Open Source Enterprise IP PBX, Engineered with Purpose.
A high-concurrency, web-managed IP PBX uniting Asterisk 22, Port 443 ALPN stream multiplexing, WebRTC, Passkeys, Go instant messaging, and native Android & iOS softphone clients.
curl -fsSL https://raw.githubusercontent.com/mahirgul/AiPBX/main/install.sh | sudo bash
# Alternative git clone from source
git clone https://github.com/mahirgul/AiPBX.git /opt/aipbx && cd /opt/aipbx && sudo bash install.sh
Flagship Technological Innovations
Engineered to conquer modern enterprise telecom hurdles with zero license fees, strict data sovereignty, and open protocols.
Biometric Passkey & 2FA Security
Passwordless, phishing-resistant corporate authentication via Touch ID, Face ID, Windows Hello, and YubiKey hardware keys. Reinforced with TOTP Authenticator dual-layer defense.
Google OAuth 2.0 One-Click Sign-In
Seamless one-click Google Sign-In across Web Portal, Android, and iOS softphones for extensions matching authorized corporate Google accounts.
Microsoft Teams Direct Routing
Native SIP TLS & DTLS-SRTP gateway bridging Microsoft Teams users directly with on-premise extensions without requiring third-party SBC hardware or licenses.
Port 443 Nginx L4 ALPN Stream Multiplexing
Bypasses restrictive enterprise firewalls by multiplexing HTTPS web traffic, WebRTC WSS, and TLS SIP through a single TCP port 443 via TLS handshake ALPN inspection.
Supervisor Call Spy, Whisper & Barge-in (*90)
Real-time three-tier supervisor monitoring: silent call eavesdropping (Spy), coaching the agent privately without the caller hearing (Whisper), and conference intrusion (Barge-in).
High-Performance Go WebSocket Chat Daemon
Stand-alone Go WebSocket daemon powering real-time 1-on-1 and multi-user group chat (up to 256 users), media/attachment processing, typing receipts, and FCM push delivery.
Native Android (Kotlin) & iOS (Swift) Softphone
Zero cloud vendor lock-in. PJSIP + WebRTC dual engine, Opus HD audio, DTLS-SRTP encryption, and High-Priority Push (FCM/APNs) for instantaneous call wake-up without battery drain.
Call Barring, Native Voicemail & ConfBridge
Granular 6-tier outbound call barring permissions, direct & remote voicemail (*97, *98, Voicemail-to-Email, MWI), flexible ring groups, and PIN-secured ConfBridge rooms.
Feature Comparison Matrix & System Parameters
Comprehensive side-by-side comparison with Cisco, Avaya, and Cloud PBX SaaS, along with Port 443 ALPN mapping, telephony star codes (*90/*22/*23), outbound call barring, and hardware specs.
Port 443 L4 ALPN Stream Multiplexing
Never expose vulnerable SIP port 5060 to the public web. Multiplex HTTPS, WebRTC, and TLS SIP over a single TCP port 443.
[ Clients: Web Browser / Mobile App / Desk IP Phone / Teams ]
│
▼ (Single Port: TCP 443)
┌────────────────────────────────────┐
│ Nginx L4 Stream (ssl_preread) │
│ TLS ClientHello ALPN Inspection │
└─────────────────┬──────────────────┘
│
┌──────────────────────┼──────────────────────┐
▼ (ALPN: http/1.1, h2) ▼ (ALPN: webrtc / WSS) ▼ (ALPN: sip / TLS SIP)
┌──────────────┐ ┌──────────────┐ ┌──────────────┐
│ Apache Web │ │ Asterisk WSS │ │ PJSIP SIP │
│ Portal :8443 │ │ WebRTC :8089 │ │ Core :5061 │
└──────────────┘ └──────────────┘ └──────────────┘
│ │ │
└──────────────┬───────┴──────────────────────┘
│
▼
┌─────────────────────────────────┐
│ Go Chat Daemon (Port 8090) │
│ FCM / APNs Push Engine │
│ Asterisk 22 & MariaDB 11 │
└─────────────────────────────────┘
Frequently Asked Questions
Direct answers regarding AiPBX architecture, turnkey deployment, security posture, and MIT licensing.
AiPBX is an open-source enterprise IP PBX uniting Asterisk 22, Nginx L4 ALPN stream multiplexing, PHP 8 MVC web management, a high-concurrency Go WebSocket chat daemon, and native Android (Kotlin) / iOS (Swift) softphones.
Yes. AiPBX is released under the permissive MIT license. There are zero license keys, zero per-user or per-extension recurring fees, and zero feature paywalls.
Traditional passwords are prone to phishing and credential stuffing. AiPBX supports FIDO2 asymmetric cryptographic verification using Touch ID, Face ID, Windows Hello, and YubiKey, alongside Google Workspace corporate OAuth 2.0 single sign-on.
Remote employees frequently encounter firewalls at hotels, client offices, or public WiFis that strictly block port 5060. AiPBX multiplexes HTTPS web management, WebRTC audio, and SIP TLS through the ubiquitous port 443, ensuring 100% connectivity everywhere.
No. AiPBX incorporates a built-in SIP TLS & SRTP gateway fully compatible with Microsoft Teams Direct Routing specifications, eliminating the need for expensive third-party SBC appliances.
Looking for more in-depth guides or step-by-step setup tutorials?
Liberate Your Enterprise Telephony Today.
Deploy your private, high-concurrency, license-free IP PBX on bare-metal or cloud instances in minutes with a single command.