curl: (28) Failed to connect to port 443

[Kostas Papadovasilakis]

Hi, we decided to upgrade our bigbluebutton 2.3 servers to 2.6 and we tried fresh install with ubuntu 20.04. No Vms, Hard machines. I started with the 1st one.

We are behind ASA Firewall - NAT but it was already configured (we didn't change ip's or any rules). 

I runned the script for installation as it is from the page, changing the url and mail for Lets Encrypt.

wget -qO- https://ubuntu.bigbluebutton.org/bbb-install-2.6.sh | bash -s -- -v focal-260 -s bbb.example.com -e not...@example.com -g -w

We get potential problems 

curl: (28) Failed to connect to my_external_ip port 443: Connection timed out
# Error: Could not connect to the configured hostname/IP address

The page works from outside with greenlight, but cant open a new room.

Things I tried

1. put external ip with domain name in etc/hosts

2. tried all firewall changes for configuration files in instructions. For some reason The installation doesn't put my external ip in conf files automaticallym as i read in instructions

3. run curl command curl --trace-ascii - -k https://my_ip:443/bigbluebutton/api, works only with localhost or local ip. Not with external ip

4. Opened incoming ports for coturn and turn (3478 TCP/UDP , 32769-65535 UDP) in ASA Firewall, dont know if it is needed, didn't try opening it in UFW, 3478 was open. I thought you would add them in your script if were needed.

5. rerun the script

6. disable UFW

7. run bbb-conf --setip my_external

8. formated the server and rerun everything

9. tried different settings in ASA Firewall with no luck. However with original settings my 2nd BBB server with 2.3 is working as we speak.

10. restarted firewall ASA.

I am suspicius about HAProxy you intergrated or Turn Server but i have no experience with it.

Any ideas?

Should i try without embedded Turn server or something? How can i do that?

  

[Kostas Papadovasilakis]

It seems its Nat rule Problem. The other server had dummy nic. 

Now i try to set a hairpin nat and the problem changed.

it gets a response that is denied.

curl: (7) Failed to connect to my site port 443: Connection refused

However i am still working on my ASA Firewall, since it seems the problem is there

.

[Kostas Papadovasilakis]

purged all bbb packets , reinstalled bbb

everything works great, it was just NAT problem, didn't need to do nothing after the install