1. WebRTC & SIP E-SBC PBX Companion
INGATE RESELLER DAY: SIP Trunking and Beyond
The Ingate
WebRTC & SIP E-SBC PBX Companion
Prepared for: Ingate’s SIP Trunking, UC and WebRTC Seminars
ITEXPO January 2014 Miami
By: Karl Erik Ståhl
CEO Ingate Systems AB
(and Intertex Data AB, now merged)
© 2014 Ingate Systems AB

2. What WebRTC Does NOT Do:
“No Numbers” No rendezvous – “no addressing” at all Not like SIP
More islands? Yes, but it is adding high quality real-time communication where we already are in contact.
What WebRTC Does:
Sets up media directly between browsers (SDP/RTP like SIP) – typically on same web application.
“Handles” NAT/FW traversal (ICE, STUN, TURN) – fooling firewalls (like Skype).
Voice
Video
Data
“For free!”

3. What Will an Ingate PBX Companion be?

4. The WebRTC & SIP PBX Companion
LAN
Company
Web Server
SIP WS
media
LAN
Company
Web Server
media
Adding WebRTC capabilities to the enterprise PBX / UC-solution This is for an enhanced Ingate platform, running on existing HW, on virtual machines and even ported on to embedded CPEs. It is considered as a PBX vendor OEM-product and as service provider deployed access device.

5. E-SBC WebRTC Gateway The is in the Companion SIP Trunking Q-TURN
Web Server
Q-TURN

6. Clicking on the Website and or Passing a Link Should Both Go Into the Enterprise PBX/UC Infrastructure
You can also pass your WebRTC link over IM or an and ask to click for calling you.
And the call should reach you via the SIP PBX/UC infrastructure with all its features.
LAN
Company
Web Server
SIP WS
media
The WebRTC & SIP WebRTC PBX Companion will bring the PBX/UC infrastructure back into WebRTC calls
media
Company
Web Server
DEMO 4) Audio/Video link Webex invitation: Click igconf link
LAN

7. The WebRTC Browser as a Softphone and More
Having the PBX/UC Softphone available everywhere, on every device having a browser, without any plug-in and not just for plain voice phone calls, but potentially also for HiFi HD telepresence quality, is of course a dream.
The Ingate PBX Companion will bring into a PBX
The browser becomes your Softphone by surfing to a simple webpage
Interfaces to the PBX via the SIP Trunk Interface if other not available.
The Registrar can be in the PBX or in the Ingate (numbers can still be integrated)
All proven Ingate E-SBC functions included and is the interface to SIP
SIP E-SBC authentication and security available in addition to web page login
Simple Websocket interface to the SIP UA in the Ingate, as well as a SIP proxy interface for building a full SIP Client
Any Web Server can be used. There will be one in the Ingate, if preferred
E-SBC, SIP Trunking as well as Q- TURN QoS and Accounting
DEMO: Register as call and reverse direction (show VP8 video compatibility)

8. The WebRTC Browser as a Local Softphone
Browser becomes your Softphone by surfing to a webpage
Can be a full SIP Client in JS in the browser, or just “a page of JS” where the SIP UA is in the Ingate (recommended)
Any Web Server can be used. There will be one in the Ingate, if preferred.
SIP interface to the PBX via SIP Trunk Interface if other not available.
The Registrar can be in the PBX or in the Ingate. “Numbers” can be integrated via the Ingate SIP Trunk page then.
Authenticated WS or WSS interface to the PBX Companion, running Ingate’s RTCgate protocol and CONFgate protocol
The WS or WSS interface also includes the SIP protocol, Ingate’s full SIP Proxy interface as if accessed as via UPD, TCP or TLS
(Any)
Web Server
media WS
SIP
HTTP 2
LAN 1
media

9. The WebRTC Browser for Remote Users
Use an external Web Server, or open port 80 or 443 in the Enterprise Firewall to use a local Web Server
Any Web Server can be used. There will be one in the Ingate, if preferred.
The Registrar can be in the PBX or in the Ingate. “Numbers” can be integrated via the SIP Trunk page then.
Q-TURN in the Ingate can be the STUN/TURN server to traverse the remote NAT/Firewall
The Ingate PBX Companion includes the full SIParator® E-SBC and can work in parallel with the enterprise firewall or be the data firewall as well 2
(Opt) Web Server
HTTP
SIP TRUNK WS
media
(Any)
Web Server
media WS
SIP
BORT
HTTP
media
LAN 1

10. Easy to Code a Client to Surf Into
This web app is about a page of Java Script code to accomplish, using the RTCgate protocol.
Dialing-in by a URL under a webpage button or a passed link is even easier to accomplish.
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="X-UA-Compatible" content="chrome=1"/>
<title>Support</title>
<script src="/luci-static/resources/adapter.js"></script>
</head>
<body>
<script type="text/javascript">
function initialize() {
localVideo = document.getElementById("localVideo");
remoteVideo = document.getElementById("remoteVideo");
myname = "customer";
wsserver = ” :1234”;
stunserver = “ ”;
userlist = false;
callto =
} …
<div id="lvid"><video id="localVideo" width="25%" autoplay="autoplay" muted="true"/></div>
<div id="rvid" style="position:absolute;top:0;z-index:-1"><video id="remoteVideo" width="100%" autoplay="autoplay" ondblclick="this.webkitRequestFullScreen()"/></div>
</body>
</html>

11. Manage the PBX Companion From the PBX GUI
The PBX companion, the SBC and the Firewall – all configuration is available via the Websocket connection using the CONFgate protocol.
The CONFgate protocol
The client webpage can use a proprietary protocol called CONFgate to communicate with the IXNX unit through a Websocket. The CONFgate protocol allows access to the same command line interface (CLI) as telnet connections.
To access the CLI the webpage can open a Websocket connection to IXNX's Websocket server and specify protocol ”CONFgate”. Then supply a valid login and password (same as for the configuration web pages and Telnet).
User root is by default not allowed to be logged in. Non-root users are by default logged in to the CLIsh command line interface, not the regular Linux shell. The Websocket server is by default not enabled. CONFgate is by default not enabled. Accessing through CONFgate can be granted/denied individually for different users.
Once logged in, the webpage can send CLI commands to read and write configuration using CLI configuration commands like ”uci set sipadv.sip_fent_udp_time=60” and some other commands like ”netstat”, ”ifconfig” and ”fwlog” and receive the command output through the Websocket connection. For a complete list of commands available see CLIsh documentation.
As for all user access to the unit, file /etc/config/access/username specifies what parameters a specific user is allowed to read and write, regardless of if she logs in through web interface, telnet, or CONFgate.
WS: CONFgate
Web Server
HTTP
If the PBX has web based configuration, you can therein build web pages for the PBX Companion. You simply let the browser code open a Websocket and execute the appropriate configuration CLI commands in the PBX Companion.

12. WebRTC Hooks to the Ingate SIP Proxy E-SBC
The WebRTC traffic comes as (i) SIP from the browser (which has got its SIP client code from some webpage) OR (ii) according to the simple Ingate RTCgate protocol (Where the SIP UA, the client, is in the Ingate product). In both cases the transport is via websockets (WS or WSS). All Ingate SIP and SBC features becomes available.
The WebRTC client Java Script code may be on any web server (also in the Ingate). The server executing the RTCgate protocol runs on the Ingate.
There is more than just SIP, e.g. PBX extensions available through the RTCgate protocol.
With Ingate’s Q-TURN (more about that later), important features such as Security, QoS and Accounting (Billing) becomes available also for WebRTC end-to-end (not converting to SIP).