Turn Server is not working

Kay

unread,

Jun 26, 2015, 5:59:34 AM6/26/15

to turn-server-project...@googlegroups.com

Hello,

I installed co-turn server on centos 6.6 and changed the turnserver.conf file settings,

listening-port=3478

user=username1:password1

and started the turnserver. After that i checked it using netstat -tlpn to make sure it is working or not.

The netstat displayed it is listening to port 3478 and few others.

But still i'm not able to connect it using my webrtc client app and when i'm trying to open it using browser http://xx.xx.xxx.xxx:3478/?service=turn then also it is not getting connected.

I'm a novice in this. Please can you help me with this.

Thank you.

Tomasz G

unread,

Jun 27, 2015, 8:30:56 AM6/27/15

to turn-server-project...@googlegroups.com

when you visit http://xx.xx.xxx.xxx:3478/ you should see "TURN Server ..." text.

service=turn - is address to TURN API - you must write some application in php or python to return informations about turns servers credentials - see my post in this group.

Kay

unread,

Jun 29, 2015, 2:14:48 AM6/29/15

to turn-server-project...@googlegroups.com

Hello Tomasz,

Thank you for replying back.

I tried opening http://xx.xx.xxx.xxx:3478/ in all the browsers but i'm not getting "TURN Server ..." text in any of it.

Maybe i missed something in installation or configuration.

I'm listing all the steps that i took to install coturn server:

1) yum install -y make gcc cc gcc-c++ wget

yum install -y openssl-devel libevent libevent-devel mysql-devel mysql-server

2) wget http://sourceforge.net/projects/levent/files/libevent/libevent-2.0/libevent-2.0.22-stable.tar.gz/download

tar xvfz libevent-2.0.22-stable.tar.gz
cd libevent-2.0.22-stable && ./configure
make && make install && cd ..

3) wget http://turnserver.open-sys.org/downloads/v4.4.5.2/turnserver-4.4.5.2-CentOS6.6-x86_64.tar.gz

tar -xvzf turnserver-4.4.5.2-CentOS6.6-x86_64.tar.gz
cd turnserver-4.4.5.2
make && make install

4) Then i copied turnserver.conf from examples/etc/turnserver.conf to /usr/local/etc/turnserver.conf

5) Changes in turnserver.conf

listening-port=3478

user=admin:admin999

listening-ip= "Ip address of my server"

6) Started it using

turnserver -v -r xx.xx.xxx.xxx:3478 -a -b turnuserdb.conf -c turnserver.conf -u admin -r xx.xx.xxx.xxx:3478 -p admin999

After that i checked it using netstat -tlpn to make sure it is working or not.

The netstat displayed turnserver is listening to port 3478 and few others. But no turnserver text is displayed in browser and it is also not getting connected with my webrtcapp.

Any help will be greatly appreciated .

Thanks Again.

Oleg Moskalenko

unread,

Jun 29, 2015, 2:57:45 AM6/29/15

to Kay, turn-server-project...@googlegroups.com

you have to use HTTPS protocol if you want to get an admin connection.
This is clearly stated in the documentation:

https://xx.xx.xxx.xxx:3478/

> --
> You received this message because you are subscribed to the Google Groups
> "TURN Server (Open-Source project)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
> turn-server-project-rfc57...@googlegroups.com.
> To post to this group, send email to
> turn-server-project...@googlegroups.com.
> Visit this group at
> http://groups.google.com/group/turn-server-project-rfc5766-turn-server.
> For more options, visit https://groups.google.com/d/optout.

Tomasz G

unread,

Jun 29, 2015, 3:34:18 AM6/29/15

to turn-server-project...@googlegroups.com

If you test it locally simply run, after installation (no changes in conf files):

turnserver

you shuld see some output like that:

0: log file opened: /var/tmp/turn_4492_2015-06-29.log
0: 
RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server
Version Coturn-4.4.5.2 'Ardee West'
0: 
Max number of open files/sockets allowed for this process: 4096
0: 
Due to the open files/sockets limitation,
max supported number of TURN Sessions possible is: 1000 (approximately)
0: 


==== Show him the instruments, Practical Frost: ====


0: TLS supported
0: DTLS supported
0: DTLS 1.2 is not supported
0: TURN/STUN ALPN is not supported
0: Third-party authorization (oAuth) supported
0: GCM (AEAD) supported
0: OpenSSL compile-time version: OpenSSL 1.0.1e 11 Feb 2013
0: 
0: SQLite supported, default database location is /usr/local/var/db/turndb
0: Redis is not supported
0: PostgreSQL supported
0: MySQL is not supported
0: MongoDB is not supported
0: 
0: Default Net Engine version: 2 (UDP thread per network endpoint)


=====================================================


0: Config file found: /usr/local/etc/turnserver.conf
0: Config file found: /usr/local/etc/turnserver.conf
0: Domain name: 
0: Default realm: 
0: Config file found: /usr/local/etc/turn_server_cert.pem
0: Config file found: /usr/local/etc/turn_server_pkey.pem
0: SSL23: Certificate file found: /usr/local/etc/turn_server_cert.pem
0: SSL23: Private key file found: /usr/local/etc/turn_server_pkey.pem
0: TLS1.0: Certificate file found: /usr/local/etc/turn_server_cert.pem
0: TLS1.0: Private key file found: /usr/local/etc/turn_server_pkey.pem
0: TLS1.1: Certificate file found: /usr/local/etc/turn_server_cert.pem
0: TLS1.1: Private key file found: /usr/local/etc/turn_server_pkey.pem
0: TLS1.2: Certificate file found: /usr/local/etc/turn_server_cert.pem
0: TLS1.2: Private key file found: /usr/local/etc/turn_server_pkey.pem
0: TLS cipher suite: DEFAULT
0: DTLS: Certificate file found: /usr/local/etc/turn_server_cert.pem
0: DTLS: Private key file found: /usr/local/etc/turn_server_pkey.pem
0: DTLS cipher suite: DEFAULT
0: NO EXPLICIT LISTENER ADDRESS(ES) ARE CONFIGURED
0: ===========Discovering listener addresses: =========
0: Listener address to use: 127.0.0.1
0: Listener address to use: 100.82.22.125
0: Listener address to use: ::1
0: =====================================================
0: Total: 1 'real' addresses discovered
0: =====================================================
0: NO EXPLICIT RELAY ADDRESS(ES) ARE CONFIGURED
0: ===========Discovering relay addresses: =============
0: Relay address to use: 100.82.22.125
0: Relay address to use: ::1
0: =====================================================
0: Total: 2 relay addresses discovered
0: =====================================================
Cannot create pid file: /var/run/turnserver.pid: Permission denied
0: Cannot create pid file: /var/run/turnserver.pid
0: pid file created: /var/tmp/turnserver.pid
0: IO method (main listener thread): epoll (with changelist)
0: Wait for relay ports initialization...
0:   relay 100.82.22.125 initialization...
0:   relay 100.82.22.125 initialization done
0:   relay ::1 initialization...
0:   relay ::1 initialization done
0: Relay ports initialization done
0: IO method (general relay thread): epoll (with changelist)
0: turn server id=0 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: IO method (general relay thread): epoll (with changelist)
0: turn server id=1 created
0: turn server id=128 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=129 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=130 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=131 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=132 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=133 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=134 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=135 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=136 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=137 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=138 created
0: IO method (udp listener/relay thread): epoll (with changelist)
0: turn server id=139 created
0: Total UDP servers: 12
0: Total General servers: 2
0: IO method (auth thread): epoll (with changelist)
0: IO method (auth thread): epoll (with changelist)
1: IO method (admin thread): epoll (with changelist)
1: SQLite DB connection success: /usr/local/var/db/turndb

and open default server page: http://127.0.0.1:3478/

If will still don't work show me output and try generate turn_server_cert.pem and turn_server_pkey.pem file.

Kay

unread,

Jun 29, 2015, 5:25:52 AM6/29/15

to turn-server-project...@googlegroups.com

On giving

turnserver

I'm getting this output

0: log file opened: /var/tmp/turn_25300_2015-06-29.log


0:
RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server
Version Coturn-4.4.5.2 'Ardee West'
0:
Max number of open files/sockets allowed for this process: 4096
0:
Due to the open files/sockets limitation,


max supported number of TURN Sessions possible is: 2000 (approximately)


0:


==== Show him the instruments, Practical Frost: ====


0: TLS supported
0: DTLS supported
0: DTLS 1.2 is not supported
0: TURN/STUN ALPN is not supported
0: Third-party authorization (oAuth) supported
0: GCM (AEAD) supported

0: OpenSSL compile-time version: OpenSSL 1.0.1e-fips 11 Feb 2013
0:
0: SQLite is not supported

0: Redis is not supported

0: PostgreSQL is not supported
0: MySQL supported

0: MongoDB is not supported
0:

0: Default Net Engine version: 3 (UDP thread per CPU core)




=====================================================


0: Config file found: /usr/local/etc/turnserver.conf

0: Listener address to use: xx.xx.xxx.xxx
0: log file opened: /var/tmp/turn_2015-06-29.log


0: Config file found: /usr/local/etc/turnserver.conf
0: Domain name:
0: Default realm:
0:


CONFIGURATION ALERT: you specified long-term user accounts, (-u option)
        but you did not specify the long-term credentials option
        (-a or --lt-cred-mech option).
        I am turning --lt-cred-mech ON for you, but double-check your configuration.
0:
CONFIGURATION ALERT: you did specify the long-term credentials usage
 but you did not specify the default realm option (-r option).
                Check your configuration.
0: WARNING: cannot find certificate file: turn_server_cert.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly
0: WARNING: cannot find private key file: turn_server_pkey.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because private key file is not set properly
0: Relay address to use: xx.xx.xx.xxx

Cannot create pid file: /var/run/turnserver.pid: Permission denied
0: Cannot create pid file: /var/run/turnserver.pid
0: pid file created: /var/tmp/turnserver.pid
0: IO method (main listener thread): epoll (with changelist)

0: WARNING: I cannot support STUN CHANGE_REQUEST functionality because only one IP address is provided

0: Wait for relay ports initialization...

0:   relay xx.xx.xxx.xxx initialization...
0:   relay xx.xx.xxx.xxx initialization done


0: Relay ports initialization done
0: IO method (general relay thread): epoll (with changelist)
0: turn server id=0 created

0: sctp_create_server_listener:262:start
0: IPv4. SCTP listener opened on : xx.xx.xxx.xxx:3478
0: sctp_create_server_listener:302:end
0: create_server_listener:195:start
0: IPv4. TCP listener opened on : xx.xx.xxx.xxx:3478
0: create_server_listener:253:end


0: IO method (general relay thread): epoll (with changelist)
0: turn server id=1 created

0: sctp_create_server_listener:262:start
0: create_server_listener:195:start
0: IPv4. TCP listener opened on : xx.xx.xxx.xxx:3478
0: create_server_listener:253:end
0: create_server_socket:745:start
0: IPv4. UDP listener opened on: xx.xx.xxx.xxx:3478
0: create_server_socket:807:end
0: create_server_socket:745:start
0: create_server_socket:807:end


0: Total General servers: 2

0: IO method (admin thread): epoll (with changelist)
0: IPv4. CLI listener opened on : 127.0.0.1:5766


0: IO method (auth thread): epoll (with changelist)
0: IO method (auth thread): epoll (with changelist)

0: run_listener_server: cycle=1

...

Tomasz G

unread,

Jun 30, 2015, 2:55:01 AM6/30/15

to turn-server-project...@googlegroups.com

Try with onother database, becouse i don't see information about db connection, like in my situation:

SQLite DB connection success: /usr/local/var/db/turndb

Uninstall coturn, intall packages to support some other db. Now you support MySQL.

0: SQLite is not supported
0: Redis is not supported
0: PostgreSQL is not supported
0: MySQL supported
0: MongoDB is not supported

...

Kay

unread,

Jun 30, 2015, 7:41:15 AM6/30/15

to turn-server-project...@googlegroups.com

Hi Tomasz,

I somehow managed to start the coturn server by running "sudo /usr/local/bin/turnserver -p80" and now i can see the turnserver text

TURN Server
use https connection for the admin session

But now the problem is when i'm trying to connect it using my webrtc client, it is not working.

var iceServers = [];

iceServers.push({

url: 'stun:myIP:80'

});

iceServers.push({

url: 'turn:myIP:80',

credential: 'admin999',

username: 'admin'

});

connection.iceServers = iceServers;

Please can you tell me what i'm doing wrong.

Thank you.

Fernando Escardó

unread,

Jun 30, 2015, 10:56:23 AM6/30/15

to turn-server-project...@googlegroups.com

webrtc can fail in several places and you may need to debug from both, turn server and your webrtc app.

Are you using for '80' for any particular reason? Like trying to go through an HTTP proxy? If that is the case, you should add TCP support as some firewall/proxies that only let you out in port 80 or 443, may block or discard all UDP traffic. Add iceServers in "duplicate" with ?transport=udp and ?transport=tcp after port.

Kay

unread,

Jul 1, 2015, 1:23:37 AM7/1/15

to turn-server-project...@googlegroups.com

Hi Fernando,

Please can you tell me how can i debug turnserver side?

I checked turnserver log but there is nothing useful in the log,

[csvuser@k3990s001 log]$ vi turn_12256_2015-06-30.log

0: log file opened: /var/log/turn_12256_2015-06-30.log

0:

RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server

Version Coturn-4.4.5.2 'Ardee West'

0:

Max number of open files/sockets allowed for this process: 4096

0:

Due to the open files/sockets limitation,

max supported number of TURN Sessions possible is: 2000 (approximately)

0:

==== Show him the instruments, Practical Frost: ====

0: TLS supported

0: DTLS supported

0: DTLS 1.2 is not supported

0: TURN/STUN ALPN is not supported

0: Third-party authorization (oAuth) supported

0: GCM (AEAD) supported

0: OpenSSL compile-time version: OpenSSL 1.0.1e-fips 11 Feb 2013

0:

0: SQLite is not supported

0: Redis is not supported

"turn_12256_2015-06-30.log" [readonly] 33L, 975C

Fernando Escardó

unread,

Jul 1, 2015, 2:22:01 PM7/1/15

to turn-server-project...@googlegroups.com

Hi Kay,

If turnserver log shows nothing besides the init output, then is probably that your app is not connecting at all to the turn server.

Check your app to see if it connects. Chrome and firefox provides some degree of debug for webrtc to see what the app is exchanging (or trying to), be it signaling (no concern to turn server), ice negotiation connection between peers, media, etc:

chrome://webrtc-internals

https://wiki.mozilla.org/Media/WebRTC/Logging

Tomasz G

unread,

Jul 2, 2015, 1:44:11 AM7/2/15

to turn-server-project...@googlegroups.com

use switch -v or -V to debug turnserver.

As Fernando said you can also debug your browser connection with turnserver using special browser address.

Heman Parbhakar

unread,

Jan 22, 2018, 12:11:02 AM1/22/18

to TURN Server (Open-Source project)

Getting this Error

turnadmin -a -u ninefingers -r north.gov -p youhavetoberealistic
turnadmin -A -u bayaz -p magi

turnserver -L -a -f -r north.gov
0: log file opened: /var/log/turn_10053_2018-01-19.log

0:
RFC 3489/5389/5766/5780/6062/6156 STUN/TURN Server

Version Coturn-4.5.0.7 'dan Eider'

0:
Max number of open files/sockets allowed for this process: 4096
0:
Due to the open files/sockets limitation,
max supported number of TURN Sessions possible is: 2000 (approximately)
0:

==== Show him the instruments, Practical Frost: ====

0: TLS supported
0: DTLS supported
0: DTLS 1.2 is not supported
0: TURN/STUN ALPN is not supported
0: Third-party authorization (oAuth) supported
0: GCM (AEAD) supported

0: OpenSSL compile-time version: OpenSSL 1.0.1e-fips 11 Feb 2013 (0x1000105f)

0:
0: SQLite is not supported
0: Redis is not supported
0: PostgreSQL is not supported

0: MySQL is not supported

0: MongoDB is not supported
0:
0: Default Net Engine version: 3 (UDP thread per CPU core)

=====================================================

0: WARNING: Cannot find config file: turnserver.conf. Default and command-line settings will be used.

0: Listener address to use:

0: WARNING: Cannot find config file: turnserver.conf. Default and command-line settings will be used.
0: Domain name:
0: Default realm: north.gov

0: WARNING: cannot find certificate file: turn_server_cert.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly
0: WARNING: cannot find private key file: turn_server_pkey.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because private key file is not set properly
0: Relay address to use:

0: pid file created: /var/run/turnserver.pid

0: IO method (main listener thread): epoll (with changelist)
0: WARNING: I cannot support STUN CHANGE_REQUEST functionality because only one IP address is provided
0: Wait for relay ports initialization...

0: relay initialization...
0: relay initialization done

0: Relay ports initialization done
0: IO method (general relay thread): epoll (with changelist)
0: turn server id=0 created

socket: Protocol not supported