#coturn — Public Fediverse posts

Well today I found out that coturn does NOT use /etc/coturn/coturn.conf but actually /etc/turnserver.conf 😅

I poured hours and hours in getting stuff to work and it turns out that I was editing the wrong file for this service the whole time... (the nextcloud interface only checks if the server is running and not whether the credentials you give it actually work)

In other news nextcloud talk is finally working XD
(though I get the same errors from the signaling backend as before)

#sysadmin #coturn #turnServer #nextcloud #nextcloutTalk

Is there a way to configure #Coturn like this?

#WebRTC #Linux #HomeAssistant

RE: https://infosec.exchange/@enablesecurity/116130697375709804

Published the "how to fix it" companion to our TURN security threats post. Best practices guide + coturn config templates at three security levels.

Also discussing TURN security on WebRTC Live today: https://webrtc.ventures/webrtc-live/

https://www.enablesecurity.com/blog/turn-security-best-practices/
https://www.enablesecurity.com/blog/coturn-security-configuration-guide/

#infosec #webrtc #security #TURN #coturn #voip

Two weeks ago we published our analysis of TURN security threats. Today: how to fix them.

New guides covering implementation-agnostic best practices (IP range blocking, protocol hardening, rate limiting, deployment patterns) and coturn-specific configuration with copy-paste templates at three security levels.

Best practices: https://www.enablesecurity.com/blog/turn-security-best-practices/
coturn guide: https://www.enablesecurity.com/blog/coturn-security-configuration-guide/
Config templates on GitHub: https://github.com/EnableSecurity/coturn-secure-config

coturn 4.9.0 dropped yesterday with fixes for CVE-2026-27624 (IPv4-mapped IPv6 bypass of deny rules) and an inverted web admin password check that had been broken since ~2019. The guides cover workarounds for older versions.

#infosec #webrtc #security #TURN #coturn #penetrationtesting #voip #serversecurity

https://simplex.chat

重新配置自托管了simplex，踩了一点坑，但是终究是配置好了（

部署SMP服务器：https://simplex.chat/docs/server.html
部署XFTP服务器：https://simplex.chat/docs/xftp-server.html
部署WebRTC服务器：https://simplex.chat/docs/webrtc.html
测试WebRTC ICE服务器：https://icetest.info

客户端下载页面：https://simplex.chat/downloads/

#simplex #coturn #selfhosting

Few days ago I successfully configured #coturn to have a TURN/STUN server for in-family calls. But … looks like bots or some bad guys constantly trying to connect to my TURN server to use it for something :-(

Of course, it is impossible, since anonymous access or any other access without right key is impossible. But, there are no IPs of attackers in the log file, even wth "Verbose" directive — only my local and public IPs and my server's hostname :drgn_cry:

Maybe, there is some way to force coturn to display IP addresses of connected clients, so I could ban them all with fail2ban?

#TURN #STUN #selfhosting #networking #AskFedi

Just tested my Prosody server against the compliance checker at https://compliance.conversations.im My Prosody server got itself a 100% compliance rating, with in-band registration being disabled as it's more of a personal server than a public one, even with that public conference. If you want to see the results for yourself, check out https://compliance.conversations.im/server/simplygregario.us/ I will also point out that both Prosody and CoTurn (which provides media relay services for Prosody) are configured to be dual-stack, meaning everything works both on IPv4 and IPv6. Even got all 8 SRV records configured in DNS so CoTurn's STUN and TURN implementations will hopefully work flawlessly, both via TCP & UDP (and the TLS-based option is included). #Prosody #CoTurn #XMPP #StandardsCompliance #OwnYourData #SelfHosting

So, der prosody #xmpp server läuft mit #coturn für Voice und Video, allen Features passen und wir haben 100% Compliance. Yay.

Mal sehen, was es jetzt wieder für einen Kampf wird, vom Test- auf den Prodserver umzuziehen.

Das letzte Zahnrad für die digitale Unabhängigkeit … #selfhosting

Got #prosody running and also established #coturn for stun/turn on the test server. It looks pretty good and is very lightweight, and #conversations looks like a decent client. happy so far...

But compared to #matrix, the huge amount of features and XEPs is a different story.

@mptcp

Question de noob:

Le multipath TCP ca a un interet pour les transitions entre connexions 5g/wifi les apps voip? Genre une app android #conversations qui communique en vers un service relai #coturn ?

Je crois que la voip utilise UDP en general.

The #Ansible role for #BigBlueButton is now able to install and configure BBB 3.0.x with embedded #coturn, even on cloud VMs behind a NAT router or firewall.

https://github.com/ebbba-org/ansible-role-bigbluebutton/tree/bbb/3.0

i have been meaning to open source this for awhile and why not today.

https://codeberg.org/CobyPear/up-down

i wrote a little bit about the coturn portion of things here but i never got back to this so i figured it is time to share it.

i used it to successfully collaborate with a friend across the country and we sent each other .wav files back and forth and pasted them together into an album.

we did test the live jam room and it worked (even via mobile), however i was never able to do a live jam session over it due to schedule constraints but lmk if you make that happen.

if you have questions ask them here or open an issue. no promises :)

tbh not sure it would still work today out of the box, but it should! it uses old versions of things of course.

#oss #opensource #coturn #scrappyfiddles #sveltekit

WebRTC debugging.

I spent hours debugging and now need to share the solution with the world.

Tried to establish a #WebRTC-based #p2p connection (using #yjs and y-webrtc) in a LAN behind NAT, but ICE failed. Neither STUN nor TURN seemed to help, nor did a local #Coturn or local signaling server.

The solution was to force TURN through TCP, i.e. using something like this as TURN id:

turn:ADDR:PORT?transport=tcp

Kudos for the final hint and other debugging pointers:

https://github.com/feross/simple-peer/issues/202

Can any anyone suggest some tools for diagnosing poorly functioning Matrix audio/video calls?

Right now I don't even know whether I should be filing bugs on Matrix or Element or Yunohost or Coturn or Synapse, and I'm really hoping to give some more useful info than "Calls often don't connect and even when they do they're often missing either video or audio." 🤔

Thanks!

#Matrix #Synapse #Yunohost #Coturn #Voip #Troubleshooting

@antsu

Not at all... *THANK YOU* for your unsolicited advice! Why yes, my setup *does* use coturn, and I happen to know it does *not* resolve #IPV6, however I figured that wasn't important if the domains and server were all configured using IPV4. My knowledge here is very limited, so... is that likely an issue?

I'm *very* heartened there may be a known way out of this mess! Now to look up how complicated the fixes are for my @yunohost setup...

#Matrix #Coturn #Eturnal #Yunohost #Selfhosting

Irgendjemand eine Idee, wie man realisieren kann, dass User im lokalen Netzwerk über coturn mit Usern außerhalb des lokalen Netzwerks miteinander callen können? Wenn beide im lokalen Netz sind, gehts. Wenn beide außerhalb sind auch. Nur die Kombination geht nicht. Habe keine Idee, wie ich die Route bauen kann oder eine Firewallregel hinzufügen muss, dass das geht. #coturn

I want to make audio/video with my #XMPP #Prosody server. I found this piece of documentation about #Coturn : https://prosody.im/doc/coturn

But I also read : https://prosody.im/doc/turn which says "It is not recommended to host a TURN service behind a NAT, on a LAN or any other private network.".

However I'm a bit lost. From what I understand I should rent a VPS to host my turn/stun server. Will the cost depend on how much it is used ? Does someone know how it works ? Never did that before.

Thanks !

Published a new thing.

https://www.cobysher.dev/blog/i-deployed-a-%60coturn%60-server-to-aws

#blog #aws #webRTC #coturn #terraform #digitalGarden

So, habe jetzt #bigbluebutton 2.7.2 neben anderen System hintern #nginx (und #haproxy) auf Basis von #lxc mit #coturn am laufen. :awesome:

@MickInTx

I used @yunohost to install #Synapse and #ElementWeb for #Matrix, which by default install #Coturn, but it's been pretty shaky for video calls.

Issues are mainly with one person calling from #Element on a slightly older #iPhone. About 2/3 of the time, the call doesn't ring on one side, or connects without sound, or doesn't connect at all.

Any idea what community would make sense to troubleshoot this with? #Yunohost? Synapse? #Element? Coturn? Hard to know where to even start... 🤔

Run your own #WebRTC Turn Server using #Free and #OpenSource, #SelfHosted software. #Coturn can give your #Matrix #xmpp #nextcloudtalk app a rock solid real-time #audio #Video connection. Runs on #Linux, of course! https://youtu.be/eZ9Jrxy6NVM

Voilà un bon moment que je songeais à me refaire une petite collection de disques vinyle 💿, en utilisant une platine portative sans fil, type #SoundBurger ou #SonyFlamingo.
En cherchant si ce type de lecteur existait, j'étais tombé sur un projet #KickStarter très intéressant : le #Coturn CT-01 (livré début 2023)
300€ pour un projet largement financé, avec les risques toujours qu'un projet n'aboutisse pas, ou dans 10 ans, j'ai préféré attendre... #Turnable #Vinyl
https://www.kickstarter.com/projects/coturn/coturn-portable-record-player

@Telefucks
Das ist ja ein cooles Teil 👍

#coturn #doctorwho #vinylrecords #nowplaying

Habe mal wieder meinen kleinen Coturn angeworfen bevor die Saison beginnt.
#nowplaying #vinylrecords #doctorwho #coturn #

Moin liebe #Serveradmins ich bräuchte für einen #UptimeKuma + #CoTurn Server eine neue VPS, hatte für das letzte Jahr ne VPS von #IONOS mit 2vCore + 4 GB für 1€ 12 Monate, habt ihr Empfehlungen für neuen Anbieter, würde auch auf 2vCore´s mit 2GB Ram runtergehen aber halt ungerne 10€ bezahlen wie jetzt für die IONOS Maschine.

Nehme gerne Empfehlungen entgegen, wenns geht möglichst lange Vertragslaufzeit.

#coturn ist ein huso 🙄