3CX Preferred SIP Providers in replacement of Twilio and Telnyx

[MAhmed]

Hi,
Since Telnyx is now officially not in preferred list of 3CX SIP providers and Twilio is also going to deprecate support for TLS 1.0 and 1.1 what are the other reasonable and reliable options to replace the SIP provider. 3CX setup is in Canada region.

Please advise. Thank you.

 

[Evolute IT]

What's the problem with Twilio dropping unsecured TLS support? It will still work and be supported and work using TLS 1.2, which 3CX supports.

 

[MAhmed]

Hi,
As per my knowledge, Twilio support for TLS with 3CX there are some limitations. Twilio is an IP based trunk which requires 2 way TLS verification. And each Twilio host name is different and issues a wildcard certificate to cover all host names and as per RFC the certificate for TLS must match the hostname exactly and wildcard certificates should not be used.

I am not sure if this limitation is already addressed and it works. Appreciate your updates on this. Thank you.

 

[cobaltit]

Just to clarifiy, you are specifically looking for a provider that offers TLS? What regulatory or security standard are you trying to achieve with TLS?

 

[YiannisH_3CX]

As per my knowledge, Twilio support for TLS with 3CX there are some limitations. Twilio is an IP based trunk which requires 2 way TLS verification. And each Twilio host name is different and issues a wildcard certificate to cover all host names and as per RFC the certificate for TLS must match the hostname exactly and wildcard certificates should not be used.

I am not sure if this limitation is already addressed and it works. Appreciate your updates on this. Thank you.

You are correct. Twilio is not supported for TLS as its an IP based trunk and it requires a wildcard certificate for TLS which we do not support.

 

[Kevin@voxtelesys]

We are working on an update to our template with 3CX, we have TLS working on our test 3CX. Once we hand it over to 3CX they will be able to test and update our template to show TLS support.