Is it possible to set up BigBlueButton to listen only on TCP ports

[Magitt Admin]

Hi Admins,

We have set up BBB in our production environment but we are facing a lot of connectivity issues. Our network environment is restricted it has firewall , it has proxy setup, our IT policies do not allow us to do UDP port opening .

I have invested a lot of time in this project and I really don't want this project to get dropped .Please anyone who could help me with any documents in which we could just run BBB on TCP ports It could help me a lot.

Thanks a lot for all your support.

Thanks & Regards,

Priyank Keni

[detlef K]

Hello,
to use BBB behind a firewall, you need your own Turn Server which allows communication beyond a NAT. The line stability is increased, but depends on your own network. If the line is bad, it will not be possible to improve it.

......

The BBB-akademie.de

[Magitt Admin]

Hi Sir,

We have implemented a turn server following the documents. The problem is BBB try to communicate with UDP first then with TCP due to which our users get audio video connection error.

Can you guide me with configuration part where we can prioritize BBB to establish a TCP connect first. This is when we click on microphone symbol when it tries to establish webrtc connection. 

[detlef K]

Look, here

To allow participants to connect to the audio and video stream of the server behind a firewall, you use so-called TURN and STUN servers. You can enter these in the following file:

nano /usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml

...
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.springframework.org/schema/beans
            http://www.springframework.org/schema/beans/spring-beans-2.5.xsd
            ">

 <?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.springframework.org/schema/beans
        http://www.springframework.org/schema/beans/spring-beans-2.5.xsd">

    <bean id="stun0" class="org.bigbluebutton.web.services.turn.StunServer">
        <constructor-arg index="0" value="stun:YOURTURNSERVER.URL"/>        <<<<<<<<< Change this
    </bean>


    <bean id="turn0" class="org.bigbluebutton.web.services.turn.TurnServer">
        <constructor-arg index="0" value="aab3xxxxxxxsecretcode from Turnserver here xxx3baa"/>       <<<<<<<<< Change this
        <constructor-arg index="1" value="turns:YOURTURNSERVER.URL:443?transport=tcp"/>          <<<<<<<<< Change this
        <constructor-arg index="2" value="86400"/>
    </bean>

    <bean id="turn1" class="org.bigbluebutton.web.services.turn.TurnServer">
        <constructor-arg index="0" value="aab3xxxxxxxsecretcode from Turnserver here xxx3baa"/>       <<<<<<<<< Change this
        <constructor-arg index="1" value="turn:YOURTURNSERVER.URL:443?transport=tcp"/>          <<<<<<<<< Change this
        <constructor-arg index="2" value="86400"/>
    </bean>

    <bean id="stunTurnService"
            class="org.bigbluebutton.web.services.turn.StunTurnService">
        <property name="stunServers">
            <set>
                <ref bean="stun0"/>
            </set>
        </property>
        <property name="turnServers">
            <set>
                <ref bean="turn0"/>
                <ref bean="turn1"/>
            </set>
        </property>
    </bean>
</beans>

I hope this helps you

BBB-Akademie.de

[Magitt Admin]

Hi Sir,

I have attached two txt files for your reference . Please can you check with the configuration if its proper or no.

[detlef K]

look here...

<bean id="stun1" class="org.bigbluebutton.web.services.turn.StunServer"> <constructor-arg index="0" value="stun:stun.l.google.com:19302"/> </bean> 

and here

<bean id="turn1" class="org.bigbluebutton.web.services.turn.TurnServer"> <constructor-arg index="0" value="XXX"/> <constructor-arg index="1" value="turns:turn.XXX.in:443?transport=tcp"/> <constructor-arg index="2" value="86400"/> </bean>

They use Google and their own turnserver.... that doesn't work.
Please adjust the first line accordingly.

<bean id="stun1" class="org.bigbluebutton.web.services.turn.StunServer"> <constructor-arg index="0" value="stun: turn.XXX.in"/> </bean>   <<< Thats it

[detlef K]

# ufw status
Status: active

To                         Action      From
--                         ------      ----
OpenSSH                             ALLOW       Anywhere
Nginx Full                             ALLOW       Anywhere
16384:32768/udp               ALLOW       Anywhere
OpenSSH (v6)                      ALLOW       Anywhere (v6)
Nginx Full (v6)                     ALLOW       Anywhere (v6)
16384:32768/udp (v6)       ALLOW       Anywhere (v6)

[detlef K]

This is my Turnserver

turn:~# ufw status

Status: active

To                         Action      From
--                         ------      ----

22                         ALLOW       Anywhere
80                         ALLOW       Anywhere
443                        ALLOW       Anywhere
22 (v6)                    ALLOW       Anywhere (v6)
80 (v6)                    ALLOW       Anywhere (v6)
443 (v6)                   ALLOW       Anywhere (v6)

nano  /etc/turnserver.conf           look or change this   

# The default realm to be used for the users when no explicit origin/realm rela>
# credentials mechanism or with TURN REST API.
realm=turn.XXX.in

and

# Total allocation quota.
total-quota=0

BBB-Akademie.de

[Magitt Admin]

Hi Sir,

Thanks for your suggestions.

I am making all the changes which are suggested by you. Will let you know the results.

Thanks & Regards,

Priyank Keni