エラーログ
log-directory=/var/opt/belledonne-communications/log/flexisip/flexisip-proxy+presence.log
①2021-10-28 07:58:52:100 flexisip-error-Cannot open domain registration configuration file '/etc/flexisip/domain-registrations.conf'
2021-10-28 09:18:30:677 bctbx-message-Starting flexisip proxy+presence-server version 2.1.0-beta-14-g0ba5e300
②2021-10-28 09:18:30:677 bctbx-error-setrlimit(RLIMIT_NOFILE) failed: Operation not permitted. Limit of number of file descriptors is low (1048576).
③2021-10-28 09:18:30:677 bctbx-error-Flexisip will not be able to process a big number of calls.
④2021-10-28 09:18:30:702 flexisip-error-DoSProtection: '/sbin/iptables -w -F FLEXISIP 2>&1' failed with output 'iptables: No chain/target/match by that name.
'.
⑤2021-10-28 09:18:30:705 flexisip-error-DoSProtection: '/sbin/ip6tables -w -F FLEXISIP 2>&1' failed with output 'ip6tables v1.8.4 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
'.
2021-10-28 09:18:30:709 flexisip-error-DoSProtection: '/sbin/ip6tables -w -N FLEXISIP 2>&1' failed with output 'ip6tables v1.8.4 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
'.
2021-10-28 09:18:30:715 flexisip-error-DoSProtection: '/sbin/ip6tables -w -t filter -A INPUT -j FLEXISIP 2>&1' failed with output 'ip6tables v1.8.4 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
'.
① flexisip-error-Cannot open domain registration
flexisip.conf [inter-domain-connections]
https://lists.gnu.org/archive/html/flexisip-developers/2018-06/msg00003.html
② ③ bctbx-error
setrlimit(RLIMIT_NOFILE) failed: Operation not permitted
解決。—> flexisip/docker/flexisip-entrypoint.sh at master · BelledonneCommunications/flexisip · GitHub
起動スクリプトにulimit -c unlimited
を追加。
併せてDocker Compose
ファイルに下記のホストマシンへの制限付き管理者権限を付与。
cap_add:
- NET_ADMIN
- SYS_RESOURCE
④ flexisip-error-DoSProtection
flexisip.conf [module::DoSProtection]
起動時のみのエラー。無視して構いません。
⑤ flexisip-error-DoSProtection
flexisip.conf [module::DoSProtection]
https://github.com/husarnet/docker-example/issues/1
flexisipコンテナ内で以下実行(またはDockerイメージ作成時に指定)
# update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
# update-alternatives --set iptables /usr/sbin/iptables-nft
nftables Debian Wiki
https://wiki.debian.org/nftables
nftables Wiki
https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables
iptables関連のエラーについては、以下のDockerブリッジネットワークとiptablesの記事も参照のこと。