Does this provide call anonymity end-to-end?

No. It provides metadata opacity between subscribers and the carrier. Subscriber-side and carrier-side endpoints still have their respective visibility.

Kamailio or Asterisk?

Asterisk for under 200 concurrent calls and feature-rich PBX. Kamailio plus RTPengine for high-volume privacy proxy at scale.

Can I terminate to multiple carriers behind one PBX?

Yes. PJSIP supports multiple endpoints. Routing rules in your dialplan or Kamailio config decide carrier selection per call.

Yes on both PBX endpoints. Carrier-side SRTP depends on the wholesaler's support.

VoIP SIP PBX Offshore

SIP Trunk Privacy Through a Romania-Hosted PBX

A SIP trunk privacy proxy sits between your customer endpoints and the public SIP wholesale carrier. From the carrier's view, only your PBX IP is visible. From your customer's view, the carrier identity is opaque. For operators with privacy-sensitive subscribers, this single-hop SIP intermediary is the standard pattern. AnubizHost ships PJSIP and Kamailio configurations tuned for SIP trunk privacy in Romania.

Need this done for your project?

We implement, you ship. Async, documented, done in days.

Start a Brief

What SIP Trunk Privacy Means

The pattern: subscriber SIP endpoint -> your PBX -> wholesale SIP trunk -> PSTN. The PBX terminates SIP signalling from the subscriber, re-originates SIP to the wholesale carrier, and bridges RTP between the two sides. From the carrier's perspective, every call comes from your PBX's IP. From the subscriber's perspective, the wholesaler is opaque.

This is not new technology. It is standard PBX architecture. The privacy framing matters when subscribers care about their carrier-side metadata exposure - lawyers, journalists, activists.

Implementation Choices

Two main options: full-PBX (Asterisk or FreePBX handling signalling and media) or stateless SIP proxy (Kamailio or OpenSIPS handling signalling, with RTPengine handling media). The PBX approach is simpler and handles call features. The proxy approach scales further (thousands of concurrent calls per VPS).

For under 200 concurrent calls, Asterisk is fine. For higher scale, Kamailio plus RTPengine is the standard.

Romania Hosting Profile

Voice-grade VPS in Romania: 2-8 EPYC vCPU, 4-32GB DDR4 ECC, 50-500GB NVMe, 1Gbps. For Kamailio plus RTPengine plan 4 vCPU, 8GB RAM, 1Gbps - handles 500-1000 concurrent calls.

Romania position: EU peering, no blanket data retention, NVMe storage. Latency to Frankfurt 30ms, Istanbul 25ms, Helsinki 35ms.

Carrier-Side Privacy Hygiene

For maximum carrier-side opacity: do not pass the subscriber's original Caller-ID upstream unless required for E.164. Strip P-Asserted-Identity and P-Preferred-Identity headers. Set the From header to a single number representing your trunk identity, not per-subscriber. Use SRTP toward the carrier when supported.

This is signalling hygiene, not anonymity. Lawful access still applies to your PBX, not the carrier side.

Limits and Honest Framing

This pattern does not prevent lawful access to call records. It shifts the access point from the carrier to your PBX. If you are subject to lawful intercept obligations, you must comply. The privacy benefit is against commercial carrier-side metadata exploitation and against subscriber-side carrier-identity inference.

Privacy & anti-censorship guides

Tor in Russia 2026 Tor obfs4 Bridges Guide

Why Anubiz Host

100% async — no calls, no meetings

Delivered in days, not weeks

Full documentation included

Production-grade from day one

Security-first approach

Post-delivery support included

Ready to get started?

Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.

Start a Brief Voice-grade VPS from $49.99/mo