[VOIPSEC] CALEA Enforcement

[Randell Jesup]

"Shai Mohaban" <shai at juniper.net> writes:
>Running the media _ALWAYS_ through an SBC is one way but definitely not
>the only way and not even the best way. One other potential solution,
>which is also undetectable and is much better in terms of traffic
>engineering, optimal route, etc, is to deploy some LI capabilities in
>the edge routers (or the BRAS, etc). As far as I know LI is not required
>for internal calls (and this is not relevant at all in the residential
>market as there are no "internal" calls in this case) and virtually all
>external traffic, including the media, will go through the edge router.
>So the edge router can be controlled by some external signaling entity
>(P-CSCF, SBC, etc) and be provisioned in real time with flows that need
>to be duplicated. 

This only helps ISPs (and universities, etc) that control the edge routers
in question.  This is of no help to non-ISP VoIP providers.  They're forced
into a relay, which adds delay, points-of-failure, cost, packet loss, etc.

Great for Comcast.  Not great for Vonage/Packet8/SipPhone/etc.

-- 
Randell Jesup, Worldgate (developers of the Ojo videophone), ex-Amiga OS team
rjesup at wgate.com
"The fetters imposed on liberty at home have ever been forged out of the weapons
provided for defence against real, pretended, or imaginary dangers from abroad."
		- James Madison, 4th US president (1751-1836)