You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@openmeetings.apache.org by Arndt, Wolfgang <ar...@lernenfoerdern.de> on 2020/03/31 14:30:55 UTC

Openmeetings Docker Image / Kurento / Turn / NAT

Hi @ all,

 
i wanted to setup our own openmeetings server with docker.

 
I try for days now to get it working, but it drives me mad now.

I read a lot of documentation but i cannot find the right way.

 
Our Network:

Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall with nat in our office

 
 
My Homeoffice-PC and a laptop (corona sucks!) is connected via a second pfsense to the internet.

 
Both pfsenses are connected via OpenVPN, so i can reach the Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on the dockerhost is reachable, too. Every traffic between my home and office is allowed.

 
I can login from my desktop PC@home and from my laptop@home. On every machine i can see myself, but i cant see the partner. Audio isn´t working also.

 
I tried to setup a turnserver on my dockerhost as well:

 
1.	docker pull instrumentisto/coturn
vi /home/turnserver/turnserver.conf
listening-port=3478
relay-ip=xxx.xxx.xxx.xxx
external-ip=xxx.xxx.xxx.xxx
relay-threads=50
min-port=41369
max-port=65535
user=kurento:kurento
lt-cred-mech

docker run -d --network=host -v /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478

xxx.xxx.xxx.xxx above is the external ip from my office.

I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to dockerhost.

Openmeeting docker is started:

docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 8888:8888 -e TURN_URL="turn:10.50.100.13:3478" -e TURN_USER="kurento" -e TURN_PASS="kurento" apache/openmeetings:5.0.0-M3

 
Is there any documentation that could help me?

Thx

Wolfgang

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

AW: Openmeetings Docker Image / Kurento / Turn / NAT

Posted by Arndt, Wolfgang <ar...@lernenfoerdern.de>.
Tcp / upd 3478 
Tcp 5443 
Tcp 8888 
And udp UDP 49152:65535 

Are all forwarded to docker host

Docker host out is allowed for UDP complete





-----Ursprüngliche Nachricht-----
Von: YUP <yu...@gmail.com> 
Gesendet: Dienstag, 31. März 2020 18:13
An: user@openmeetings.apache.org
Betreff: Re: Openmeetings Docker Image / Kurento / Turn / NAT

Hi,
You should check open ports in your firewall, both tcp and udp. At least those needed for normal run of OM+kurento:
3478 TCP-UDP IN
5443 TCP IN
8888 TCP IN
49152:65535 UDP IN-OUT
You can do it using nmap.
My OM is behind office firewall too and I experienced the same behavior. In my case only 443 port is open and all UDP are closed.

On Tue, Mar 31, 2020 at 4:31 PM Arndt, Wolfgang <ar...@lernenfoerdern.de> wrote:
>
> Hi @ all,
>
>
>
> i wanted to setup our own openmeetings server with docker.
>
>
>
> I try for days now to get it working, but it drives me mad now.
>
> I read a lot of documentation but i cannot find the right way.
>
>
>
> Our Network:
>
> Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall 
> with nat in our office
>
>
>
>
>
> My Homeoffice-PC and a laptop (corona sucks!) is connected via a second pfsense to the internet.
>
>
>
> Both pfsenses are connected via OpenVPN, so i can reach the Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on the dockerhost is reachable, too. Every traffic between my home and office is allowed.
>
>
>
> I can login from my desktop PC@home and from my laptop@home. On every machine i can see myself, but i cant see the partner. Audio isn´t working also.
>
>
>
> I tried to setup a turnserver on my dockerhost as well:
>
>
>
> docker pull instrumentisto/coturn
> vi /home/turnserver/turnserver.conf
> listening-port=3478
> relay-ip=xxx.xxx.xxx.xxx
> external-ip=xxx.xxx.xxx.xxx
> relay-threads=50
> min-port=41369
> max-port=65535
> user=kurento:kurento
> lt-cred-mech
>
> docker run -d --network=host -v 
> /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name 
> turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478
>
> xxx.xxx.xxx.xxx above is the external ip from my office.
>
> I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to dockerhost.
>
> Openmeeting docker is started:
>
> docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 
> 8888:8888 -e TURN_URL="turn:10.50.100.13:3478" -e TURN_USER="kurento" 
> -e TURN_PASS="kurento" apache/openmeetings:5.0.0-M3
>
>
>
> Is there any documentation that could help me?
>
> Thx
>
> Wolfgang
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>


Re: Openmeetings Docker Image / Kurento / Turn / NAT

Posted by YUP <yu...@gmail.com>.
Hi,
You should check open ports in your firewall, both tcp and udp. At
least those needed for normal run of OM+kurento:
3478 TCP-UDP IN
5443 TCP IN
8888 TCP IN
49152:65535 UDP IN-OUT
You can do it using nmap.
My OM is behind office firewall too and I experienced the same
behavior. In my case only 443 port is open and all UDP are closed.

On Tue, Mar 31, 2020 at 4:31 PM Arndt, Wolfgang <ar...@lernenfoerdern.de> wrote:
>
> Hi @ all,
>
>
>
> i wanted to setup our own openmeetings server with docker.
>
>
>
> I try for days now to get it working, but it drives me mad now.
>
> I read a lot of documentation but i cannot find the right way.
>
>
>
> Our Network:
>
> Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall with nat in our office
>
>
>
>
>
> My Homeoffice-PC and a laptop (corona sucks!) is connected via a second pfsense to the internet.
>
>
>
> Both pfsenses are connected via OpenVPN, so i can reach the Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on the dockerhost is reachable, too. Every traffic between my home and office is allowed.
>
>
>
> I can login from my desktop PC@home and from my laptop@home. On every machine i can see myself, but i cant see the partner. Audio isn´t working also.
>
>
>
> I tried to setup a turnserver on my dockerhost as well:
>
>
>
> docker pull instrumentisto/coturn
> vi /home/turnserver/turnserver.conf
> listening-port=3478
> relay-ip=xxx.xxx.xxx.xxx
> external-ip=xxx.xxx.xxx.xxx
> relay-threads=50
> min-port=41369
> max-port=65535
> user=kurento:kurento
> lt-cred-mech
>
> docker run -d --network=host -v /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478
>
> xxx.xxx.xxx.xxx above is the external ip from my office.
>
> I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to dockerhost.
>
> Openmeeting docker is started:
>
> docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 8888:8888 -e TURN_URL="turn:10.50.100.13:3478" -e TURN_USER="kurento" -e TURN_PASS="kurento" apache/openmeetings:5.0.0-M3
>
>
>
> Is there any documentation that could help me?
>
> Thx
>
> Wolfgang
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

Re: Openmeetings Docker Image / Kurento / Turn / NAT

Posted by Maxim Solodovnik <so...@gmail.com>.
"<external-ip>:port"

can be tested here
https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/

On Tue, 31 Mar 2020 at 22:56, Arndt, Wolfgang <ar...@lernenfoerdern.de>
wrote:

> I think my turn server is running.
>
>
>
> I tried that on
> https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/
>
>
>
> How are those parameters
> https://github.com/openmeetings/openmeetings-docker#useful-parameters
> expected?
>
>
>
> turn:<internal-IP>:port ?
>
>
>
> or
>
>
>
> turn:<external-IP>:port ?
>
>
>
> or <external-ip>:port or without port ????
>
>
>
>
>
> How can i test that?
>
>
>
>
>
>
>
>
>
> *Von:* Maxim Solodovnik <so...@gmail.com>
> *Gesendet:* Dienstag, 31. März 2020 16:40
> *An:* Openmeetings user-list <us...@openmeetings.apache.org>
> *Betreff:* Re: Openmeetings Docker Image / Kurento / Turn / NAT
>
>
>
> This TURN config works for me
>
> https://markmail.org/message/3dgy62lj3m74mogy
>
> (it contains couple additional parameters)
>
>
>
> On Tue, 31 Mar 2020 at 21:31, Arndt, Wolfgang <ar...@lernenfoerdern.de>
> wrote:
>
> Hi @ all,
>
>
>
> i wanted to setup our own openmeetings server with docker.
>
>
>
> I try for days now to get it working, but it drives me mad now.
>
> I read a lot of documentation but i cannot find the right way.
>
>
>
> Our Network:
>
> Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall with
> nat in our office
>
>
>
>
>
> My Homeoffice-PC and a laptop (corona sucks!) is connected via a second
> pfsense to the internet.
>
>
>
> Both pfsenses are connected via OpenVPN, so i can reach the
> Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on
> the dockerhost is reachable, too. Every traffic between my home and office
> is allowed.
>
>
>
> I can login from my desktop PC@home and from my laptop@home. On every
> machine i can see myself, but i cant see the partner. Audio isn´t working
> also.
>
>
>
> I tried to setup a turnserver on my dockerhost as well:
>
>
>
>    1. docker pull instrumentisto/coturn
>    vi /home/turnserver/turnserver.conf
>    listening-port=3478
>    relay-ip=xxx.xxx.xxx.xxx
>    external-ip=xxx.xxx.xxx.xxx
>    relay-threads=50
>    min-port=41369
>    max-port=65535
>    user=kurento:kurento
>    lt-cred-mech
>
> docker run -d --network=host -v
> /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name
> turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478
>
> xxx.xxx.xxx.xxx above is the external ip from my office.
>
> I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to
> dockerhost.
>
> Openmeeting docker is started:
>
> docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 8888:8888
> -e TURN_URL="turn:10.50.100.13:3478" -e TURN_USER="kurento" -e
> TURN_PASS="kurento" apache/openmeetings:5.0.0-M3
>
>
>
> Is there any documentation that could help me?
>
> Thx
>
> Wolfgang
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
>
> WBR
> Maxim aka solomax
>


-- 
WBR
Maxim aka solomax

AW: Openmeetings Docker Image / Kurento / Turn / NAT

Posted by Arndt, Wolfgang <ar...@lernenfoerdern.de>.
I think my turn server is running.

 
I tried that on https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/

 
How are those parameters https://github.com/openmeetings/openmeetings-docker#useful-parametersexpected?

 
turn:<internal-IP>:port ?

 
or

 
turn:<external-IP>:port ?

 
or <external-ip>:port or without port ????

 
 
How can i test that?

 
 
 
 
Von: Maxim Solodovnik <so...@gmail.com>
Gesendet: Dienstag, 31. März 2020 16:40
An: Openmeetings user-list <us...@openmeetings.apache.org>
Betreff: Re: Openmeetings Docker Image / Kurento / Turn / NAT

 
This TURN config works for me

https://markmail.org/message/3dgy62lj3m74mogy

(it contains couple additional parameters)

 
On Tue, 31 Mar 2020 at 21:31, Arndt, Wolfgang <ar...@lernenfoerdern.de> wrote:

Hi @ all,

 
i wanted to setup our own openmeetings server with docker.

 
I try for days now to get it working, but it drives me mad now.

I read a lot of documentation but i cannot find the right way.

 
Our Network:

Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall with nat in our office

 
 
My Homeoffice-PC and a laptop (corona sucks!) is connected via a second pfsense to the internet.

 
Both pfsenses are connected via OpenVPN, so i can reach the Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on the dockerhost is reachable, too. Every traffic between my home and office is allowed.

 
I can login from my desktop PC@home and from my laptop@home. On every machine i can see myself, but i cant see the partner. Audio isn´t working also.

 
I tried to setup a turnserver on my dockerhost as well:

 
1.	docker pull instrumentisto/coturn
vi /home/turnserver/turnserver.conf
listening-port=3478
relay-ip=xxx.xxx.xxx.xxx
external-ip=xxx.xxx.xxx.xxx
relay-threads=50
min-port=41369
max-port=65535
user=kurento:kurento
lt-cred-mech

docker run -d --network=host -v /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478

xxx.xxx.xxx.xxx above is the external ip from my office.

I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to dockerhost.

Openmeeting docker is started:

docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 8888:8888 -e TURN_URL="turn:10.50.100.13:3478 <http://10.50.100.13:3478> " -e TURN_USER="kurento" -e TURN_PASS="kurento" apache/openmeetings:5.0.0-M3

 
Is there any documentation that could help me?

Thx

Wolfgang

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 


 
--

WBR
Maxim aka solomax

Re: Openmeetings Docker Image / Kurento / Turn / NAT

Posted by Maxim Solodovnik <so...@gmail.com>.
This TURN config works for me
https://markmail.org/message/3dgy62lj3m74mogy
(it contains couple additional parameters)

On Tue, 31 Mar 2020 at 21:31, Arndt, Wolfgang <ar...@lernenfoerdern.de>
wrote:

> Hi @ all,
>
>
>
> i wanted to setup our own openmeetings server with docker.
>
>
>
> I try for days now to get it working, but it drives me mad now.
>
> I read a lot of documentation but i cannot find the right way.
>
>
>
> Our Network:
>
> Dockerserver has ip: 10.50.100.13 and is behind a pfsense firewall with
> nat in our office
>
>
>
>
>
> My Homeoffice-PC and a laptop (corona sucks!) is connected via a second
> pfsense to the internet.
>
>
>
> Both pfsenses are connected via OpenVPN, so i can reach the
> Openmeetings-Webinterface via 10.50.100.13:5443/openmeetings Port 8888 on
> the dockerhost is reachable, too. Every traffic between my home and office
> is allowed.
>
>
>
> I can login from my desktop PC@home and from my laptop@home. On every
> machine i can see myself, but i cant see the partner. Audio isn´t working
> also.
>
>
>
> I tried to setup a turnserver on my dockerhost as well:
>
>
>
>    1. docker pull instrumentisto/coturn
>    vi /home/turnserver/turnserver.conf
>    listening-port=3478
>    relay-ip=xxx.xxx.xxx.xxx
>    external-ip=xxx.xxx.xxx.xxx
>    relay-threads=50
>    min-port=41369
>    max-port=65535
>    user=kurento:kurento
>    lt-cred-mech
>
> docker run -d --network=host -v
> /home/turnserver/turnserver.conf:/etc/coturn/turnserver.conf --name
> turnserver instrumentisto/coturn -r=xxx.xxx.xxx.xxx:3478
>
> xxx.xxx.xxx.xxx above is the external ip from my office.
>
> I made a portforwarding from my Office-Pfsense for tcp/upd 3478 to
> dockerhost.
>
> Openmeeting docker is started:
>
> docker run -i --rm --expose=5443 --expose=8888 -p 5443:5443 -p 8888:8888
> -e TURN_URL="turn:10.50.100.13:3478" -e TURN_USER="kurento" -e
> TURN_PASS="kurento" apache/openmeetings:5.0.0-M3
>
>
>
> Is there any documentation that could help me?
>
> Thx
>
> Wolfgang
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>


-- 
WBR
Maxim aka solomax