asterisk/doc/sip-retransmit.txt

What is the problem with SIP retransmits?
-----------------------------------------

Sometimes you get messages in the console like these: 

- "retrans_pkt: Hanging up call XX77yy  - no reply to our critical packet."
- "retrans_pkt: Cancelling retransmit of OPTIONs"

The SIP protocol is based on requests and replies. Both sides send
requests and wait for replies. Some of these requests are important.
In a TCP/IP network many things can happen with IP packets. Firewalls,
NAT devices, Session Border Controllers and SIP Proxys are in the
signalling path and they will affect the call.

SIP Call setup - INVITE-200 OK - ACK
------------------------------------
To set up a SIP call, there's an INVITE transaction. The SIP software that
initiates the call sends an INVITE, then wait to get a reply. When a
reply arrives, the caller sends an ACK. This is a three-way handshake
that is in place since a phone can ring for a very long time and
the protocol needs to make sure that all devices are still on line
when call setup is done and media starts to flow.

- The first reply we're waiting for is often a "100 trying". 
  This message means that some type of SIP server has received our
  request and makes sure that we will get a reply. It could be
  the other endpoint, but it could also be a SIP proxy or SBC
  that handles the request on our behalf.

- After that, you often see a response in the 18x class, like
  "180 ringing" or "183 Session Progress". This typically means that our
  request has reached at least one endpoint and something
  is alerting the other end that there's a call coming in.

- Finally, the other side answers and we get a positive reply,
  "200 OK". This is a positive answer. In that message, we get an 
  address that goes directly to the device that answers. Remember,
  there could be multiple phones ringing. The address is specified
  by the Contact: header.

- To confirm that we can reach the phone that answered our call,
  we now send an ACK to the Contact: address. If this ACK doesn't
  reach the phone, the call fails. If we can't send an ACK, we
  can't send anything else, not even a proper hangup. Call
  signalling will simply fail for the rest of the call and there's
  no point in keeping it alive.

- If we get an error response to our INVITE, like "Busy" or 
  "Rejected", we send the ACK to the same address as we sent the 
  INVITE, to confirm that we got the response.

In order to make sure that the whole call setup sequence works and that
we have a call, a SIP client retransmits messages if there's too much 
delay between request and expected response. We retransmit a number of 
times while waiting for the first response.  We retransmit the answer to an
incoming INVITE while waiting for an ACK. If we get multiple answers,
we send an ACK to each of them.

If we don't get the ACK or don't get an answer to our INVITE,
even after retransmissions, we will hangup the call with the first 
error message you see above. 

Other SIP requests
------------------
Other SIP requests are only based on request - reply. There's
no ACK, no three-way handshake. In Asterisk we mark some of
these as CRITICAL - they need to go through for the call to 
work as expected. Some are non-critical, we don't really care
what happens with them, the call will go on happily regardless.

The qualification process - OPTIONS
-----------------------------------
If you turn on qualify= in sip.conf for a device, Asterisk will
send an OPTIONS request every minute to the device and check
if it replies. Each OPTIONS request is retransmitted a number
of times (to handle packet loss) and if we get no reply, the
device is considered unreachable. From that moment, we will
send a new OPTIONS request (with retransmits) every tenth
second.

Why does this happen?
---------------------

For some reason signalling doesn't work as expected between
your Asterisk server and the other device. There could be many reasons 
why this happens.

- A NAT device in the signalling path
  A misconfigured NAT device is in the signalling path
  and stops SIP messages.
- A firewall that blocks messages or reroutes them wrongly
  in an attempt to assist in a too clever way.
- A SIP middlebox (SBC) that rewrites contact: headers
  so that we can't reach the other side with our reply
  or the ACK.
- A badly configured SIP proxy that forgets to add 
  record-route headers to make sure that signalling works.
- Packet loss. IP and UDP are unreliable transports. If 
  you loose too many packets the retransmits doesn't help
  and communication is impossible. If this happens with
  signalling, media would be unusable anyway. 

What can I do?
--------------

Turn on SIP debug, try to understand the signalling that happens
and see if you're missing the reply to the INVITE or if the
ACK gets lost. When you know what happens, you've taken the
first step to track down the problem. See the list above and
investigate your network. 

For NAT and Firewall problems, there are many documents
to help you. Start with reading sip.conf.sample that is 
part of your Asterisk distribution.

The SIP signalling standard, including retransmissions
and timers for these, is well documented in the IETF
RFC 3261.

Good luck sorting out your SIP issues!

/Olle E. Johansson


-- oej (at) edvina.net, Sweden, 2008-07-22
-- http://www.voip-forum.com