Turn server configuration

[fvlasie]

Describe the bug ICE 1007 errors when using a server with different external and internal IPs

To Reproduce Use the Firefox troubleshooting technique for ICE errors

Actual behavior ICE 1007 error when connecting to audio bridge

Additional context BigBlueButton 2.6.12

Adding the external IP to /etc/turnserver.conf under allowed-peer-ip= solved the issue.

I would suggest adding this to turnserver.config during setup.

[ffdixon]

Thanks for sharing this. Before you did this change, for those users that needed a TURN server, did some of them get the 1007 error or all users got the error?

[fvlasie]

As far as I know they all got the error. ( But I only heard from users with the 1007 error. ) That is for users requiring turn.

[fvlasie]

One of the users is reporting the 1007 error again today despite the fix working yesterday....I do not know what is going on. :(

[vahidajorloo]

i had this problem and this is what i did to fix it and it worked for me:

uninstall coturn: apt remove coturn apt purge coturn and then executed bigbluebutton install command again (wget -qO- https://ubuntu.bigbluebutton.org/bbb-install-2.6.sh | ....)

[alex-smirnov-sh]

Hello! I see a similar problem in Firefox in versions 2.6.15, 2.6.16, 2.6.17, 2.6.18, 2.7.8. The microphone, video camera, and screen sharing connect successfully, but after 5-10 seconds it turns off with the error Ice error 1007.

The servers are located in the cloud and have external and internal IP.

We tried from two different computers with different IPs and two smartphones with different IPs.

The advice from the author of the problem to add an external IP to the "allowed-peer-ip=" variable in the /etc/turnserver.conf file does not help. This variable is already in the file after installation.

Google Chrome works fine in all versions.

[alex-smirnov-sh]

i had this problem and this is what i did to fix it and it worked for me:

uninstall coturn: apt remove coturn apt purge coturn and then executed bigbluebutton install command again (wget -qO- https://ubuntu.bigbluebutton.org/bbb-install-2.6.sh | ....)

I tested this method. It works, but until the first server reboot. I still don’t understand what changes after a reboot, that the error appears again.

It is noteworthy that when you restart these services, no error appears. Appears only when the entire server is rebooted: systemctl restart coturn bbb-conf --restart

[alex-smirnov-sh]

I compared the services before and after the reboot and found that the netfilter-persistent service does not turn on after the reboot.

To fix ICE error 1007, you can enable this service and enable the ufw firewall, which will shut down after this:

sudo systemctl restart netfilter-persistent
sudo ufw enable

However, after a while the site stops loading: 504 Gateway timeout.

I still don’t understand why netfilter-persistent is disabled, perhaps this is due to a feature of my cloud provider Yandex Cloud

UPD: Created a separate issue https://github.com/bigbluebutton/bigbluebutton/issues/20389