How to operate this TURN/STUN server behind Nginx

[Jo Yum]

Hello all,

Is it possible to operate this TURN/STUN server on Linux behind Nginx?

If so, can you show a working Nginx config for that setup?

For example, would this Nginx config work?

upstream turn_server {

server 111.222.333.444:5000;

}

server {

listen 80;

server_name example.com;

root /home/public_html/example.com;

location /turn {

client_max_body_size 128k;

client_body_buffer_size 256k;

proxy_connect_timeout 70s;

proxy_send_timeout 65s;

proxy_read_timeout 65s;

proxy_buffer_size 8k;

proxy_buffers 4 64k;

proxy_busy_buffers_size 128k;

proxy_temp_file_write_size 128k;

proxy_ignore_client_abort on;

proxy_pass http://turn_server;

proxy_redirect off;

}

}

server {

listen 443 ssl;

server_name example.com;

root /home/public_html/example.com;

ssl_prefer_server_ciphers on;

ssl_protocols            TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers              aRSA:!eNULL:!EXP:!LOW:-RC4:-3DES:!SEED:!MD5:!kPSK:!kSRP:-kRSA:@STRENGTH:AES128-SHA:DES-CBC3-SHA:RC4-SHA;

ssl_session_cache        shared:TLSSL:16m;

ssl_session_timeout      10m;

ssl_certificate          /etc/nginx/ssl/example.com.crt;

ssl_certificate_key      /etc/nginx/ssl/example.com.key;

location /turn {

client_max_body_size 128k;

client_body_buffer_size 256k;

proxy_connect_timeout 70s;

proxy_send_timeout 65s;

proxy_read_timeout 65s;

proxy_buffer_size 8k;

proxy_buffers 4 64k;

proxy_busy_buffers_size 128k;

proxy_temp_file_write_size 128k;

proxy_ignore_client_abort on;

proxy_pass http://turn_server;

proxy_redirect off;

}

}

In the above Nginx config, the STUN server is running on port 5000, but from the Internet it's only accessible through ports 80 or 443.

Thank you

[Jo Yum]

Hello,

Does anyone know if the TURN server can operate properly on a Linux machine running an Nginx reverse proxy to Apache?

Thank you

[Jo Yum]

To anyone,

TURN can be configured for TCP or UDP transport.

But aside from the TURN transport config (UDP or TCP), if TURN is listening on port 3478, and Nginx is listening on 80 and 443, and Apache on 81, wouldn't TURN get packets from WebRTC directly without Nginx or Apache seeing those packets?

[abdul basit]

Hi, were you able to find a solution? 

[Nitin Dhami]

Hi, can anyone share their version of the config file for config files in Nginx?

[mm28]

Maybe this helps. Have not tried it myself yet.

https://jitsi.github.io/handbook/docs/devops-guide/turn