Range of ports UDP for WebRTC

[Lê Nhật Tân]

Can I open specifics port UDP or a small range of ports for WebRTC? I want to configure firewall to be as absolutely secure as possible and still have WebRTC work

[Fred Dixon]

To restrict access to your BigBlueButton server, see

  http://docs.bigbluebutton.org/2.2/customize.html#restrict-access-to-specific-ports

We also dig a bit through the config files and post a follow-up on how you can narrow the range.

Regards,... Fred

On Mon, Apr 1, 2019 at 8:30 PM Lê Nhật Tân <lenhat...@gmail.com> wrote:

Can I open specifics port UDP or a small range of ports for WebRTC? I want to configure firewall to be as absolutely secure as possible and still have WebRTC work

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[Lê Nhật Tân]

UDP ports from 16384 to 32768 are so much, I can't tell my company network to open that ports, they won't accept it. Can you have any ideas about ports UDP (like specifics ports )

Vào Th 3, 2 thg 4, 2019 vào lúc 10:31 Fred Dixon <ffd...@gmail.com> đã viết:

[Chad Pilkey]

With WebRTC you need more ports for each individual user. With Flash, everything just went over 1935, but now every user needs their own port for each stream that they want to send or receive. If you have 10 meetings with 10 people in each one, and each person is sharing a webcam you're looking at 10*10*10 = 1000 ports just for webcams. Then there's the WebRTC audio which is 1 or 2 ports per person. On top of that if you have people reconnecting or stopping and starting their connections the ports don't get released right away so you need extra just in case. I would recommend a couple thousand just to be safe.

To set custom ranges see this comment, https://github.com/bigbluebutton/bigbluebutton/issues/5156#issuecomment-395734122. If you lower it too much you're going to run into issues though.

On Monday, April 1, 2019 at 11:55:18 PM UTC-4, Lê Nhật Tân wrote:

UDP ports from 16384 to 32768 are so much, I can't tell my company network to open that ports, they won't accept it. Can you have any ideas about ports UDP (like specifics ports )

Vào Th 3, 2 thg 4, 2019 vào lúc 10:31 Fred Dixon <ffd...@gmail.com> đã viết:

To restrict access to your BigBlueButton server, see

  http://docs.bigbluebutton.org/2.2/customize.html#restrict-access-to-specific-ports

We also dig a bit through the config files and post a follow-up on how you can narrow the range.

Regards,... Fred

On Mon, Apr 1, 2019 at 8:30 PM Lê Nhật Tân <lenhat...@gmail.com> wrote:

Can I open specifics port UDP or a small range of ports for WebRTC? I want to configure firewall to be as absolutely secure as possible and still have WebRTC work

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigblueb...@googlegroups.com.

To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigblueb...@googlegroups.com.

[Lê Nhật Tân]

Hi Fred,

 I know WebRTC have to use UDP for stream, but I want to use port TCP for stream webrtc in my server bbb. Is it possible?? 

Vào Th 3, 2 thg 4, 2019 vào lúc 23:05 Chad Pilkey <capi...@gmail.com> đã viết:

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.

[Chad Pilkey]

Technically it's possible, but I would never recommend doing that in production and I don't think we have any documentation about how to even go about doing it.