TURN over (D)TLS #56

Closed
opened 2021-09-27 07:23:25 +02:00 by simon · 1 comment
Owner

Currently, Matrix VoIP calls do not work when the clients are on different networks (which they almost always are). Coturn logs a message like ERROR: A peer IP 192.168.100.91 denied in the range: 192.168.0.0-192.168.255.255. There has been a workaround in 59655fd1b0, which enables plain connections. However, (D)TLS connections are more desirable.

The testing tool mentioned in the Synapse docs shows that the plain connections work, but (D)TLS connections (turns:) do not. Also, it shows plain turn to not be working over IPv6?

image

Currently, Matrix VoIP calls do not work when the clients are on different networks (which they almost always are). Coturn logs a message like `ERROR: A peer IP 192.168.100.91 denied in the range: 192.168.0.0-192.168.255.255`. There has been a workaround in 59655fd1b0383fd09898dccd059eb9e21a71883d, which enables plain connections. However, (D)TLS connections are more desirable. The [testing tool](https://test.voip.librepush.net/) mentioned in [the Synapse docs](https://matrix-org.github.io/synapse/v1.41/turn-howto.html) shows that the plain connections work, but (D)TLS connections (`turns:`) do not. Also, it shows plain turn to not be working over IPv6? ![image](/attachments/3a0eb195-087c-4b05-bcf0-20af42aa723b)
117 KiB
simon added the
affects/security
type
bug
affects/usability
labels 2021-09-27 07:23:25 +02:00
Author
Owner

It now works. Also, the tests only succeeding for the first items is caused by the quota, which shouldn’t be a problem in practice.

It now works. Also, the tests only succeeding for the first items is caused by the quota, which shouldn’t be a problem in practice.
simon closed this issue 2022-03-26 14:45:02 +01:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: simon/nixos-config#56
No description provided.