JSON TABLE SYSTEM & SPECS
Technical Feature Matrix & System Parameters
Centralized, dynamic JSON tables detailing the AiPBX enterprise feature comparison, network port architecture, star codes (*90, *22, *23), outbound call barring policies, and hardware sizing specs.
5 Dynamic Tables
Real-Time Search Filter
Powered by data.json
100% Mobile Ready
Why AiPBX? Legacy hardware PBXs mandate steep upfront hardware costs and per-feature DSP cards, while cloud PBX SaaS platforms bill $15-$35 per user every month. AiPBX unites Asterisk 22, Passkeys, and ALPN stream multiplexing on your own private infrastructure with zero license fees.
| Category | Feature / Capability | AiPBX v1.0 LTS | Legacy PBX | Cloud PBX SaaS |
|---|---|---|---|---|
| Security & Identity |
Biometric Passkey (WebAuthn / FIDO2)
Passwordless auth with Touch ID, Face ID, Windows Hello, YubiKey. |
✅ Built-in & Free | ❌ Not Supported | ⚠️ Enterprise SSO Add-on Only |
| Security & Identity |
Google OAuth 2.0 One-Click Login
Instant login matching corporate extension email addresses. |
✅ Web, Android & iOS | ❌ None / Not Available | ⚠️ Extra License Required |
| Security & Identity |
DTLS-SRTP & TLS 1.3 End-to-End Encryption
All voice traffic encrypted; packet eavesdropping is impossible. |
✅ Standard (Opus HD) | ⚠️ Expensive DSP / License Add-on | ✅ Managed by Provider |
| Network & Firewall |
Port 443 Nginx L4 ALPN Stream Multiplexing
Bypasses strict hotel, guest WiFi and corporate firewall filters on port 443. |
✅ Web, WSS & SIP on Port 443 | ❌ Multiple Exposed Ports Required | ❌ 5060/5061 & Wide RTP Ranges |
| Network & Firewall |
Built-in SBC & Automatic Fail2ban Defense
SIP brute-force and flood attacks blocked at OS kernel level instantly. |
✅ Built-in & Automated IP Blocking | ❌ Costly Dedicated SBC Appliance | ⚠️ Controlled by Provider |
| Integration & Ecosystem |
Microsoft Teams Direct Routing
Bidirectional voice routing between Teams users and IP PBX extensions. |
✅ Built-in SBC & Free | ❌ Certified External SBC Required | ⚠️ High-Priced Add-on Tier |
| Integration & Ecosystem |
REST API & WebSocket Webhooks
Unlimited integration with CRM, ERP, and internal enterprise software. |
✅ Full Access & Documented | ❌ TAPI / CSTA License Required | ⚠️ Per-API-Call Invoicing |
| Mobile & Communications |
Native Android (Kotlin) & iOS (Swift) Softphone
Fully customizable, rebrandable, and compileable with your branding. |
✅ Native Codebase (v1.0.34) | ❌ Costly 3rd-Party App Required | ⚠️ Proprietary Provider App |
| Mobile & Communications |
FCM / APNs High-Priority Push Wake-up
Wakes the lock screen instantly on incoming call even if app is closed. |
✅ <400ms Wakeup, 0% Battery Drain | ❌ High Background Battery Drain | ✅ Standard |
| Mobile & Communications |
In-Browser WebRTC Softphone (Zero-Install)
Make and receive calls directly in Chrome/Firefox with zero installation. |
✅ Embedded in Web Panel | ❌ Not Supported | ✅ Standard |
| Call Center & Supervision |
Live Supervisor Spy & Whisper (*90)
Supervisor can listen silently, coach the agent, or barge into the call. |
✅ 3 Modes (Spy/Whisper/Barge-in) | ⚠️ Additional Supervisor License | ⚠️ Top-Tier Subscription Only |
| Call Center & Supervision |
Break Reason Codes & Live Wallboard (*22/*23)
Real-time tracking of agent breaks (lunch, coffee, training, technical). |
✅ Built-in ACD Queue Monitoring | ⚠️ Separate Reporting Server | ⚠️ Extra Fee Per User |
| Cost & Independence |
Licensing & Monthly Cost Per Extension
Runs on your hardware with unlimited extensions and trunks at zero cost. |
✅ bash / Completely Free (MIT) | ❌ ,000+ Hardware & Ext Licenses | ❌ 15$-35$ / Dahili / Her Ay |
| Cost & Independence |
Data Sovereignty & GDPR Compliance
All call recordings and personal data remain strictly on your premises. |
✅ 100% On-Premises / Private VPS | ✅ Local Storage | ⚠️ Stored in Third-Party Cloud |
Port 443 ALPN Security Breakthrough: Legacy IP PBXs expose vulnerable SIP port 5060 to the public web, drawing relentless bot scans and brute-force attacks. AiPBX solves this by inspecting TLS ClientHello ALPN protocols on port 443, routing Web, WebRTC WSS, and TLS SIP internally. Zero firewall hassle in hotels and enterprise guest networks.
| Port / Socket | Protocol | Service & Component | System Role & Scope | Security |
|---|---|---|---|---|
| 443 / TCP | HTTPS, WSS, SIP TLS | Nginx L4 ALPN Stream Multiplexer | Multiplexes Web UI (:8443), WebRTC WSS (:8089), and SIP TLS (:5061) on one port | TLS 1.3 / Strict ALPN Preread Inspection |
| 5060 / UDP-TCP | SIP (PJSIP) | Local Desktop IP Phone Signaling | On-premise physical desk phones and VoIP gateways | Fail2ban SIP Jails / Digest Auth |
| 5061 / TCP | SIP TLS (PJSIP) | Encrypted Remote Extensions & Teams SBC | Mobile softphones and Microsoft Teams Direct Routing trunks | TLS 1.2 / 1.3 Mutual Authentication |
| 8089 / TCP | WSS (WebRTC SIP) | Asterisk WebRTC Secure WebSocket | Browser softphone telephony engine (Chrome/Firefox/Safari) | DTLS-SRTP & SSL Origin Verification |
| 8090 / TCP | WSS (Go Chat) | aipbx-chat Real-Time Messaging Daemon | 1-on-1 and group chat rooms, typing indicators, read receipts | Bearer Token & Session Guard |
| 10000-20000 / UDP | RTP / SRTP | Opus & G.711 HD Voice Media Stream | Direct bidirectional transport of digitized voice packets | AES-128 / AES-256 SRTP Encryption |
Telephony Star Codes (* Codes): Feature access codes dialable from desk phones, browser WebRTC, and mobile softphone apps. For example, supervisors dial *901002 to instantly eavesdrop on extension 1002 silently (Spy), press 5 to whisper coaching, or press 4 to barge in.
| Dial Code | Function Name | Description & How-to | Access Level |
|---|---|---|---|
| *90[Dahili] | Supervisor Call Spy & Whisper | Silently listen to active call; press (5) to whisper to agent or (4) to barge in. | Supervisor & Admin |
| *22[MolaKodu] | Call Center Pause / Break Start | Temporarily pause agent from ACD queues (*221: Lunch, *222: Break, *223: Meeting, *224: Training). | Call Center Agent |
| *23 | Call Center Resume from Break | Ends agent pause state and immediately resumes ACD incoming queue call delivery. | Call Center Agent |
| *97 | Direct Voicemail Access | Access and manage personal voicemail box directly from the calling extension. | All Extensions |
| *98[Dahili] | Remote Voicemail Access | Access any extension's voicemail box from another phone or outside trunk using PIN. | Authorized User |
| *72[HedefNo] | Call Forward Unconditional | Forwards all incoming calls immediately to the designated internal or external number. | All Extensions |
| *73 | Cancel Call Forward Unconditional | Cancels active unconditional call forwarding rule on the extension. | All Extensions |
| *8000-*8099 | PIN-Protected ConfBridge Rooms | Multi-party, moderator-managed HD audio virtual conference rooms with PIN security. | All Users & Trunks |
| *8 | Group Call Pickup | Answers a ringing call on any desk phone belonging to the same pickup group. | Pickup Group Members |
Call Barring & Toll Fraud Prevention: Granular dialing permission tiers applied per extension to prevent unauthorized long-distance or premium rate calls. If a restricted destination is dialed, Asterisk plays an automated intercept announcement.
| Dial Permission Level | Permitted Calling Scope | Policy Badge |
|---|---|---|
| Level 1: Internal Only | Internal extensions only (1000-9999) and emergency services (112/911) | Most Restricted |
| Level 2: Local Landlines | Internal extensions + local area PSTN landline numbers | Local |
| Level 3: National Long Distance | Internal + all national domestic PSTN area codes | National |
| Level 4: Mobile / GSM Networks | Internal + National Landlines + all cellular mobile carriers | Standard Business |
| Level 5: International Direct Dialing | Internal + National + all worldwide destination countries (00... / +...) | Global |
| Level 6: Full Unrestricted & Premium | Unrestricted dialing including directory inquiry (118xx) and premium lines | Unrestricted |
Hardware Sizing & Deployment: Built upon pure C Asterisk 22 and optimized PJSIP, AiPBX exhibits extraordinarily low memory and CPU footprint. An instance with 2 vCPUs and 4 GB RAM smoothly handles 100 concurrent channels. Fast NVMe SSD storage is advised for audio call recording archives.
| Deployment Scale | Processor (vCPU) | RAM | Storage | Network | Operating System |
|---|---|---|---|---|---|
| Small Business (1-50 Ext) | 2 vCPU (x86_64 / ARM64) | 2 GB RAM | 20 GB SSD / NVMe | 100 Mbps Ethernet | Ubuntu 26.04 LTS |
| Medium Business (50-250 Ext) | 4 vCPU (x86_64) | 4 - 8 GB RAM | 60 GB NVMe (incl. call recordings) | 1 Gbps Ethernet | Ubuntu 26.04 LTS |
| Enterprise / Call Center (250-2000+ Ext) | 8 - 16 vCPU (x86_64) | 16 - 32 GB RAM | 250+ GB NVMe RAID-10 | 10 Gbps Ethernet / ALPN L4 Load Balancing | Ubuntu 26.04 LTS |
Table data is rendered dynamically from
docs/data.json. Deploy and Test on Your Server in 5 Minutes
Run our turnkey one-liner on a clean Ubuntu 26.04 LTS server to spin up Asterisk 22, Port 443 ALPN, and the full web interface.