SIP Configuration

This page describes the requirements to connect to Omilia Cloud Platform (OCP®) using SIP, such FQDNs, allowlists and codecs.

SIP URIs

To establish a connection with the Omilia Cloud Platform, direct your communications infrastructure to the previously agreed region-specific SIP Domain URIs.

The SIP Domain URI corresponds to several SRV records. All nodes support UDP, TCP and TLS. For the purpose of connecting to OCP, it is advised to use the Fully Qualified Domain Name (FQDN), rather than the IP addresses listed below.

Number Mapping

Clients are required to provide DNISs for all their production applications. Omilia Service Desk will add Q.931 compliant DNISs to client OCP accounts on request. Providing the opportunity for client admins to map these incoming numbers to the OCP applications of their choice.

Multi-region number mapping

Number configuration is currently per region. A number provisioned in one region exists only in that region - it is not synchronised to peer regions. For any application serving production traffic, the same Number must therefore be added and attached in every peer region (just like every application needs to be deployed to every peer region).

Allow Listing

OCP SIP signalling and media endpoints are protected by firewalls. Clients are required to contact the Omilia Service Desk providing signalling and media source IPs for allow listing on OCP.

Media Codec & Companding

Media codecs supported:

• PCMU / G.711 μ-law

• PCMA / G.711 A-law

DTMF

DTMF Method supported:

• Inband (EU1 only)

• RFC2833 (all other environments)

Encryption

OCP® supports encryption of SIP calls with SIP over TLS and encrypted RTP (SRTP).

SIP over TLS / SRTP

For SIP over TLS, OCP® requires TLS 1.2, or later, and SRTP. OCP® does not support unencrypted media when signaling is protected using TLS. OCP® supports media encryption using SRTP and SRTCP with AES as the cipher.

Certificate Authority

OCP® uses the DigiCert Certificate Authority (CA) to sign our SIP Endpoint certificates. The Issuing CA is DigiCert Global G2 TLS RSA SHA256 2020 CA1. Customer equipment must support root and intermediate certificates from DigiCert to enable SIP over TLS on OCP®.

Mutual TLS

Omilia relies on CAs provided by Amazon and curated by the Mozilla project but does not currently verify client certs.

Certificate Pinning

OCP® does not support Certificate Pinning at present.

IP Addresses 

OCP SIP & Media endpoints are scalable. This means that not all endpoints are permanently live. Endpoints are enabled as required.

CA IPs

Endpoint (Signalling) IPs:

Media IPs:

EU IPs

Endpoint (Signalling) IPs:

Media IPs:

US IPs

Endpoint (Signalling) IPs:

Media IPs:

Maintenance

Any SIP Endpoint can be taken out of service for maintenance at any time. Existing calls will be allowed to complete gracefully. Any new INVITEs sent to this endpoint will either receive a 503 or no response, clients must repeat the call attempt using an alternative SIP Endpoint in the same, or a peer, region. During maintenance in multi-region environments all the SIP Endpoints in a single region may be under maintenance.