Question 1

Is call audio encrypted?

Accepted Answer

SIP signaling is encrypted via WSS. The audio stream uses SRTP when the endpoint supports it. All web traffic goes over HTTPS.

Question 2

Can unauthorized phones connect to the network?

Accepted Answer

No. The FreeSWITCH directory endpoint validates every registration against the account database and checks the SIP User-Agent. Unknown devices get rejected.

Question 3

How are admin accounts secured?

Accepted Answer

Bcrypt-hashed passwords, JWT tokens with short expiry, refresh token rotation, and rate-limited login with account lockout after failed attempts.

Question 4

Is there an audit log?

Accepted Answer

Yes. Every event worth tracking — joins, leaves, mutes, unmutes, broadcasts, direct calls, room changes, admin actions — gets logged with timestamps.

Question 5

What happens during a server restart?

Accepted Answer

The server shuts down gracefully: active calls receive a BYE signal, recordings are saved, and the process exits clean. Phones reconnect on their own when the server comes back.

Built for always-on production