Updated STUN address for bbb-install.sh

[Fred Dixon]

Hi everyone,

The default STUN IP address in bbb-install.sh is not working at the moment. 

Having an incorrect STUN configuration for Kurento when it is behind a firewall will1020 when users try to share webcams.

We just checked the IP address for stun.l.google.com and it seems to be working at 172.217.212.127

sudo apt-get install stuntman-client

# stun 172.217.212.127:19302
STUN client version 0.97
Primary: Open
Return value is 0x000001

We've updated bbb-install.sh to now use this IP address.  

   https://github.com/bigbluebutton/bbb-install/blob/master/bbb-install.sh#L645

If your BigBlueButton server is hosted behind a firewall and your users are getting 1020 errors when sharing webcam, then try set stunServerAddress to

stunServerAddress=172.217.212.127   

in

  /etc/kurento/modules/kurento/WebRtcEndpoint.conf.ini

and restarting BigBlueButton.

Regards,... Fred

--

BigBlueButton Developer

http://bigbluebutton.org/

Like BigBlueButton?  Tweet us at @bigbluebutton

[bayden10]

Thanks for the update.. 

[Fran Pereyra]

Thanks Fred.

[PD123]

Is there a way to configure the TURN (coturn) server that is described in the bbb install doc, so that it can be used in kurento as stun server as well. I use this and it is running as turn, just wondering if it can play this role as well.
When I try the stun client I get "Primary: Blocked or could not reach STUN server" even after opening the default port 19302

 This would allow reducing further external dependency.

On Friday, July 3, 2020 at 8:19:43 PM UTC+2 fran...@gmail.com wrote:

Thanks Fred.

[sd...@distancelearning.cloud]

Use this, adding ip address of your coturn, may sure 3478 is open

 

stunServerAddress=x.x.xx.xx

stunServerPort=3478

 

regards,

Stephen

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-s...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-setup/5a4b73b1-ab85-4a93-ac1e-0bd61572be69n%40googlegroups.com.

[bayden10]

Are there any advantages if coTURN is on local net with the BBB instance with your suggestion?

[Armin Mazariegos]

Hi,

Once you have setup a Turn/Stun server; there is no need to configure anything else; BBB already informs Kurento on the Turn/Stun existence.

Try to check on your firewall if the port 3478 is open for both TCP & UDP.

Do realize that you can have audio and even video if you open up only UDP.; however for Safari; you do need 3478 TCP open.

Hope this help.

[Michael Plotsker]

is opening port 3478 still relevant? I need to know if I have to add these to my firewall or is this only if I host my own stun/turn server?

do I have to open 19302 for the google stun server?

Thanks

[Fabrice Rouillier]

Hi Fred

With BBB 2.2.31, we encounter serious problems whenever more than 50 people are connected : webcams become *very* difficult to share. Sometime got 1020 errors sometimes no errors but several minutes before getting a webcam on screen.

Might the stun server address 172.217.212.127  to be the cause of the problem as if it was saturating when more than 50 "almost simultaneous" queries are done ?

using "host stun.l.google.com" from two different places, I obtain 2 different IPs which let me think that there is some load balance somewhere.

Moreover, implementing a coturn did not solve the problem. 

I discovered that the file /etc/kurento/modules/kurento/WebRtcEndpoint.conf.ini is kept untouched by bbb-install.sh using the -c option so that the line "stunServerAddress=172.217.212.127" is kept untouched.

In the coturn side,  I got recurrent errors like :

closed (2nd stage), user <> realm < OUR SERVER > origin <>, local <LOCAL IP>:3478, remote <REMOTE IP>:53913, reason: allocation watchdog determined stale session state

and also ""reason: TLS/TCP socket buffer operation error (callback)""

Cheers,

Fabrice.

[rschu...@gmail.com]

Hi,

please correct me if im wrong but you can use your own COTURN Server as STUN Server address if you enter the IP address within WebRtcEndpoint.conf.ini

Altough that is not needed if you configure using the -c turnserver switch:

;; You don't need to configure both STUN and TURN, because TURN already includes
;; STUN functionality.

50 users - 50 users on ONE server within ONE room with ALL webcams? What ist the CPU Load?

[Fabrice Rouillier]

"Altough that is not needed if you configure using the -c turnserver switch:"

May be but in practice the script let uncommented the line "stunServerAddress=172.217.212.127" and I am now pretty convinced this is the source of the problem.

"50 users - 50 users on ONE server within ONE room with ALL webcams? What ist the CPU Load? "

CPU below 20%, network load very low , one Server one ROOM very few webcams since a part got 1020 errors another part wait several minutes to get their cam working.

Same situation with 40 users works perfectly and it was possible to switch on numerous cameras : same server.

So I suspect there is a maximum number of possible simultaneous queries to 172.217.212.127 before saturation.

Cheers,

Fabrice.