Elastix 2.5 and 3.0 released
-
It's about time!! Awesome.
-
just downloaded 3.0 i need to set this up in the lab and play with it again i believe. Scott, how do you guys as a business use Elastix? how do you deploy it for clients, etc?
-
@Hubtech said:
just downloaded 3.0 i need to set this up in the lab and play with it again i believe. Scott, how do you guys as a business use Elastix? how do you deploy it for clients, etc?
We run it on Rackspace.
-
@scottalanmiller do you guys do s2s VPNs between client and Rackspace?
-
@Hubtech said:
@scottalanmiller do you guys do s2s VPNs between client and Rackspace?
We can but that's not something that people want as they lose much of the flexibility of hosted VoIP. Most want open or semi-open roaming. Those that are single site normally prefer locked IPs to s2s VPN.
-
@scottalanmiller said:
@Hubtech said:
@scottalanmiller do you guys do s2s VPNs between client and Rackspace?
We can but that's not something that people want as they lose much of the flexibility of hosted VoIP. Most want open or semi-open roaming. Those that are single site normally prefer locked IPs to s2s VPN.
So in that instance, does RS let you rent/mount/buy some sort of firewall to put in place? or do you use vyatta or something like that?
-
@Hubtech said:
@scottalanmiller said:
@Hubtech said:
@scottalanmiller do you guys do s2s VPNs between client and Rackspace?
We can but that's not something that people want as they lose much of the flexibility of hosted VoIP. Most want open or semi-open roaming. Those that are single site normally prefer locked IPs to s2s VPN.
So in that instance, does RS let you rent/mount/buy some sort of firewall to put in place? or do you use vyatta or something like that?
RS provides no VPN service. You can use Vyatta or you can build directly off of the PBX itself since they build in VPNs. A very common approach is c2s VPN with OpenVPN.
-
@Hubtech said:
@scottalanmiller said:
@Hubtech said:
@scottalanmiller do you guys do s2s VPNs between client and Rackspace?
We can but that's not something that people want as they lose much of the flexibility of hosted VoIP. Most want open or semi-open roaming. Those that are single site normally prefer locked IPs to s2s VPN.
So in that instance, does RS let you rent/mount/buy some sort of firewall to put in place? or do you use vyatta or something like that?
You should see the default IPTables @scottalanmiller wrote for when Asterisk systems are deployed.
-
This is something I'm really interested in, but can barely talk the language. How do you get a phone in your home to connect to the PBX at RS? Does the phone support a VPN connection?
-
And why Elastix over FreePBX?
-
@Dashrender said:
This is something I'm really interested in, but can barely talk the language. How do you get a phone in your home to connect to the PBX at RS? Does the phone support a VPN connection?
No VPN, that is the point of what @scottalanmiller is saying. The clients want open roaming for mobile or home workers.
Instead you lock down rules in ip tables to restrict to known addresses and networks.
Still leaves you a bit open, but it is not open to the world.
-
@Dashrender said:
And why Elastix over FreePBX?
FreePBX as a distribution is actually quite new to the scene. The web interface is the core of many other distributions and has been for years.
Elastix was the best solution for clients that have no IT or want to just see a simple interface to manage day to day PBX chores.
All the other systems are quite a bit more flexible, but also require a bit more knowledge to operate well.
-
@Dashrender said:
This is something I'm really interested in, but can barely talk the language. How do you get a phone in your home to connect to the PBX at RS? Does the phone support a VPN connection?
Nearly any phone has built in VPN, but you don't need once. VoIP works just like any service on the Internet. There is nothing strange or unique here. Think about how your browser (which is like a phone) talks to a hosted web server (which is like the PBX.) You don't need a VPN or any special setup for them to talk.
-
Elastix 3 has its own, new GUI. We have to see how that is. FreePBX lacks the maturity of Elastix and has not yet proven its staying power. But it is made by the people who make the main GUI that everyone uses - or did until today when Elastix announced their own.
-
@scottalanmiller said:
@Dashrender said:
This is something I'm really interested in, but can barely talk the language. How do you get a phone in your home to connect to the PBX at RS? Does the phone support a VPN connection?
Nearly any phone has built in VPN, but you don't need once. VoIP works just like any service on the Internet. There is nothing strange or unique here. Think about how your browser (which is like a phone) talks to a hosted web server (which is like the PBX.) You don't need a VPN or any special setup for them to talk.
I understand this, but isn't the SIP protocol unencrypted, ie anyone can listen if they can get a copy of the stream?
-
@JaredBusch said:
@Dashrender said:
This is something I'm really interested in, but can barely talk the language. How do you get a phone in your home to connect to the PBX at RS? Does the phone support a VPN connection?
No VPN, that is the point of what @scottalanmiller is saying. The clients want open roaming for mobile or home workers.
Instead you lock down rules in ip tables to restrict to known addresses and networks.
Still leaves you a bit open, but it is not open to the world.
Having to put in IP's doesn't allow for roaming users.
-
@Dashrender said:
I understand this, but isn't the SIP protocol unencrypted, ie anyone can listen if they can get a copy of the stream?
Just like a normal phone call, yes. PSTN and Cell are this way too. 99% of people have no need for voice encryption. It's a point to point connection with disconnected, streaming, one way, encoded audio. Can you snatch it from the wire? Yes, of course. But who do you fear? The ISP can unencrypt your conversation for the government even if you use a VPN. Other than them, who do you fear is listening to your calls?
-
@Dashrender said:
Having to put in IP's doesn't allow for roaming users.
It can be done by extension, so some extensions are locked and some can roam. You can lock to IP blocks as well, so roaming just within regions.
-
@Dashrender said:
Having to put in IP's doesn't allow for roaming users.
I said networks, not IP addresses. Though of course you can allow specific IP addresses too.
-
@scottalanmiller said:
@Dashrender said:
Having to put in IP's doesn't allow for roaming users.
It can be done by extension, so some extensions are locked and some can roam. You can lock to IP blocks as well, so roaming just within regions.
Are you less worried about this because of the IP Tables AJ mentioned you wrote?
