bbb-2.6.10 no audio with firefox behind restrictive client-side firewall

[Dmitri Heerdegen]

Hi!

After upgrading BBB from 2.4 to 2.6.10, I have issues to establish an audio-connection with Firefox on Windows behind restrictive firewalls (i.e. no UDP-traffic allowed). The attempt to join a conference with either microphone or listen-only takes some time and finishes without any error but also without any audio connection established.

BBB is installed via bbb-install.sh, as is CoTURN.

I've tried with enabled and disabled 'ForceRelayOnFirefox' (because someone on BBB's Github mentioned that audio problems disappeared after disabling it).

I've also tried using an external CoTURN, so that traffic does not flow through HAProxy. The external CoTURN's version is 4.5.2.

We've tried changing in firefox' about:config 'media.peerconnection.ice.relay_only' and 'media.peerconnection.ice.default_address_only'.

In 'about:webrtc' there are no ICE-candidates.

I'm able to reproduce the behaviour on test26.bigbluebutton.org (see about:webrtc-protocoll at the end)

I'm not able to reproduce the same when I'm on Linux and when I prohibit any UDP-traffic except for DNS.

There are also no problems with Chrome-based browsers.

I'm aware that there is the Firefox-bug with ICE lite https://bugzilla.mozilla.org/show_bug.cgi?id=1034964

Have you encountered this problem? Are there any other possible mitigations?

Thanks!

Dmitri

+++++++ BEGIN (process id 9624) ++++++++
(registry/INFO) insert 'ice' (registry) succeeded: ice
(registry/INFO) insert 'ice.pref' (registry) succeeded: ice.pref
(registry/INFO) insert 'ice.pref.type' (registry) succeeded: ice.pref.type
(registry/INFO) insert 'ice.pref.type.srv_rflx' (UCHAR) succeeded: 0x64
(registry/INFO) insert 'ice.pref.type.peer_rflx' (UCHAR) succeeded: 0x6e
(registry/INFO) insert 'ice.pref.type.host' (UCHAR) succeeded: 0x7e
(registry/INFO) insert 'ice.pref.type.relayed' (UCHAR) succeeded: 0x05
(registry/INFO) insert 'ice.pref.type.srv_rflx_tcp' (UCHAR) succeeded: 0x63
(registry/INFO) insert 'ice.pref.type.peer_rflx_tcp' (UCHAR) succeeded: 0x6d
(registry/INFO) insert 'ice.pref.type.host_tcp' (UCHAR) succeeded: 0x7d
(registry/INFO) insert 'ice.pref.type.relayed_tcp' (UCHAR) succeeded: 0x00
(registry/INFO) insert 'stun' (registry) succeeded: stun
(registry/INFO) insert 'stun.client' (registry) succeeded: stun.client
(registry/INFO) insert 'stun.client.maximum_transmits' (UINT4) succeeded: 7
(registry/INFO) insert 'ice.trickle_grace_period' (UINT4) succeeded: 5000
(registry/INFO) insert 'ice.tcp' (registry) succeeded: ice.tcp
(registry/INFO) insert 'ice.tcp.so_sock_count' (INT4) succeeded: 0
(registry/INFO) insert 'ice.tcp.listen_backlog' (INT4) succeeded: 10
(registry/INFO) insert 'ice.tcp.disable' (char) succeeded: \000
(registry/INFO) insert 'ice.forced_interface_name' (string) succeeded:
(registry/INFO) insert 'ice.udp' (registry) succeeded: ice.udp
(registry/INFO) insert 'ice.udp.use_nr_resolver' (char) succeeded: \001
(ice/WARNING) ICE-STREAM(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - b944d273:f05401e776b1c35d2dd484d3e9dc4a12): relay only option results in no host candidate for IP4:10.10.10.12:0/UDP
(ice/INFO) ICE-STREAM(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - b944d273:f05401e776b1c35d2dd484d3e9dc4a12): Skipping TURN server because of address type mis-match
(ice/WARNING) ICE-STREAM(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - b944d273:f05401e776b1c35d2dd484d3e9dc4a12): relay/proxy only option results in ICE TCP being disabled
(ice/INFO) ICE-STREAM(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - b944d273:f05401e776b1c35d2dd484d3e9dc4a12): Skipping TURN server because of address type mis-match
(ice/INFO) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) starting grace period timer for 5000 ms
(ice/NOTICE) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no streams with non-empty check lists
(ice/NOTICE) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no streams with pre-answer requests
(ice/INFO) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no checks to start, but gathering is not done yet, cancelling grace period timer
(generic/INFO) Write buffer not empty for IP4:0.0.0.0:443/TLS 44 - already armed (@5f17418), not connected
(generic/INFO) Invoking writable_cb on connected (44)
(generic/INFO) Writable_cb IP4:0.0.0.0:443/TLS (0 (5f17418) pending)
(stun/INFO) STUN-CLIENT(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)::TURN): Timed out
(turn/WARNING) TURN(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)): mode 20, nr_turn_client_error_cb
(turn/WARNING) TURN(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)) failed
(turn/INFO) TURN(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)): cancelling
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)): nr_turn_allocated_cb called with state 4
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)): nr_turn_allocated_cb failed
(ice/WARNING) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se)/CAND(relay(IP4:10.10.10.12:50693/UDP|IP4:0.0.0.0:3478/UDP)): failed to initialize, 1 remaining
(stun/INFO) STUN-CLIENT(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)::TURN): Timed out
(turn/WARNING) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): mode 20, nr_turn_client_error_cb
(turn/WARNING) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)) failed
(turn/INFO) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): cancelling
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): nr_turn_allocated_cb called with state 4
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): nr_turn_allocated_cb failed
(ice/WARNING) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se)/CAND(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): failed to initialize, 0 remaining
(ice/INFO) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): All candidates initialized
(ice/WARNING) ICE-STREAM(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - 8e9d1b38:9cc85c54ec750216d352e4120b368bee): relay only option results in no host candidate for IP4:10.10.10.12:0/UDP
(ice/INFO) ICE-STREAM(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - 8e9d1b38:9cc85c54ec750216d352e4120b368bee): Skipping TURN server because of address type mis-match
(ice/WARNING) ICE-STREAM(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - 8e9d1b38:9cc85c54ec750216d352e4120b368bee): relay/proxy only option results in ICE TCP being disabled
(ice/INFO) ICE-STREAM(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se transport-id=transport_0 - 8e9d1b38:9cc85c54ec750216d352e4120b368bee): Skipping TURN server because of address type mis-match
(ice/INFO) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) starting grace period timer for 5000 ms
(ice/NOTICE) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no streams with non-empty check lists
(ice/NOTICE) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no streams with pre-answer requests
(ice/INFO) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): peer (PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se:default) no checks to start, but gathering is not done yet, cancelling grace period timer
(generic/INFO) Write buffer not empty for IP4:0.0.0.0:443/TLS 44 - already armed (@5f1a168), not connected
(generic/INFO) Invoking writable_cb on connected (44)
(generic/INFO) Writable_cb IP4:0.0.0.0:443/TLS (0 (5f1a168) pending)
(stun/INFO) STUN-CLIENT(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)::TURN): Timed out
(turn/WARNING) TURN(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)): mode 20, nr_turn_client_error_cb
(turn/WARNING) TURN(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)) failed
(turn/INFO) TURN(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)): cancelling
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)): nr_turn_allocated_cb called with state 4
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)): nr_turn_allocated_cb failed
(ice/WARNING) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se)/CAND(relay(IP4:10.10.10.12:60670/UDP|IP4:0.0.0.0:3478/UDP)): failed to initialize, 1 remaining
(stun/INFO) STUN-CLIENT(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)::TURN): Timed out
(turn/WARNING) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): mode 20, nr_turn_client_error_cb
(turn/WARNING) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)) failed
(turn/INFO) TURN(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): cancelling
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): nr_turn_allocated_cb called with state 4
(turn/WARNING) ICE-CANDIDATE(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): nr_turn_allocated_cb failed
(ice/WARNING) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se)/CAND(relay(IP4:10.10.10.12:0/TLS|IP4:0.0.0.0:443/TLS)): failed to initialize, 0 remaining
(ice/INFO) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): All candidates initialized
(generic/ERR) NrTcpSocket::OnClose 5f13200 reason=2147500037 name=NS_ERROR_FAILURE
(ice/ERR) ICE(PC:{f02f6224-315e-4d6e-a943-fafbb7dbf0e5} 1692009633080000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): Error 10 on reliable socket(5f13200). Abandoning.
(generic/ERR) NrTcpSocket::OnClose 5f13740 reason=2147500037 name=NS_ERROR_FAILURE
(ice/ERR) ICE(PC:{3845aa07-db31-4d1e-949a-10f962c4a9f1} 1692009657944000 (id=8589934594 url=https://test26.bigbluebutton.org/html5client/join?se): Error 10 on reliable socket(5f13740). Abandoning.
+++++++ END (process id 9624) ++++++++