I'm circled here a year later, finding my own threads in battling SIP signaling.
With media bypassed on endpoints, each time a caller is placed on hold, Freeswitch sends a call REinvite.
During this invite it would seem logical to update the RTP address with the media servers address rather...