Skip to content

Commit

Permalink
domainpolicy: docs - removed trailing spaces
Browse files Browse the repository at this point in the history
  • Loading branch information
miconda committed Nov 13, 2023
1 parent e3416fb commit 64dad2e
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 12 deletions.
4 changes: 2 additions & 2 deletions src/modules/domainpolicy/doc/domainpolicy.xml
Original file line number Diff line number Diff line change
Expand Up @@ -41,8 +41,8 @@
</copyright>
</bookinfo>
<toc></toc>

<xi:include href="domainpolicy_admin.xml"/>


</book>
20 changes: 10 additions & 10 deletions src/modules/domainpolicy/doc/domainpolicy_admin.xml
Original file line number Diff line number Diff line change
Expand Up @@ -486,7 +486,7 @@ if (dp_apply_policy()) {
Calls from other members are expected to use TLS and authenticate
using a client-CERT. To implement this, we cannot share a TCP/TLS port
with other incoming connections. Thus we need to use tls_server_domain[] to
dedicate a TCP port for this federation.
dedicate a TCP port for this federation.
</para>
<programlisting format="linespecific">
tls_server_domain[1.2.3.4:5066] {
Expand All @@ -503,10 +503,10 @@ tls_server_domain[1.2.3.4:5066] {
<listitem>
<para><emphasis>Outgoing SIP configuration</emphasis>
</para><para>
Calls to other members must also use the proper client cert.
Therefore, a TLS client domain must be configured. We use the
federation name as TLS client domain identifier. Therefore, the
content of the "tls_client_domain_avp" must be set to this identifier
Calls to other members must also use the proper client cert.
Therefore, a TLS client domain must be configured. We use the
federation name as TLS client domain identifier. Therefore, the
content of the "tls_client_domain_avp" must be set to this identifier
(e.g. by putting it as rule into the domainpolicy table).
</para>
<programlisting format="linespecific">
Expand Down Expand Up @@ -570,7 +570,7 @@ mysql> select * from domainpolicy;
</listitem>
</itemizedlist>
</section>




Expand All @@ -581,14 +581,14 @@ mysql> select * from domainpolicy;
a secure Layer 3 network between their proxies. It does not
matter whether this network is built by means of IPsec, a private
Layer 2 network, or by simple firewalling. We will use the 10.x
network (for the walled garden net) and "http://l3fed.org/"
network (for the walled garden net) and "http://l3fed.org/"
(as federation identifier) in this example.
</para>
<para>
A member of this federation (e.g. example.com) can not announce its
SIP proxy's 10.x address in the standard SRV / A records of his domain,
as this address is only meaningful for other members of this federation.
In order to facilitate different IP address resolution paths within the
In order to facilitate different IP address resolution paths within the
federation vs. outside the federation, all members of "http://l3fed.org/"
agree to prefix the destination domains with "l3fed" before the
SRV (or A) lookup.
Expand All @@ -610,7 +610,7 @@ $ORIGIN example.com
_sip._udp IN SRV 10 10 5060 publicsip.example.com.
_sip._udp.l3fe IN SRV 10 10 5060 l3fedsip.example.com.

publicsip IN A 193.XXX.YYY.ZZZ
publicsip IN A 193.XXX.YYY.ZZZ
l3fedsip IN A 10.0.0.42
</programlisting>
</listitem>
Expand All @@ -634,7 +634,7 @@ mysql> select * from domainpolicy;
</listitem>
</itemizedlist>
</section>


</section>

Expand Down

0 comments on commit 64dad2e

Please sign in to comment.