Why does this config cause immediate 403 Forbidden errors when we push SIP trunk concurrency beyond 400 sessions?
403 Forbidden: SIP Registration Failed - Unauthorized IP or Invalid Credentials
We are running capacity validation tests for a new BYOC trunk configuration in the US1 region. The goal is to determine the maximum stable concurrent call volume before registration stability degrades. We are using JMeter 5.6 to simulate SIP REGISTER requests and subsequent INVITE flows.
Environment Details:
- Genesys Cloud Region: US1
- JMeter Version: 5.6.2
- Test Script: Custom SIP plugin simulating 500 concurrent agents.
- Trunk Type: BYOC (Bring Your Own Carrier)
- Carrier: Bandwidth.com
Observations:
At 100 concurrent calls, registration is stable. At 300, we see minor latency spikes (200ms). However, at 400+ concurrent sessions, the Genesys Cloud edge begins rejecting new REGISTER requests with a 403 error. The carrier side logs show the requests are being sent correctly with valid credentials. The error originates from the Genesys side.
We have verified:
- The
carrierIdmatches the exact string from/api/v2/telephony/providers/edge/lines. - IP allow-lists are correctly configured for the JMeter server IP.
- The SIP trunk is not marked as “Overloaded” in the admin console until after the 403s start.
JMeter Config:
- Thread Group: 500 threads, ramp-up 10s, loop count 10.
- Timer: Constant 100ms between requests.
- SIP Sampler: Method REGISTER, Expires 600s.
The documentation mentions rate limiting on SIP signaling, but we do not see 429 errors. We see 403s. This suggests a credential or IP validation failure under load, which is confusing because the same credentials work fine at lower concurrency.
Has anyone seen this specific behavior with BYOC trunks in US1? Is there a hidden limit on concurrent REGISTER requests per trunk that isn’t documented? Or is this a bug in the edge registration handler?
Any insights would be appreciated. We are blocked on our capacity planning report.