[Coturn] TURN and STUN server

ericg · February 1, 2021, 6:35pm

Coturn server for YunoHost

Overview

TURN and STUN server for VoIP
STUN (Session Traversal Utilities for NAT) and TURN (Traversal Using Relays around NAT) are protocols that can be used to provide NAT traversal for VoIP and WebRTC. This package provides a VoIP media traffic NAT traversal server and gateway.

Shipped version: 4.5.1.1

Documentation

Official documentation: https://github.com/coturn/coturn/wiki

Links

App repository: https://github.com/YunoHost-Apps/coturn_ynh
Upstream app repository: https://github.com/coturn/coturn

Mamie · February 3, 2021, 4:34pm

If I understand correctly, this is a tool to be used by other services ?

There is already a Coturn srvice installed when Synapse is installed, is there a way to have this app as a dependency to other apps using a Coturn service ? (Instead of having al of them use their own installation)

Tho · February 3, 2021, 5:23pm

Yes it is.

I think it will be the case for all the new apps. I use this package already for Nextcloud, and I think the future Dendrite app will use it as well (Issues · YunoHost-Apps/dendrite_ynh · GitHub) for example.

metyun · March 2, 2021, 11:23pm

Hello,

Is the coturn server configured by default for Nextcloud Talk? Or is it necessary to modify /etc/turnserver.conf?

Tho · March 3, 2021, 7:58am

Yes it is. After installing coturn_ynh, you receive a mail with the secret password contained in the turnserver.conf.

tomdereub · March 3, 2021, 8:47am

Hi, I have coturn already installed manually for nextcloud, but I would like to swith to your app to have a better and more stable configuration. Should I remove coturn before installing your app ?

ericg · March 3, 2021, 9:04am

Naively I will say that if you Coturn install works in you server I will stick to it… The coturn_ynh package is quite new and haven’t been tested thoroughly.

tomdereub · March 3, 2021, 9:51am

Actually I’m not sure if it works. For now I’m not using talk because it often doesn’t manage to connect, or screen sharing get stucked, etc… But I don’t know what’s wrong.
I was expecting a good turn config, and soon the signaling server I hope, to make more tests. So I’ll test your package !

tomdereub · March 3, 2021, 1:59pm

@ericg : could you please precise the configuration we must enter in talk ? If coturn is installed on turn.domain.tld, tell me if this is correct :
Serveurs STUN :
turn.domain.tld:443

Serveurs turn :
turn.domain.tld:[wich port ?]
secret
udp et tcp

And I didn’t receive the email, I found the secret in the installation log and in /etc/turnserver.conf.

arkadi · March 3, 2021, 11:10pm

oh yes! this is an important package. I wish XMPP had video chat working out of the ‘box’. maybe this can help.

Limezy · March 9, 2021, 5:31pm

Hi, I used with success :

Serveur STUN :
turn.domain.tld:443

Serveur TURN :
turn.domain.tld:5349
secret found in /etc/turnserver.conf
udp et tcp

Same, I didn’t receive any email.
Thanks @ericg for this nice package !

ericg · March 9, 2021, 6:38pm

@tomdereub @Limezy The mail is sent to the YunoHost admin email : root@domain.tld. If you use Roundcube or Rainloop mail app, it should work out of the box.

AerisOne · March 9, 2021, 6:42pm

For me it is always sent to root@domain.tld (which default to the admin)

ericg · March 9, 2021, 6:51pm

Yes you are right, my mistake, it is sent to root@domain.tld

tomdereub · March 10, 2021, 10:29pm

Actually I’ve also received the mail a bit later, it’s ok.
I’ve entered the parameters like @Limezy, but the test in nextcloud parameters returns “Erreur : le serveur turn n’a pas retourné de candidats ICE fonctionnels”.
On trickle-ice page, I get this result, I don’t know what it means :

Edit : ajourd’hui le test automatique sur nextcloud a marché, donc ça devrait être bon…

HoldMyGin · June 7, 2021, 1:58pm

Hi all. Is there any development on this or a roadmap? There is a PR https://github.com/YunoHost-Apps/coturn_ynh/pull/7 that I think is quite important to be implemented for the XMPP service to run perfectly.
I believe that XMPP is preferable comparing to Matrix-Synapse since it is using less resources. By being able to have voice and video in Metronome this makes a perfect alternative to Matrix.

arkadi · June 8, 2021, 2:30am

Don’t think much is happening.

In this related github issue, hasn’t been any progress since Sept. 2020.

github.com/YunoHost/issues

make XMPP audio/video works with at least conversations

opened 08:20PM - 12 May 20 UTC

larchange

:cake: enhancement :speech_balloon: XMPP Priority: high

I've enable audio video on my yunohost instance with the following changes. I …believe these configuration are enough to make A/V work even on 3G/different wifi etc. # Configure /etc/metronome/metronome.cfg.lua ## enable module ``` "extdisco"; -- XEP 215 "jingle_nodes"; ``` ## Add config: ``` external_services = { ["domain.tld"] = { [1] = { port = "3478", transport = "udp", type = "stun" }, [2] = { port = "3478", transport = "tcp", type = "stun" }, [3] = { port = "5349", transport = "tcp", type = "stuns" }, [4] = { port = "3478", transport = "tcp", type = "turn", turn_secret = "Some passphrase", turn_ttl = 300 }, [5] = { port = "3478", transport = "udp", type = "turn", turn_secret = "Some passphrase", turn_ttl = 7200 }, [6] = { port = "5349", transport = "tcp", type = "turns", turn_secret = "Some passphrase", turn_ttl = 7200 } } }; jingle_nodes_turn_credentials = true; jingle_nodes_turn_secret = "Some passphrase"; jingle_nodes_turn_credentials_ttl = 86400; jingle_nodes_restricted = false; ``` # Install coturn And create config file /etc/turnserver.conf ``` listening-port=3478 tls-listening-port=5349 listening-ip=0.0.0.0 listening-ip=<ipv6> min-port=49152 max-port=65535 verbose fingerprint use-auth-secret static-auth-secret="Some passphrase" realm=domain.tld max-allocate-lifetime=7200 cert=/etc/yunohost/certs/domain.tld/crt.pem pkey=/etc/yunohost/certs/domain.tld/key.pem syslog prod no-loopback-peers no-cli cli-ip=127.0.0.1 cli-port=5766 cli-password=clipassword ``` # Open corresponding ports ``` yunohost firewall allow UDP -4 49152:65535 yunohost firewall allow Both 3478 yunohost firewall allow Both 5349 yunohost firewall allow Both 3479 yunohost firewall allow Both 5350 ``` I'm open to make some changes, but I'm completely new on the project and will welcome some help.

charly · October 26, 2021, 11:39am

For those who would like to make it work with matrix-synapse behind a VPN / NAT : Tutorial : How to make matrix-synapse's coturn (audio & video calls) work behind a VPN

anon78416416 · November 13, 2021, 2:06am

To install Coturn, can I use mydomain.ynh.fr (where my main YunoHost installation and apps “live”), or do I need something like turn.mydomain.ynh.fr?

HoldMyGin · November 13, 2021, 3:13pm

As per the documentation:

You need to install TURN server in a root or subdomain like turn.domain.lts