Behind NAT not working

[Moises B. Almeida]

I'm struggling, but I can't solve it.

my config:

rtp_port_range = "10000-20000"

turn_server = "myturn.server"
turn_port = 3478
turn_type = "udp"
turn_user = "myuser"
turn_pwd = "mypass"

my clients use the same TURN server. It works fine when testing in https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/

should I set "full_trickle = true"?

Please help me with that!

In Local everything works fine.

What should I do?

[Ben Davenport]

Try removing the TURN server config in Janus and use the following command arg when launching Janus:

-1, --nat-1-1=ip              Public IP to put in all host candidates,
                                  assuming a 1:1 NAT is in place (e.g., Amazon
                                  EC2 instances, default=none)

--
You received this message because you are subscribed to the Google Groups "meetecho-janus" group.
To unsubscribe from this group and stop receiving emails from it, send an email to meetecho-janu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/ab68da51-20ee-437f-814f-fb6d3e0a4136n%40googlegroups.com.

[Moises B. Almeida]

using it I got:

(process:2604): libnice-DEBUG: 18:22:19.963: Agent 0xffff2c00b2a0 : Candidate gathering FINISHED, stopping discovery timer.
(process:2604): libnice-DEBUG: 18:22:19.964: Agent 0xffff2c00b2a0: gathered UDP local candidate : [192.168.10.210]:53166 for s1/c1. U/P '(null)'/'(null)'
(process:2604): libnice-DEBUG: 18:22:19.964: Agent 0xffff2c00b2a0: gathered UDP local candidate : [mypublicip]:53166 for s1/c1. U/P '(null)'/'(null)'
(process:2604): libnice-DEBUG: 18:22:20.198: Agent 0xffff2c00b2a0: inbound STUN packet for 1/1 (stream/component) from [192.168.10.149]:56019 (100 octets) :
(process:2604): libnice-stun-DEBUG: 18:22:20.198: STUN demux: OK!
 when in local network.

(process:2604): libnice-DEBUG: 18:21:52.218: Agent 0xffff2c00b000 : Candidate gathering FINISHED, stopping discovery timer.
(process:2604): libnice-DEBUG: 18:21:52.218: Agent 0xffff2c00b000: gathered UDP local candidate : [192.168.10.210]:48784 for s1/c1. U/P '(null)'/'(null)'
(process:2604): libnice-DEBUG: 18:21:52.218: Agent 0xffff2c00b000: gathered UDP local candidate : [mypublicip]:48784 for s1/c1. U/P '(null)'/'(null)'
when behind nat

Why is this happen?

[Ben Davenport]

Looks as though it could be trying to make connections outside of your defined port range of 10000-20000. Make that much larger, something like 5002-65535

To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/dc8df2fe-fa86-4901-a530-87593f008ef0n%40googlegroups.com.

[Moises B. Almeida]

I wanna be able to connect to my Janus (my home) out of my local network.

Using TURN - and --nat-1-1=myip - I got nice debug changing state to COMPLETE (last line -> https://pastebin.com/cahRU1dy)

But in line 24 I got STUN 401 error.

I'm still not receiving or sending audio behind NAT.

The port range seems to solve some problems.

Some clue? Thanks for the help! (I'm really glad and needy)

[Moises B. Almeida]

Please I need help! Janus still do not working behind NAT.

https://pastebin.com/snEwQWfz -> coturn when I try out of local network.

https://pastebin.com/rHDiGDtX -> Janus

https://pastebin.com/BqHNqAEm - coturn config

https://pastebin.com/HfypbL4A - Janus config

Working fine in local networking

[Ben Davenport]

What does your iceServers array look like on the client? [https://developer.mozilla.org/en-US/docs/Web/API/RTCIceServer/urls]

To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/a395ce0c-f61d-457f-829b-cab13263393en%40googlegroups.com.

[Moises B. Almeida]

https://pastebin.com/vQnFRARM -> iceServers array

[Ben Davenport]

It may be that your non-local network you're trying to use only supports secure TURN (TURNS), which is TURN over TLS.

Have you tried using Wireshark to capture traffic?

To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/beac6404-0c2f-4ea9-a82d-45fba17863d9n%40googlegroups.com.

[Moises B. Almeida]

https://pastebin.com/xGxAqa33 -> firefox log.

In line 29 -> Retry may be possible, stun error code 401.

I really do not understand, because the PASSWORD is correct. I got this log in TURN server, but not shure it`s the problem. I will give a look in Wireshark and tell you what I got.

[Moises B. Almeida]

Sounds good?

[Mirko Brankovic]

I see you are using turnadmin user, maybe it is default user and pass so not allowing you to authenticate untill you use another generated user/pass? Is it coturn?

Also better to conceal the realm from wireshark

To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/8c293b78-9536-4d1c-857c-4376a3251ca2n%40googlegroups.com.

[Moises B. Almeida]

Yes, coTURN! okay I'll change the user! How do I conceal the realm?

[Mirko Brankovic]

Just in your image sharing 😉,

I won't obuse your turn server, but some ppl out there might ;)

To view this discussion on the web visit https://groups.google.com/d/msgid/meetecho-janus/e90725b6-d183-45a8-9f33-509626590cbbn%40googlegroups.com.

[Moises B. Almeida]

Well, to finish the matter: it's not an issue with Janus? It's a TURN issue? A sample Janus config should be able to work behind NAT? Thanks!

[Сергей Хоменко]

hey guys, can you please tell me what should I put into server option if my janus server using turn and deployed behind a firewall?

I want to try janus behind a firewall with force relay on, what I've done is:

I've got my local network, with janus deployed. I've also got coturn installed on a computer with public ip
I've configure janus to use TURN as described here
but I'm really can't understand what to set as a janus server, as it obviously has no public ip or domain name

const janus = new Janus({server: "?"});

thank you

пятница, 22 октября 2021 г. в 17:44:15 UTC+3, moigam...@gmail.com: