Push Gateway on another machine

On this page

1 What’s about
2 Requirements
3 Archive to download
- 3.1 Drachtio Conf with TLS
- 3.2 Drachtio Conf without TLS
- 3.3 Run the docker-compose.yml
- 3.4 Access RedisInsight
4 Configure the firewall
5 How to configure Mobile Agents

This documentation is work in progress

What’s about

This scenario occurs if you decide to install the push gateway on another machine.
This is our recommended choice, if you want to use the same push gateway for multiple servers or multiple clients (by opening port 5060 or 5061 on all servers).
Moreover, for security reasons, in this way the push gateway is isolated.

Requirements

In Settings/Networks section you need to correctly set your localNET and ExternIP (that you can retrieve by launching the command curl https://ifconfig.me/ipand from the output you will be able to copy your IP (the string e.g. 11.222.33.444)
Hardware with minimum 1 CPU and 2 GB RAM (but always consider that this depends on the expected traffic)
You can use all operating systems, that support the required Docker Engine for example Debian
You will download the file published in this page (with or without tls depending on your needs) in tmp.
When you will dearchived it by launching the command -c, file will be inserted in /etc push gateway folder
Retrieve your public IP and PushGatewayDnsName to enter then in Drachtio configuration
If you want to use TLS, you need to retrieve these 3 files of certificates data: KeyCert, CertFile and ChainCert, that you will need when you configure the Drachtio Conf file
Before running the docker compose file:
- ensure that Docker Engine is installed on the system where you want to run the containers.
  To verify if the Docker is already installed, you can launch the command docker - v and the output will show you the installed Docker version:
  motion@xc-aws-mil-dev-xc01:~$ docker -v
  Docker version 24.0.7, build afdd53b
  If you install the push gateway on an other machine and this error appears bash: docker: command not found, you can follow the Debian documentation at this link to install the Docker: Debian
  (If you prefer to use an operating system different than Debian, you need to consider the relative docker commands documentation)
- ensure that Docker Compose is installed, as the docker-compose.yml file will be used to manage the containers.
  To verify if the Docker Compose is correctly installed you can launch the command docker compose version and the output will show you the installed Docker compose version:
  motion@xc-aws-mil-dev-xc01:~$ docker compose version
  Docker Compose version v2.21.0
  If the command is not found, you can launch this command to install it as user no root (configured with permission to launch docker): sudo apt-get install docker-compose-plugin

Environment Variables Configuration:

Some environment variables are required for the services to function correctly. Make sure that they are correctly configured before running the file:
- DEBUG_LEVEL=info | debug level for the push gateway
- TOKEN_KEY=xcally.p8 | Token key for authentication
- TOKEN_KEY_ID=X4R3256H89 | Token key ID
- TOKEN_TEAM_ID=7WCL6FH953 | Team ID of the token
- DRACHTIO_HOST=drachtio | Host address of the Drachtio server
- DRACHTIO_PORT=9022 | Port of the Drachtio server
- DRACHTIO_SECRET=cymru | Secret for the Drachtio server

Remember that if you decide for any reason to define another drachtio host, port, or secret, these data must also be changed in the variables above.

Archive to download

ONLY WITH UDP/TCP	WITH TLS

ONLY WITH UDP/TCP	WITH TLS

You need to open the desired file on your Linux machine (and you will see the file in this way:

You have to unarchive the file:
- by launching the command tar zxvf push-gateway.tar.gz if you use the folder only with UDP/TCP
- by launching the command tar zxvf push-gateway-tls.tar.gz if you use the TLS

The push gateway folder will be created. To enter the folder, run the command cd push-gateway

Then you need to launch command nano conf/drachtio.conf.xml to edit file in conf folder for Drachtio configuration in which you will need to specify your public IP and Push Gateway Dns Name

To retrieve the public IP of your server, you can launch the command
curl https://ifconfig.me/ip
From the output you will be able to copy your IP (the string 11.222.33.444)

Drachtio Conf with TLS

<drachtio>
        <admin port="9022" secret="cymru">0.0.0.0</admin>
  <sip>
    <contacts>
      <contact dns-names="YourPushGatewayDnsName" external-ip="YourPushGatewayPublicIp">sips:*:5061;transport=tls</contact>
      <contact dns-names="YourPushGatewayDnsName" external-ip="YourPushGatewayPublicIp">sip:*:5060;transport=udp,tcp</contact>
    </contacts>
    <tls>
      <key-file>/etc/ssl/xcally/YourKeyCertFile</key-file>
      <cert-file>/etc/ssl/xcally/YourCertFile</cert-file>
      <chain-file>/etc/ssl/xcally/YourChainCertFile</chain-file>
      <dh-param>/etc/ssl/xcally/dh2048.pem</dh-param>
    </tls>
  </sip>
  <logging>
     <console/>
     <sofia-loglevel>3</sofia-loglevel>
     <loglevel>info</loglevel>
  </logging>
</drachtio>

In the file drachtio.conf.xml you need to:

insert YourPushGatewayDnsName in contact dns-names section
insert YourPushGatewayPublicIp in external-ip section

After you unarchived the file, automatically you will have the folder /etc/pushgateway/ssl, where you need to move your certificate data and it’s mandatory to have these 3 files: KeyCert, CertFile and ChainCert

so in tls section, specify:
- YourKeyCertFile
- YourCertFile
- YourChainCertFile

Drachtio Conf without TLS

<drachtio>
<admin port="9022" secret="cymru">0.0.0.0</admin>
<sip>
<contacts>
<contact dns-names="YourPushGatewayDnsName" external-ip="YourPushGatewayPubblicIp">sip:*:5060;transport=udp,tcp</contact>
</contacts>
</sip>
<logging>
<console/>
<sofia-loglevel>3</sofia-loglevel>
<loglevel>info</loglevel>
</logging>
</drachtio>

In the file drachtio.conf.xml you need to:

insert YourPushGatewayDnsName in contact dns-names section
insert YourPushGatewayPublicIp in external-ip section

Run the docker-compose.yml

To run the docker-compose.yml file, follow these steps:

Open a terminal or command prompt
Open the docker-compose.yml file with a text editor. Modify, if necessary, the environment variables published in requirements
As ports you can view this configuration

ports:
  - 5061:5061
  - 5060:5060 
  - 5060:5060/udp

In the directory where the file is located, run the Docker Compose Command to start the containers:

With this command, Docker Compose will start the containers in the background

Verify Container Startup: to verify the status of the containers, you have to run the command:

You can see the 4 containers correctly present

Ensure all services listed in the docker-compose.yml file are running correctly

At the end of the process you will have:

push-gateway for notification system
redis for cache
redisinsight for dashboard
drachtio for the stack SIP. As we have seen, you can indicate as port for UDP/TCP the default 5060 and for TLS the default 5061, but if you prefer, you can decide to change it (in this case remember to use this information also in mobile agent configuration and to edit them in the drachtio conf file that we’ve analysed above).
volumes configuration
logging data for logs file
the option restart :always , so if the container crashes, it automatically restarts

Access RedisInsight

RedisInsight is the module installed in the docker compose file to view cache content (it works as cache dashboard).

Once running, you can access the RedisInsight web interface by opening your browser and navigating to:

By default it is created without database and you need to add it, by inserting

host : redis
use the default port
define the desired alias
you can test connection

Add database

Every time a mobile app is connected, you will see all the keys saved in cache memory

The services are now running and ready to be used. You can interact with the push gateway, the Redis server, and the Drachtio server as required.

Configure the firewall

It’s necessary to configure the firewall to accept requests arriving on different ports:

5060 for Drachtio TCP/UDP (mandatory to make it work) only on push gateway
5061 for Drachtio TLS (mandatory to make it work)
10000-20000 for RTP stream to allow the voice connection. These ports are open during the call but they are used by Asterisk only after having negotiated ports with external phones
5540 for RedisInsight: optional if you want to reach the service from the web to view cache dashboard

How to configure Mobile Agents

In this scenario, when you create Mobile Agents in Staff Section you will need to specify your Push Gateway Address with the correct port.

In Staff → Agents → Edit Mobile Agent → Mobile App section → Mobile App Push Gateway you need to specify the push gateway address, so the server on which you have installed the push gateway + the port used for it (e.g. pushgatewayaddress:5060). Remember that if you decide to use a different port in the file, you need to specify it also here, by replacing the 5060 with the selected one.

Moreover in the agent’s Voice section it’s important to use the same transport protocol that you decide to use on push gateway.

We recommend to use both udp,tcp options if you use a configuration without tls

If you use TLS, you need to select tls protocol as transport.

Moreover for TLS it’s necessary to enable encryption

XCALLY Motion V3