FreeSBC sits at the edge of your phone system so your FreeSWITCH or Asterisk never has to face the public internet. It is the only element with a public address: phones register through it over SIP on UDP, TCP, or TLS, browsers call through WebSocket with WebRTC terminated at the edge (ICE-Lite, DTLS-SRTP, and RTCP-mux, relayed onward as plain RTP), and carriers reach your switch through it as an outbound proxy, with the switch's private addresses hidden from every SDP body, Contact, and Request-URI it constructs. The switch stays on a private LAN as the registrar and call brain, holding credentials and carrier accounts, while FreeSBC anchors all media on its own ports with hardened first-packet latching and a silence watchdog, and never transcodes. Against the background radiation of SIP scanning, it applies per-IP rate limits with separate limits for carrier sources, scanner fingerprinting with in-memory bans, and admission control for public INVITEs and REGISTER enumeration, and every denial is a silent drop. A multi-switch pool hashes users across switches, and one fixed private socket keeps the trusted side simple. The embedded WebUI, REST API, and Prometheus metrics sit behind a bcrypt-checked admin login, showing live calls and media ports. One static binary, one YAML file, no database, no Redis, and no separate media process to babysit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

MikoPBX gives a small business a complete phone system on a server it controls, with extensions, call queues, IVR menus, and call recording instead of per-seat hosted PBX fees. Follow a call through it: incoming rules per provider match exact numbers or patterns, fall through by priority when nobody answers, and end at a default route. Each employee gets an extension with SIP credentials, forwarding for no-answer, busy, and unavailable states, and an optional recording switch. Queues offer seven distribution strategies, including Ring All, Least Recent, Fewest Calls, and Memory Hunt, and can announce each caller's position and estimated wait. IVR menus play a recorded greeting, route keypad choices to departments or extensions, and fall back to a default number after a set number of retries. Call history filters by caller, destination, or DID, flags missed calls in red, and plays or downloads recordings as WebM, MP3, WAV, or OGG. Voicemail, call transfer, call pickup, and a holiday and night-time switcher serve daily needs, while free and paid marketplace modules, among them a softphone, auto dialer, and LDAP/AD sync, handle the rest. A firewall, Fail2Ban, passkey sign-in, and CrowdSec integration protect the system, and a REST API with more than 250 endpoints lets other tools manage it. The interface speaks 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.