Operator notifications
FlySIP tells the switch operator about problems that need a human: a security gap, a certificate that browsers reject, software that is out of support, a full disk. Panel warnings appear as a red banner at the top of every page. System monitors send e-mail. Both go only to the people who can act: the administrators of the root customer.
How it works
Section titled “How it works”- The switch checks its state. The panel checks the firewall, the certificate and the software dates when an administrator logs in. Monitors on the server check disks, swap, RAID, replication and database connections in the background.
- The panel shows a banner. Banners appear only for web users of the root customer with the Administrator access level. Software warnings appear only in the root environment.
- You fix the cause or dismiss the banner. A banner disappears once its cause is fixed. The close button hides it for a while; see each warning below.
- Monitors send e-mail. Monitor alerts go to the E-Mail of the root customer, with copies to CC and BCC. Set the addresses in My Preferences of the root customer, and keep them read by someone on call.
Panel warnings
Section titled “Panel warnings”Firewall rules
Section titled “Firewall rules”Warning: For your security please review your Firewall Rules and create rules to allow or deny access to your SoftSwitch.
Shown when the default rule of a firewall type, address 0.0.0.0 with netmask 0.0.0.0, is set to Allow and the alert for that type is on. The alerts are the Security Alerts checkboxes on the IP Firewall screen: Web, DB, SSH and TFTP are on by default, SIP is off.
To clear it, do one of these:
- Allow your trusted addresses, then set the default rule of the type to Deny. Only the listed addresses can reach the service. See Set up the firewall.
- Clear the type’s checkbox under Security Alerts if an external firewall already protects the service. This only hides the warning; the port stays open.
SSL certificate
Section titled “SSL certificate”Warning: A SSL certificate has not been added. Please upload your own SSL certificate or create a SSL certificate using LetsEncrypt.
Shown when the regular certificate check of the web address fails: the switch cannot fetch the certificate, the certificate does not match the Web Address, or it does not verify, for example because it is self-signed or expired.
To clear it, install a valid certificate in System Management → SSL Management: issue a free Let’s Encrypt certificate or upload your own. See Install an SSL certificate. The close button hides the banner until you log in again. To turn the warning off for good, set the configuration key webui/disable_ssl_warning to true with setSystemConfig.
End of support
Section titled “End of support”Warning: Your software is reaching the end of support status. We encourage you to upgrade soon.
Shown from three months before the end-of-support date of the installed release. After that date the text changes to “Your software has reached the end of support on” followed by the date.
To clear it, contact FlySIP support to plan an upgrade to a supported release. The close button hides the banner for a month.
Update required
Section titled “Update required”Warning: It has been over N months since your system was last updated.
Shown when the last update of the switch is older than the update interval: one month in the first year after the release, two months in the second year, three months after that. It is not shown while the end-of-support warning applies.
To clear it, contact FlySIP support to schedule an update. The close button hides the banner until the next interval has passed.
E-mail alerts
Section titled “E-mail alerts”| Alert | Sent when |
|---|---|
| Low disk space | A partition is more than 80 % full; further alerts at 90 % and 95 % |
| Heavy swap usage | More than 25 % of the swap space is in use, usually a sign of too little memory |
| RAID problem | The RAID controller reports a problem with the disk array |
| Replication problem | The database replica has stopped following the master |
| Old master server is up, DB is in split mode | After a failover, the old master came back while the database is split |
| Low database connections | The database is close to its maximum number of connections |
Each message names the server by its address. Forward it to FlySIP support if it does not resolve itself.
Key terms
Section titled “Key terms”- Root customer — the top-level customer in a multi-tenant hierarchy that can create and manage sub-customers (resellers).
- Environment — an isolated tenant of the softswitch with its own customers, vendors, tariffs and settings.
- Firewall rule — an allow/deny rule for source IPs managed from the panel and applied on the switch.
- Web user — an extra login to the panel with its own access level.
Common scenarios
Section titled “Common scenarios”The firewall warning stays after you added rules
Section titled “The firewall warning stays after you added rules”Your allow rules are in place, but the default rule of one type is still Allow. Open IP Firewall, check every tab with a Security Alerts checkbox, and set its default rule to Deny.
A reseller’s administrator does not see the warnings
Section titled “A reseller’s administrator does not see the warnings”That is by design. Banners appear only for administrators of the root customer, because only they can change the firewall, the certificate and the software.