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
||||||
|
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||||
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
set -x
|
||||||
|
RUNTIME=${1:-rtpengine}
|
||||||
|
|
||||||
|
if lsmod | grep xt_RTPENGINE || modprobe xt_RTPENGINE; then
|
||||||
|
echo "rtpengine kernel module already loaded."
|
||||||
|
else
|
||||||
|
modprobe xt_RTPENGINE
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Populate options of the rtpengine cli command
|
||||||
|
[ -z "$INTERFACE" ] && INTERFACE="$(awk 'END{print $1}' /etc/hosts)"
|
||||||
|
[ -z "$TABLE" ] && TABLE="0"
|
||||||
|
[ -z "$LISTEN_NG" ] && LISTEN_NG="$(awk 'END{print $1}' /etc/hosts):2223"
|
||||||
|
[ -z "$PORT_MIN" ] && PORT_MIN="30000"
|
||||||
|
[ -z "$PORT_MAX" ] && PORT_MAX="40000"
|
||||||
|
[ -z "$TOS" ] && TOS="184"
|
||||||
|
[ -z "$PIDFILE" ] && PIDFILE="/run/ngcp-rtpengine-daemon.pid"
|
||||||
|
|
||||||
|
OPTIONS=""
|
||||||
|
OPTIONS="$OPTIONS --interface=$INTERFACE --listen-ng=$LISTEN_NG --pidfile=$PIDFILE --port-min=$PORT_MIN --port-max=$PORT_MAX "
|
||||||
|
OPTIONS="$OPTIONS --table=$TABLE --tos=$TOS --foreground"
|
||||||
|
|
||||||
|
if test "$NO_FALLBACK" = "yes" ; then
|
||||||
|
OPTIONS="$OPTIONS --no-fallback"
|
||||||
|
fi
|
||||||
|
|
||||||
|
set +e
|
||||||
|
if [ -e /proc/rtpengine/control ]; then
|
||||||
|
echo "del $TABLE" > /proc/rtpengine/control 2>/dev/null
|
||||||
|
fi
|
||||||
|
# Freshly add the iptables rules to forward the udp packets to the iptables-extension "RTPEngine":
|
||||||
|
# Remember iptables table = chains, rules stored in the chains
|
||||||
|
# -N (create a new chain with the name rtpengine)
|
||||||
|
iptables -N rtpengine 2> /dev/null
|
||||||
|
|
||||||
|
# -D: Delete the rule for the target "rtpengine" if exists. -j (target): chain name or extension name
|
||||||
|
# from the table "filter" (the default -without the option '-t')
|
||||||
|
iptables -D INPUT -j rtpengine 2> /dev/null
|
||||||
|
# Add the rule again so the packets will go to rtpengine chain after the (filter-INPUT) hook point.
|
||||||
|
iptables -I INPUT -j rtpengine
|
||||||
|
# Delete and Insert a rule in the rtpengine chain to forward the UDP traffic
|
||||||
|
iptables -D rtpengine -p udp -j RTPENGINE --id "$TABLE" 2>/dev/null
|
||||||
|
iptables -I rtpengine -p udp -j RTPENGINE --id "$TABLE"
|
||||||
|
iptables-save > /etc/iptables.rules
|
||||||
|
|
||||||
|
# The same for IPv6
|
||||||
|
ip6tables -N rtpengine 2> /dev/null
|
||||||
|
ip6tables -D INPUT -j rtpengine 2> /dev/null
|
||||||
|
ip6tables -I INPUT -j rtpengine
|
||||||
|
ip6tables -D rtpengine -p udp -j RTPENGINE --id "$TABLE" 2>/dev/null
|
||||||
|
ip6tables -I rtpengine -p udp -j RTPENGINE --id "$TABLE"
|
||||||
|
ip6tables-save > /etc/ip6tables.rules
|
||||||
|
|
||||||
|
set -x
|
||||||
|
|
||||||
|
exec $RUNTIME $OPTIONS
|
||||||
Reference in New Issue
Block a user