Why is my Coturn server not providing candidates?

1,068 views
Skip to first unread message

Arian Kulp

unread,
Feb 1, 2016, 3:19:59 PM2/1/16
to TURN Server (Open-Source project)

My environment is: Azure, Linux (Ubuntu) VM, Docker, dreamnetwork/coturn image

The server runs and if I hit the URL via http I get a response:

TURN Server 
use https connection for the admin session

Clearly it's running, but it doesn't seem to return any candidates in my RTC app.  I found a PowerShell test script (attached) on a Microsoft blog:

http://blogs.technet.com/b/nettracer/archive/2013/10/13/testing-stun-turn-server-connectivity-from-external-networks-through-udp-3478-by-using-powershell.aspx

The script gives me the following output:

Successfully resolved turn.BLAH.com to x.x.x.x
Sending TURN server port allocation request at UDP port 3478, it will be checked after 10 seconds to see if a response is received or not ...
STUN Server either is not reachable or doesn't respond

Does anyone have any ideas why this may not be working?  Is there another step I need to follow to configure Coturn?

Thanks!
turn.ps1

Arian Kulp

unread,
Feb 1, 2016, 3:35:42 PM2/1/16
to TURN Server (Open-Source project)
Also, I found a second test script to run on a StackOverflow post (http://stackoverflow.com/a/34033938/148084).  This also confirms it's not functioning properly.

Oleg Moskalenko

unread,
Feb 1, 2016, 5:36:02 PM2/1/16
to Arian Kulp, TURN Server (Open-Source project)
Did you open the relay ports in the virtual machine firewall ?
> --
> You received this message because you are subscribed to the Google Groups
> "TURN Server (Open-Source project)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
> turn-server-project-rfc57...@googlegroups.com.
> To post to this group, send email to
> turn-server-project...@googlegroups.com.
> Visit this group at
> https://groups.google.com/group/turn-server-project-rfc5766-turn-server.
> For more options, visit https://groups.google.com/d/optout.

Arian Kulp

unread,
Feb 1, 2016, 5:43:02 PM2/1/16
to TURN Server (Open-Source project), aria...@gmail.com
I've opened 3478 which I've confirmed from a different host (I put the output in the original post).  I set both UDP and TCP for that port, though I'm not sure how to test the UDP side.  Are there any other ports I need to open?

Oleg Moskalenko

unread,
Feb 2, 2016, 1:16:42 AM2/2/16
to Arian Kulp, TURN Server (Open-Source project)


Sent from my iPhone

On Feb 1, 2016, at 2:43 PM, Arian Kulp <aria...@gmail.com> wrote:

I've opened 3478 which I've confirmed from a different host (I put the output in the original post).  I set both UDP and TCP for that port, though I'm not sure how to test the UDP side.  Are there any other ports I need to open?


You have to open the relay ports. Read rfc 5766 for the relay ports range.


On Monday, 1 February 2016 14:36:02 UTC-8, Oleg Moskalenko wrote:
Did you open the relay ports in the virtual machine firewall ?


On Mon, Feb 1, 2016 at 12:19 PM, Arian Kulp <aria...@gmail.com> wrote:
>
> My environment is: Azure, Linux (Ubuntu) VM, Docker, dreamnetwork/coturn
> image
>
> The server runs and if I hit the URL via http I get a response:
>
> TURN Server
> use https connection for the admin session
>
> Clearly it's running, but it doesn't seem to return any candidates in my RTC
> app.  I found a PowerShell test script (attached) on a Microsoft blog:
>
> http://blogs.technet.com/b/nettracer/archive/2013/10/13/testing-stun-turn-server-connectivity-from-external-networks-through-udp-3478-by-using-powershell.aspx
>
> The script gives me the following output:
>
> Successfully resolved turn.BLAH.com to x.x.x.x
> Sending TURN server port allocation request at UDP port 3478, it will be
> checked after 10 seconds to see if a response is received or not ...
> STUN Server either is not reachable or doesn't respond
>
> Does anyone have any ideas why this may not be working?  Is there another
> step I need to follow to configure Coturn?
>
> Thanks!

Arian Kulp

unread,
Feb 2, 2016, 5:39:36 PM2/2/16
to TURN Server (Open-Source project), aria...@gmail.com
That's almost helpful...  Sorry, but that's a pretty long document to read through to find ports to open.  Can anyone just let me know which other ports I need to open?  It would be very useful documentation as part of CoTurn.

Thanks!
To unsubscribe from this group and stop receiving emails from it, send an email to turn-server-project-rfc5766-turn-server+unsubscribe@googlegroups.com.
To post to this group, send email to turn-server-project-rfc5766-turn-...@googlegroups.com.

Oleg Moskalenko

unread,
Feb 2, 2016, 5:47:47 PM2/2/16
to Arian Kulp, TURN Server (Open-Source project)
On Tue, Feb 2, 2016 at 2:39 PM, Arian Kulp <aria...@gmail.com> wrote:
> That's almost helpful... Sorry, but that's a pretty long document to read
> through to find ports to open. Can anyone just let me know which other
> ports I need to open? It would be very useful documentation as part of
> CoTurn.

You probably missed that in the README:

--min-port Lower bound of the UDP port range for relay
endpoints allocation.
Default value is 49152, according to RFC 5766.

--max-port Upper bound of the UDP port range for relay
endpoints allocation.
Default value is 65535, according to RFC 5766.
>> turn-server-project-rfc57...@googlegroups.com.
>> To post to this group, send email to
>> turn-server-project...@googlegroups.com.
> --
> You received this message because you are subscribed to the Google Groups
> "TURN Server (Open-Source project)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
> turn-server-project-rfc57...@googlegroups.com.
> To post to this group, send email to
> turn-server-project...@googlegroups.com.

Arian Kulp

unread,
Feb 2, 2016, 6:02:46 PM2/2/16
to TURN Server (Open-Source project), aria...@gmail.com
Ahh... much better!  Sorry I missed that.  Thanks for pointing that out!

Arian Kulp

unread,
Feb 4, 2016, 4:58:19 PM2/4/16
to TURN Server (Open-Source project), aria...@gmail.com
So I have those ports for both incoming and outgoing now, but I still don't get anything.  Maybe it's the defaults in the Docker image I'm using.  The PowerShell script that I'm using (referenced in my original message) says it "either is not reachable or doesn't respond."  What other troubleshooting could I do?
Reply all
Reply to author
Forward
0 new messages