Encryption in transit
TLS 1.2 / 1.3 protects SIP signaling; SRTP protects voice media. Individual extension passwords and Digest authentication are supported.
TLS + SRTP Open source · Self-hosted · Pure Rust
Your voice,
freely connected.
One server. A voice network you control.
Simple, reliable SIP communication.
Built for your own network.
◈ Powered by Rust⌘ Apache 2.0◇ Open SIP standards
+
+
PRIVATE VOICE NETWORK
▯
Extension 1001 Connected
MingHeMINGHE SERVER
▯
Extension 1002 Connected
♧ Encrypted with TLS + SRTP
1001 ↔ 1002▂ ▅ ▃ ▇ ▄ ▂ ▆ ▃ ▅ ▂VOICE CONNECTED
Built for clear communicationSIP over TLS✳SRTP✳Rust + Tokio✳Docker Ready
01 / BUILT TO CONNECTA lightweight core.
A lightweight core.
Every call matters.
Complex protocols. A simple experience.
The essentials for self-hosted voice, from signaling to media.
Pure Rust. Built with purpose.
A minimal SIP server built with memory-safe Rust and the Tokio async runtime, without garbage collection.
RUST NATIVEYour network. Your control.
Deploy on your own VPS and manage internal extensions. Make voice calls and send SIP text messages, with temporary offline queuing and redelivery.
SELF-HOSTEDEncryption note: the server decrypts and re-encrypts relayed media, so it is part of the trust boundary. This is not end-to-end encryption. Offline messages are held in memory and lost on restart.
02 / GET STARTEDFrom a VPS
From a VPS
to your first “hello.”
Start with a server that exposes fixed TCP / UDP ports.
Bring MingHe online with Docker Compose.
- 1Get the source
Clone the repository and install Docker and Compose.
- 2Configure your server
Set the server IP, media address, and extension passwords.
- 3Connect your client
Use a SIP client that supports TLS and SDES-SRTP.
# 01 Get the source
git clone https://github.com/619dev/minghe.git
cd minghe
# 02 Prepare configuration
mkdir -p config
cp config.template.toml config/config.toml
# Set host, media_addr, and all enabled passwords
vim config/config.toml
# 03 Build from current source and start
docker build -t facilisvelox/minghe:latest .
docker compose up -d
docker compose logs -fOpen these ports before deploying
5061 / TCP SIP signaling · 20000–20020 / UDP Voice media
Public port mappings must match your configuration. Vercel hosts this website; the MingHe service requires a VPS with UDP support.
03 / RECOMMENDED APPSYour phone.
Your phone.
Your own extension.
Bria Mobile is recommended for iOS and Android.
Install the app, configure your MingHe account, and start calling.
iOS / iPhone · iPad
Bria Mobile for iOS
Connect your iPhone or iPad to a MingHe extension and make or receive SIP calls over Wi-Fi or cellular data.
Download on the App Store ↗Android / Phones · Tablets
Bria Mobile for Android
Add SIP calling to your Android device. Connect to MingHe with your server address, extension number, and password.
Get it on Google Play ↗Your MingHe connection settings
Add a SIP account in Bria Mobile and match the encryption settings to your server configuration.
- Server / Realm
- Match the server host setting
- Username / Password
- Extension and its individual password
- Port / Transport
- 5061 / TLS
- Media encryption
- SDES-SRTP
Bria Mobile requires an app-store subscription. Pricing and availability depend on your region. For a self-signed certificate, import and trust the server certificate and keep TLS verification enabled. Official user guides ↗
04 / RECOMMENDED HARDWAREPick up a handset.
Pick up a handset.
Take your network with you.
Prefer a dedicated SIP handset?
Explore this portable 4G phone from Tantuns.
HARDWARE PICK / 01
Focused on voice · Ready to go
Focused on voice · Ready to goTANTUNS · PORTABLE SIP HANDSETExplore H5 at Tantuns ↗
H5 4G SIP Handset
Physical keys and a portable design bring SIP calling into everyday use. Cellular and Wi-Fi connectivity offer flexible options for mobile teams.
4G + Wi-FiFlexible connectivity
Dual SIMCellular voice and data
2.4-inchColor LCD display
1600 mAhBuilt-in battery
Before purchasing: the manufacturer confirms SIP support. Verify TLS, SDES-SRTP, and certificate trust settings with the vendor and test them with MingHe. This is a hardware suggestion, not a compatibility certification.
GOOD TO KNOWBefore you connect.
Before you connect.
A few useful answers.
Can I deploy MingHe on Vercel?+
This website can be deployed directly to Vercel. The MingHe SIP server needs a fixed TCP signaling port and a fixed UDP media port range. Use a suitable VPS or your own server.
Which clients can I use?+
The project recommends Bria Mobile and Linkvil W610W / W620W. Other clients need SIP over TLS, SDES-SRTP, and appropriate certificate trust settings. These capabilities need separate verification for the Tantuns H5.
How do I use a self-signed certificate?+
Import certs/server.crt from your server as a trusted certificate in your client and keep certificate verification enabled. Update client trust after renewal. For public deployments, use a certificate from a trusted CA.
Is MingHe open source?+
Yes. MingHe is open source under the Apache-2.0 license. Visit GitHub to read the code, report issues, or contribute.