search

jitsi / docker-jitsi-meet

Jitsi Meet on Docker
https://hub.docker.com/u/jitsi/
Apache License 2.0
3.09k stars 1.37k forks source link

confused about mixed use in LAN and Internet #806

Open nikinname opened 4 years ago

nikinname commented 4 years ago

Hello, I'm configuring jitsi via docker-compose and I'm confused about the env variable DOCKER_HOST_ADDRESS I explain my case: Docker is in my DMZ and has a private IP of my DMZ ports 80 443 and 4443 on TCP and ports 10000 and 20000-20050 UDP are natted from the public IP to the DMZ IP of docker machine I would like that both internet and LAN users could share the same conference. ehich IP should I set for DOCKER_HOST_ADDRESS the docker one or the public IP?

Thank you

bluelightls commented 4 years ago

I have the same objective to have both internet and LAN users in the same conference. I've posted elsewhere, and @saghul recommended to use your external public ip address for DOCKER_HOST_ADDRESS.

I still have not solved this since I updated couple weeks ago.

nikinname commented 4 years ago

Thank you do you use stable or latest versions?

Nicola

bluelightls commented 4 years ago

I've tried both. currently on stable-5142. I documented my install here (mind you, I think this is a bit different install. Im running jitsi through a container in unraid.) https://pastebin.com/AXWQPuWw <---my install

bluelightls commented 4 years ago

Hey, I've finally had a chance to test with multiple participants outside my network (with DOCKER_HOST_ADDRESS as my public IP). The only way I would be able to connect is to connect to a VPN first, then join the conference.

Its a bit inconvenient for me, because my device limit for VPN usage is full, so everytime I would want to go into a meeting, I'd have to stop it on another device, and restart it after I finish a session.

I have pfsense, which is pretty robust firewall/router.. more settings than I know what to do for sure.I'm sure I can somehow make this work through these settings, I just have no idea where to start (...well I guess I know it has to do with NAT....). I can get by with tweaks and tinkering... but this is way beyond my scope of knowledge.

bo0tzz commented 4 years ago

@bluelightls if you're running pfSense, enabling NAT reflection might solve your issue - have a look at https://docs.netgate.com/pfsense/en/latest/nat/reflection.html

bluelightls commented 4 years ago

@bo0tzz Thanks, I was curious what to look at in pfsense. i currently have 'NAT + Proxy' in system->advanced->Firewall&NAT. ANd I have 'Manual Outbound NAT' in Firewall->Nat->outbound. Are these the correct settings to choose?