SIP · OPERATIONS
Network and security requirements
Plan signalling, media, NAT traversal, firewall rules and secure transport before production traffic is enabled.
SIP: an introduction ↗Network worksheet
| Area | Confirm |
|---|---|
| Signalling | FQDN/IP, UDP/TCP/TLS, port |
| Media | RTP IPs and port range |
| Firewall | Bidirectional allowlists |
| Addressing | Public IP, NAT and advertised SDP address |
| Voice | Codecs, packetization and DTMF |
| Capacity | Concurrent calls and expected CPS |
NAT and media troubleshooting
- Calls cannot start, update or end
- No audio or one-way audio
- Private IP address advertised in SDP
- RTP range blocked by a firewall
- SBC or NAT mapping expires during a call
Important
STUN, TURN, ICE or an SBC may be required depending on the topology; use the method approved for the project.
Security baseline
- Use IP allowlists and least-privilege routing.
- Use TLS/SIPS only when confirmed for the assigned endpoint.
- Protect credentials and never place them in tickets or screenshots.
- Apply destination controls, rate limits and anomaly monitoring.
- Redact personal data and message content from diagnostic logs.
- Confirm media encryption support separately from signalling encryption.