New Features in OCSBC Release S-CZ8.1.0
The following information lists and describes features newly developed or enhanced for S-CZ8.1.0.
Note:
System session capacity and performance are subject to variations between various use cases and major software releases.Software Transcoding
The system supports the following new codecs for software transcoding, when deployed as a Virtual Network Function VNF:
- AMR
- AMR-WB
DNS A Record Queries
Based on response messaging from DNS queries, the system can now generate A record queries.
Non-recursive DNS Query Support
By default, the Oracle Communications Session Border Controller (OCSBC) requests DNS query with recursive searches. The Telecommunication Technology Committee's Standard JJ-90.31 specifies that ENUM DNS queries be performed iteratively. The OCSBC complies with this requirement when remote (server) recursive searches are disabled. You can disable recursive searches on a per enum-config basis.See "Routing" in the ACLI Configuration Guide.
DTMF IWF for VNF
The OCSBC supports DTMF interworking when deployed as a VNF. The functionality works the same as on other platforms. See "Graceful DTMF Conversion Call Processing" in the ACLI Configuration Guide.Restricting Logons to TACACS
For deployments that include TACACS authentication, the Oracle Communications Session Border Controller (OCSBC) allows the user to configure a restriction that prevents users from logging into the system using mechanisms other than TACACS. The function that manages this restriction evaluates the availability of TACACS infrastructure and allows alternate login mechanisms if TACACS servers are unavailable due to either network or server issues.See "Getting Started" in the ACLI Configuration Guide.
UEFI Boot Loader Support
The Oracle Communications Session Border Controller (OCSBC) supports 64-bit Unified Extensive Firmware Interface (UEFI) mode in addition to BIOS mode. This allows support over applicable platforms, including the Oracle X7-2 server where it exists as a bare metal platform.See the Platform Preparation and Installation Guide.
FAX Support for UEs that Do Not Support Multiple M Lines
The Oracle Communications Session Border Controller (OCSBC) sometimes supports FAX transcoding scenarios using a Re-INVITE that includes two m-lines in the SDP. Some end stations, however, do not support multiple m-lines, causing the FAX setup to fail. You can configure the OCSBC to resolve this problem on a per realm basis via transcoding policy.See "Transcoding" in the ACLI Configuration Guide.
Load Balancing for the Rx Interface
The Oracle Communications Session Border Controller (OCSBC) allows you to configure load balancing for DIAMETER Rx traffic across multiple Diameter Routing Agents (DRAs) using the external-policy-server configuration. When configured for TCP transport, this load balancing is available in addition to standard, DNS-based redundancy, where the OCSBC uses fully qualified domain names (FQDNs) to cycle through the multiple DRAs that DNS resolves to a single FQDN. For SCTP transport, the OCSBC simply substitutes the first address provided by a DNS lookup as the DRA connection address, and only uses policy-groups for load balancing.See "External Policy Servers" in the ACLI Configuration Guide.
SCTP Support for the Rx Interface
The OCSBC now allows you to communicate over the Rx Interface using SCTP transport.
See "External Policy Servers" in the ACLI Configuration Guide.
New AVPs for the Rx Interface
The OCSBC now supports the service-info-status and rx-request-type AVPs. The OCSBC uses these AVPs to clarify signaling status.
See "External Policy Servers" in the ACLI Configuration Guide.
Oracle X7-2 Platform Support for the Oracle Communications Session Router
The OCSR can now run on the Oracle X7-2 platform.
See "Software Installation - Oracle X7-2 Platforms" in the Platform Preparation and Installation Guide.
Call Duration Counters
The Oracle Communications Session Border Controller maintains aggregate call duration in seconds for the current period, lifetime total and the lifetime-period-maximum. These counters are maintained for each session agent, realm, SIP Interface, and globally across the system. The call duration counter can count up to a 32 bit value, after which time it rolls over.See the Maintenance and Troubleshooting Guide.
Local and Remote Call Termination Counters
The OCSBC maintains counters of gracefully terminated calls for cases where the BYE is generated both locally within the system and call is terminated externally, as expected. Each case is maintained in a unique counter. These counters are maintained for each session agent, realm, SIP Interface, and globally.See "Local and Remote Call Termination Counters" in the Maintenance and Troubleshooting Guide.
Common Codec Support for Transcoded SIPREC Calls
The OCSBC supports SIPREC on all transcoded call flows by capturing the same codec type from the "called" party side of the session on both legs of the call.
SIPREC Support for SRTP
With the exception noted in the following table, the OCSBC supports SIPREC on all media flows with any combination of SRTP-RTP call legs on ingress and egress for all Acme Packet platforms. The OCSBC also supports SRTP on the interface between the OCSBC and the SIPREC server.
Caller A | Caller B | SRS | Supported or Not Supported |
---|---|---|---|
RTP | RTP | RTP | Supported |
RTP | SRTP | RTP | Supported |
SRTP | RTP | RTP | Supported |
SRTP | SRTP | RTP | Supported |
RTP | RTP | SRTP | Supported* |
RTP | SRTP | SRTP | Supported |
SRTP | RTP | SRTP | Supported |
SRTP | SRTP | SRTP | Supported |
* Not supported in the S-CZ8.1.0 GA release. Support begins with the S-CZ8.1.0p1 release.
- The supported combinations apply to transcoded and non-transcoded calls.
- The supported combinations apply to recording and requires either the disabled mode or the enabled mode.
- The SDES profile that you use for in the media-security-policy configuration must include both the AES_CM_128_HMAC_SHA1_80 and AES_CM_128_HMAC_SHA1_32 ciphers in the crypto-list. Apply this media security policy to each realm where you want SRTP traffic.
See the Call Traffic Monitoring Guide and the ACLI Configuration Guide for complete information about SIPREC support.
Provisioning Transcode Codecs
You no longer need to use a license key to provision transcode codecs. Use the setup entitlements command. Provisioning means enabling one or more codec types for transcoding by setting the number of sessions allowed for each codec type that you use. A value higher than zero enables the codec for transcoding. A value of zero (0) disables the codec for transcoding. Note that the system allows you to enable only the codecs supported for the platform that you are configuring.
- AMR
- AMR-WB
- EVRC
- EVRCB
- EVS
- Opus
- SILK
When you enable or disable transcoding for a codec or change the session capacity through setup entitlements, the system immediately recognizes and reports the action in "show sipd transcode" and "show xcode load."
- show entitlements—displays all provisioned codecs and session capacities
- show features—displays all enabled features and total session capacity
For upgrades, the system honors the license keys for transcode codecs from previous releases.
SNMPv3 Support
The Oracle Communications Session Border Controller supports SNMPv3 by default. To secure your SNMPv3 system, you must configure SNMP users and groups, SNMP managers, and view access to MIB trees. SNMPv3 provides the SNMP agent and SNMP Network Management System (NMS) with protocol security enhancements used to protect your system against a variety of attacks, such as increased authentication, privacy, MIB object access control and trap filtering capabilities.
See "SNMPv3" in the MIB Reference Guide.
Import SSH Keys as Host Keys
The Oracle Communications Session Border Controller supports importing externally generated SSH keys to replace the internally generated SSH host keys. Because the OCSBC derives the public key from the private key, only the externally generated private key needs to be imported. The OCSBC uses these keys when it functions as an SSH server. The OCSBC supports RSA or DSA key lengths of 1024, 2048, 3072, or 4096 bits. See "Import Private SSH Key to Derive New SSH Host Keys" in the ACLI Configuration Guide.Import a Private SSH Key
As an alternative to relying on the SSH keys generated by the Oracle Communications Session Border Controller, customers may import externally generated SSH keys for any configured public-key element. Because the OCSBC derives the public key from the private key, only the private key needs to be imported, and any previously generated keys for this public-key element will be overwritten. The OCSBC uses these keys when it functions as an SFTP client. See " Import a Private SSH Key for the OCSBC as an SFTP Client" in the ACLI Configuration Guide.Delete an SSH Key
You can delete private keys from the system individually. See "Delete an SSH Key" in the ACLI Configuration Guide.Daylong Transcoding Session Cleanup
The Oracle Communications Session Border Controller can perform hourly checks for long xcode/DSP sessions. The amount of time that defines these long sessions defaults to 86400 seconds (24 hours), and may be configured to a different number. After finding these long sessions, they will be cleared from the system when the hourly process runs. Freeing up these potentially orphaned sessions ensures that maximum transcoding resources are available for incoming calls.
This feature is available in release S-Cz810m1p16 and later.