What's new in 3.3.5.36
- Tracking 25692 - optimize gateway when config has hundreds of NAPs - TB-803
- The garbage collector of gateway’s routing scripts have been optimized to allow handling hundreds of NAPs.Please note that this fix does not improve the device’s overall performance when running over 250 NAPs.
- Tracking 25771 - TMG does not include source port in SIP Contact header on REGISTER - TB-1341
- The Contact header of SIP REGISTER messages now explicitly include the local port for SIP trunks registration.
- Tracking 23762 - Allow RSS on vmxnet3 even with no RETA support - TB-2545
- Improved RTP performance on VMware. The vmxnet3 driver now support RSS to spread the RTP load on multiple CPU cores, even without RETA support.Note that the vmxnet3 driver support only to perform load balancing on IP addresses, and not by RTP port. This means an SBC with a single NAP to a single IP will see no benefit from this improvement.On AWS, because of a technical limitation, the system will only use one single core.
- SIP 488 "Not Acceptable Here" contains extra headers on UPDATE response - TB-3907
- Removed all superfluous SIP headers in error responses to UPDATE messages.
- Better explanation of the Call Rate Limiting Features - TB-4055
- Maximum call burst parameter removed. Other Call rate limiting parameters accomplish the same purpose.
- Move "Ephemeral Termination Identifier Root" out of "Advanced Parameters" - TB-4174
- Ephemeral Termination Identifier Root parameter is moved out of Advanced Parameters for accessibility when creating and editing a H.248 Configuration.H.248 TDM Terminations section was simplified to only be called TDM Terminations.
- Force Software IP checksum on AWS - TB-4233
- On AWS m4 and m5, there is no need anymore to define “software_ip_checksum“ in the nic.json. The system (namely tbrouter) will always use software IP checksum on AWS, whether the flag is defined or not in the nic.json.
- Software transcoding for u-law and a-law - TB-4359
- This new feature adds software transcoding capabilities between the following codecs:
- a-law (PCMA)
- μ-law (PCMU)
- This new feature adds software transcoding capabilities between the following codecs:
- Modernize Web Portal look and feel - TB-4450
- The Web Portal pages have been redesigned with a new modern look and lightweight colors.
- Contact user in SIP trunk registration use interface name preventing the SIP trunk from being used as a SIP endpoint - TB-4487
- The contact headers of SIP REGISTER messages sent to register a SIP NAP use the same username provided in the configured AOR when the “Register to Proxy?” option is enabled.
- H.248 digitmap is ignoring configured timers values - TB-4840
- The default digit map timers configured in web portal are now properly used if the received digitmap in H.248 does not include some timer values.
- toolpack_engine unexpectedly exits upon receiving in-dialog SIP OPTIONS message before SDP has been negotiated - TB-5065
- Reception of an in-dialog SIP OPTIONS during call establishment will now be responded to with a 480 Temporarily Unavailable containing a Retry-After header.
- New "security level" parameter for SIP over TLS - TB-5093
- Along with TLS 1.3 support, a new parameter has been added to specify the minimum security baseline for SIP over TLS communications:
Security Level
This parameter is configurable through the “TLS Profiles”.- Level 1 (default): RSA 1024 bits or ECDSA 160 bits certificates minimum.
- Level 2: RSA 2048 bits or ECDSA 224 bits certificates minimum, no SHA1, no AES 128.
- Level 3: RSA 3072 bits or ECDSA 256 bits certificates minimum, ECDHE ciphers only.
- Level 4: RSA 7680 bits or ECDSA 384 bits certificates minimum.
- Level 5: RSA 15360 bits or ECDSA 512 bits certificates minimum.
- Along with TLS 1.3 support, a new parameter has been added to specify the minimum security baseline for SIP over TLS communications:
- Web Portal buttons rendering issues with web browser's dark mode - TB-5196
- Fixed the CSS rendering of submit buttons. Visible only when using a “dark mode” browser extension.
- Potential issues with fragmented RTP packets - TB-5222
- Fixed bad handling of fragmented RTP or RTCP packets.
- Tracking 26055 - TTL of 0 is not respected for some DNS responses - TB-5242
- For DNS queries made using the DNS Groups feature, DNS entries with a TTL of 0 will no longer be added to the cache and therefore can no longer poison future DNS requests.
- GR-303 Support - TB-5269
- Added support of GR-303 in Tmedia products, including 1+1.Tmedia operates as an IDT and supports CAS analog line terminations in loopstart mode.
- TLS 1.3 for SIP - TB-5291
- Introduced support of TLS version 1.3 for SIP over TLS communications.This update also bring modern encryption for both TLS 1.2 and TLS 1.3:
- Forward secrecy encryption, with ECDHE ciphers.
- Stronger AES 256 encryption.
- Broader range of ciphers, e.g. TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256.
- Support for ECDSA certificates (elliptic-curve keys). Previously, only RSA certificates were supported.
- Introduced support of TLS version 1.3 for SIP over TLS communications.This update also bring modern encryption for both TLS 1.2 and TLS 1.3:
...