nextcloud / spreed

🗨️ Nextcloud Talk – chat, video & audio calls for Nextcloud
https://nextcloud.com/talk
GNU Affero General Public License v3.0
1.61k stars 428 forks source link

Setup with TCP Only Still Tries to Use UDP #1288

Closed zicklag closed 5 years ago

zicklag commented 5 years ago

Steps to reproduce

  1. Configure a Coturn TURN server with the --no-udp-relay option
  2. Configure Nextcloud Talk to point to this TURN server and set the mode to TCP Only.
  3. Try to connect to a meeting in Nextcloud Talk behind a firewall that blocks all but the TURN server TCP port and behind an HTTP proxy.

Expected behaviour

I should be able to join a meeting behind a strict firewall that only allows allows the TURN server TCP port out. All meeting traffic should go over that one allowed port.

Actual behaviour

Browser

Microphone available: yes

Camera available: yes

Operating system: Ubuntu

Browser name: Firefox

Browser version: 63.0

Browser log

``` ICE restart. webrtc.js:568:11 trace Object { time: Date 2018-11-09T19:31:23.413Z, type: "createOffer", value: {…} } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.431Z, type: "createOfferOnSuccess", value: {…} } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.432Z, type: "setLocalDescription", value: {…} } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.435Z, type: "onsignalingstatechange", value: "have-local-offer" } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.437Z, type: "setLocalDescriptionOnSuccess", value: "" } webrtc.js:589:6 OFFER Object { to: "IGxh1YHAfa/isY8VuBXLm4NmQkgipnYE66CN5fVvlS6PRbo4vyPGaFgzZBomTl3fEpmlLyZjaBhWpRHNiyzh8Rfbm+iEE5KtKlKaAhAwSjkvnXeRCSlQbiMYi4to7rGH7XHk1KfqOxSCC+206GBMHD0aDiVxaHiPhvJ+nLlT0kLZ948i8rPDPAmLraIdycPyTcsJJfq3vxFeAgs4QSH1wWRV82zTriuPSdQzqIH/w5oBKddQe1K3JLgzkui0+FF", sid: "1541791873933", broadcaster: undefined, roomType: "video", type: "offer", payload: {…}, prefix: "moz" } signaling.js:520:4 trace Object { time: Date 2018-11-09T19:31:23.448Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.451Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.452Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.455Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.457Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.458Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.460Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.461Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.462Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.464Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.467Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.470Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.472Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.473Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.474Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.475Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.476Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.478Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.480Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.482Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.484Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.486Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.488Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.489Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.491Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.493Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.494Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.496Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.500Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:23.501Z, type: "onicecandidate", value: RTCIceCandidate } webrtc.js:589:6 trace Object { time: Date 2018-11-09T19:31:36.908Z, type: "onicecandidate", value: "" } webrtc.js:589:6 Source map error: request failed with status 404 Resource URL: https://mywebsite.com/core/vendor/core.js?v=a0e96934-0 Source Map URL: purify.min.js.map[Learn More] trace Object { time: Date 2018-11-09T19:32:06.213Z, type: "stopXXX", value: "" } webrtc.js:589:6 console.trace() simplewebrtc.js:14331:3 [76]

Spreed app

Spreed app version: 3.2.6

Custom TURN server configured: yes

Custom STUN server configured: no

Server configuration

My server is running the nextcloud:13.0.6-apache official Docker image.

Operating system: Linux 4.4.0-1070-aws #80-Ubuntu SMP Thu Oct 4 13:56:07 UTC 2018 x86_64

Web server: Apache/2.4.25 (Debian) (apache2handler)

Database: pgsql PostgreSQL 10.4 on x86_64-pc-linux-musl, compiled by gcc (Alpine 6.4.0) 6.4.0, 64-bit

PHP version: 7.2.10 Modules loaded: Core, date, libxml, openssl, pcre, sqlite3, zlib, ctype, curl, dom, fileinfo, filter, ftp, hash, iconv, json, mbstring, SPL, PDO, session, posix, Reflection, standard, SimpleXML, pdo_sqlite, Phar, tokenizer, xml, xmlreader, xmlwriter, mysqlnd, apache2handler, apcu, exif, gd, intl, ldap, memcached, pcntl, pdo_mysql, pdo_pgsql, redis, sodium, zip, Zend OPcache

Nextcloud Version: 13.0.6 - 13.0.6.1

List of activated apps:

``` Enabled: - activity: 2.6.1 - admin_audit: 1.3.0 - bookmarks_fulltextsearch: 1.0.0 - bruteforcesettings: 1.1.0 - comments: 1.3.0 - dav: 1.4.7 - drawio: 0.9.1 - federatedfilesharing: 1.3.1 - federation: 1.3.0 - files: 1.8.0 - files_fulltextsearch: 1.0.4 - files_pdfviewer: 1.2.1 - files_sharing: 1.5.0 - files_texteditor: 2.5.1 - files_trashbin: 1.3.0 - files_versions: 1.6.0 - files_videoplayer: 1.2.0 - firstrunwizard: 2.2.1 - fulltextsearch: 1.0.3 - gallery: 18.0.0 - issuetemplate: 0.4.0 - logreader: 2.0.0 - lookup_server_connector: 1.1.0 - music: 0.9.2 - nextcloud_announcements: 1.2.0 - notifications: 2.1.2 - oauth2: 1.1.1 - password_policy: 1.3.0 - provisioning_api: 1.3.0 - serverinfo: 1.3.0 - sharebymail: 1.3.0 - spreed: 3.2.6 - survey_client: 1.1.0 - systemtags: 1.3.0 - theming: 1.4.5 - twofactor_backupcodes: 1.2.3 - updatenotification: 1.3.0 - user_ldap: 1.3.1 - workflowengine: 1.3.0 Disabled: - audioplayer - encryption - files_external - user_external ```

Nextcloud configuration:

``` { "htaccess.RewriteBase": "\/", "memcache.local": "\\OC\\Memcache\\APCu", "apps_paths": [ { "path": "\/var\/www\/html\/apps", "url": "\/apps", "writable": false }, { "path": "\/var\/www\/html\/custom_apps", "url": "\/custom_apps", "writable": true } ], "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "cloud.katharostech.com" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "https:\/\/cloud.katharostech.com", "dbtype": "pgsql", "version": "13.0.6.1", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true, "ldapIgnoreNamingRules": false, "ldapProviderFactory": "\\OCA\\User_LDAP\\LDAPProviderFactory", "mail_smtpmode": "smtp", "mail_smtpauthtype": "LOGIN", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_domain": "***REMOVED SENSITIVE VALUE***", "mail_smtpsecure": "ssl", "mail_smtpauth": 1, "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpport": "\t465", "mail_smtpname": "***REMOVED SENSITIVE VALUE***", "mail_smtppassword": "***REMOVED SENSITIVE VALUE***" }```
nickvergessen commented 5 years ago

@fancycode any idea?

fancycode commented 5 years ago

Please provide additional information from about:webrtc (Firefox) or chrome://webrtc-internals/ (Chrome). This should contain the candidates payload that has been transmitted and will help with further looking into the issue.

zicklag commented 5 years ago

Thank you for looking into this. I just finished doing another test so I could get some logs:

``` SDP Local SDP (Offer) v=0 o=mozilla...THIS_IS_SDPARTA-63.0 3486615976020240329 1 IN IP4 0.0.0.0 s=- t=0 0 a=sendrecv a=fingerprint:sha-256 F8:9C:AA:09:B8:6B:49:EC:A3:48:2F:0D:DF:04:DF:CE:A8:44:76:D1:57:2D:5E:7A:1F:C9:EA:34:FE:E6:0D:47 a=group:BUNDLE 0 1 2 a=ice-options:trickle a=msid-semantic:WMS * m=audio 34846 UDP/TLS/RTP/SAVPF 109 9 0 8 101 c=IN IP4 192.168.1.2 a=candidate:0 1 UDP 2122187007 192.168.122.1 47818 typ host a=candidate:2 1 UDP 2122121471 172.17.0.1 33091 typ host a=candidate:4 1 UDP 2122252543 192.168.1.2 34846 typ host a=candidate:6 1 TCP 2105458943 192.168.122.1 9 typ host tcptype active a=candidate:8 1 TCP 2105393407 172.17.0.1 9 typ host tcptype active a=candidate:10 1 TCP 2105524479 192.168.1.2 9 typ host tcptype active a=candidate:0 2 UDP 2122187006 192.168.122.1 51669 typ host a=candidate:2 2 UDP 2122121470 172.17.0.1 47008 typ host a=candidate:4 2 UDP 2122252542 192.168.1.2 60487 typ host a=candidate:6 2 TCP 2105458942 192.168.122.1 9 typ host tcptype active a=candidate:8 2 TCP 2105393406 172.17.0.1 9 typ host tcptype active a=candidate:10 2 TCP 2105524478 192.168.1.2 9 typ host tcptype active a=sendrecv a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level a=extmap:2/recvonly urn:ietf:params:rtp-hdrext:csrc-audio-level a=extmap:3 urn:ietf:params:rtp-hdrext:sdes:mid a=fmtp:109 maxplaybackrate=48000;stereo=1;useinbandfec=1 a=fmtp:101 0-15 a=ice-pwd:fad3e337ae6ac7d0677b7521968a9ccf a=ice-ufrag:8b1d1699 a=mid:0 a=msid:{8e9e9b58-1f23-42a4-9290-026617d253f1} {74960877-0b67-4e1b-a14e-fcdfb0b15ba4} a=rtcp:60487 IN IP4 192.168.1.2 a=rtcp-mux a=rtpmap:109 opus/48000/2 a=rtpmap:9 G722/8000/1 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=setup:actpass a=ssrc:4139019108 cname:{cc07d608-2c8b-45ee-8838-7d9f9223f3bc} m=video 58251 UDP/TLS/RTP/SAVPF 120 126 121 97 c=IN IP4 192.168.1.2 a=candidate:0 1 UDP 2122187007 192.168.122.1 56628 typ host a=candidate:2 1 UDP 2122121471 172.17.0.1 46719 typ host a=candidate:4 1 UDP 2122252543 192.168.1.2 58251 typ host a=candidate:6 1 TCP 2105458943 192.168.122.1 9 typ host tcptype active a=candidate:8 1 TCP 2105393407 172.17.0.1 9 typ host tcptype active a=candidate:10 1 TCP 2105524479 192.168.1.2 9 typ host tcptype active a=candidate:0 2 UDP 2122187006 192.168.122.1 44567 typ host a=candidate:2 2 UDP 2122121470 172.17.0.1 56222 typ host a=candidate:4 2 UDP 2122252542 192.168.1.2 46150 typ host a=candidate:6 2 TCP 2105458942 192.168.122.1 9 typ host tcptype active a=candidate:8 2 TCP 2105393406 172.17.0.1 9 typ host tcptype active a=candidate:10 2 TCP 2105524478 192.168.1.2 9 typ host tcptype active a=sendrecv a=extmap:3 urn:ietf:params:rtp-hdrext:sdes:mid a=extmap:4 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time a=extmap:5 urn:ietf:params:rtp-hdrext:toffset a=fmtp:126 profile-level-id=42e01f;level-asymmetry-allowed=1;packetization-mode=1 a=fmtp:97 profile-level-id=42e01f;level-asymmetry-allowed=1 a=fmtp:120 max-fs=12288;max-fr=60 a=fmtp:121 max-fs=12288;max-fr=60 a=ice-pwd:fad3e337ae6ac7d0677b7521968a9ccf a=ice-ufrag:8b1d1699 a=mid:1 a=msid:{8e9e9b58-1f23-42a4-9290-026617d253f1} {580f8da5-e96e-4636-b40d-36d310f4c55a} a=rtcp:46150 IN IP4 192.168.1.2 a=rtcp-fb:120 nack a=rtcp-fb:120 nack pli a=rtcp-fb:120 ccm fir a=rtcp-fb:120 goog-remb a=rtcp-fb:126 nack a=rtcp-fb:126 nack pli a=rtcp-fb:126 ccm fir a=rtcp-fb:126 goog-remb a=rtcp-fb:121 nack a=rtcp-fb:121 nack pli a=rtcp-fb:121 ccm fir a=rtcp-fb:121 goog-remb a=rtcp-fb:97 nack a=rtcp-fb:97 nack pli a=rtcp-fb:97 ccm fir a=rtcp-fb:97 goog-remb a=rtcp-mux a=rtpmap:120 VP8/90000 a=rtpmap:126 H264/90000 a=rtpmap:121 VP9/90000 a=rtpmap:97 H264/90000 a=setup:actpass a=ssrc:2835070558 cname:{cc07d608-2c8b-45ee-8838-7d9f9223f3bc} m=application 41026 UDP/DTLS/SCTP webrtc-datachannel c=IN IP4 192.168.1.2 a=candidate:0 1 UDP 2122187007 192.168.122.1 53535 typ host a=candidate:2 1 UDP 2122121471 172.17.0.1 37879 typ host a=candidate:4 1 UDP 2122252543 192.168.1.2 41026 typ host a=candidate:6 1 TCP 2105458943 192.168.122.1 9 typ host tcptype active a=candidate:8 1 TCP 2105393407 172.17.0.1 9 typ host tcptype active a=candidate:10 1 TCP 2105524479 192.168.1.2 9 typ host tcptype active a=sendrecv a=ice-pwd:fad3e337ae6ac7d0677b7521968a9ccf a=ice-ufrag:8b1d1699 a=mid:2 a=setup:actpass a=sctp-port:5000 a=max-message-size:1073741823 Remote SDP (Answer) v=0 o=- 5837876102187459064 2 IN IP4 127.0.0.1 s=- t=0 0 a=sendrecv a=group:BUNDLE 0 1 2 a=msid-semantic:WMS NCMS m=audio 9 UDP/TLS/RTP/SAVPF 109 9 0 8 101 c=IN IP4 0.0.0.0 a=candidate:1710652804 1 udp 2122262783 2607:fb90:46a7:b84:f9f3:dc8f:5a0e:81c3 50059 typ host generation 0 ufrag UQmv network-id 6 network-cost 900 a=candidate:919814711 1 udp 1686052607 172.58.111.8 30371 typ srflx raddr 2607:fb90:46a7:b84:f9f3:dc8f:5a0e:81c3 rport 50059 generation 0 ufrag UQmv network-id 6 network-cost 900 a=candidate:3717173733 1 udp 1685921535 172.58.111.8 24298 typ srflx raddr 192.0.0.1 rport 59626 generation 0 ufrag UQmv network-id 5 network-cost 900 a=candidate:647754386 1 tcp 1518086399 2607:fc20:46b8:5b8b:893:d4b2:c768:3b22 57689 typ host tcptype passive generation 0 ufrag UQmv network-id 1 network-cost 10 a=candidate:647754386 1 tcp 1518020863 2607:fc20:46b8:5b8b:893:d4b2:c768:3b22 57690 typ host tcptype passive generation 0 ufrag UQmv network-id 2 network-cost 10 a=sendrecv a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level a=fingerprint:sha-256 79:C7:4E:C2:0C:46:59:75:CB:D0:F1:56:50:49:D1:32:32:F1:0E:DC:DE:4E:23:1F:D6:BE:58:27:BD:A5:87:D1 a=fmtp:109 maxplaybackrate=48000;stereo=1;useinbandfec=1 a=ice-options:trickle renomination a=ice-pwd:zR04IxEBkWP4b9n3FbFmQidE a=ice-ufrag:UQmv a=mid:0 a=rtcp:9 IN IP4 0.0.0.0 a=rtcp-mux a=rtpmap:109 opus/48000/2 a=rtpmap:9 G722/8000/1 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:101 telephone-event/8000 a=setup:active a=ssrc:148237310 cname:HGkO/q+yBG2zUmz7 a=ssrc:148237310 msid:NCMS NCa0 a=ssrc:148237310 mslabel:NCMS a=ssrc:148237310 label:NCa0 m=video 9 UDP/TLS/RTP/SAVPF 126 120 c=IN IP4 0.0.0.0 a=sendrecv a=extmap:5 urn:ietf:params:rtp-hdrext:toffset a=extmap:4 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time a=fingerprint:sha-256 79:C7:4E:C2:0C:46:59:75:CB:D0:F1:56:50:49:D1:32:32:F1:0E:DC:DE:4E:23:1F:D6:BE:58:27:BD:A5:87:D1 a=fmtp:126 profile-level-id=42e01f;level-asymmetry-allowed=1;packetization-mode=1 a=fmtp:120 max-fs=12288;max-fr=60 a=ice-options:trickle renomination a=ice-pwd:zR04IxEBkWP4b9n3FbFmQidE a=ice-ufrag:UQmv a=mid:1 a=rtcp:9 IN IP4 0.0.0.0 a=rtcp-fb:126 nack a=rtcp-fb:126 nack pli a=rtcp-fb:126 ccm fir a=rtcp-fb:126 goog-remb a=rtcp-fb:120 nack a=rtcp-fb:120 nack pli a=rtcp-fb:120 ccm fir a=rtcp-fb:120 goog-remb a=rtcp-mux a=rtpmap:126 H264/90000 a=rtpmap:120 VP8/90000 a=setup:active a=ssrc:286767816 cname:HGkO/q+yBG2zUmz7 a=ssrc:286767816 msid:NCMS NCv0 a=ssrc:286767816 mslabel:NCMS a=ssrc:286767816 label:NCv0 m=application 9 UDP/DTLS/SCTP webrtc-datachannel c=IN IP4 0.0.0.0 b=AS:30 a=sendrecv a=fingerprint:sha-256 79:C7:4E:C2:0C:46:59:75:CB:D0:F1:56:50:49:D1:32:32:F1:0E:DC:DE:4E:23:1F:D6:BE:58:27:BD:A5:87:D1 a=ice-options:trickle renomination a=ice-pwd:zR04IxEBkWP4b9n3FbFmQidE a=ice-ufrag:UQmv a=mid:2 a=setup:active a=sctp-port:5000 RTP Stats outbound_rtcp_video_1 Local: 23:04:32 GMT-0600 (Central Standard Time) inbound-rtp SSRC: 2835070558 inbound_rtp_audio_2 Local: 13:24:47 GMT-0600 (Central Standard Time) inbound-rtp SSRC: 0 inbound_rtp_video_3 Local: 13:24:47 GMT-0600 (Central Standard Time) inbound-rtp SSRC: 850787749 outbound_rtp_audio_0 Local: 13:24:47 GMT-0600 (Central Standard Time) outbound-rtp SSRC: 4139019108 outbound_rtp_video_1 Local: 13:24:47 GMT-0600 (Central Standard Time) outbound-rtp SSRC: 2835070558 Remote: 23:04:32 GMT-0600 (Central Standard Time) inbound-rtp SSRC: 2835070558 ```
fancycode commented 5 years ago

Your log doesn't show any relay candidates. Are you sure the TURN settings are correct and the server is reachable? You can test the TURN settings in the latest version of the Nextcloud Talk app.

zicklag commented 5 years ago

The Nextcloud Talk app version is 3.2.6 and it doesn't show any available updates. I can't find a test button or anything in the Talk configuration page, though.

Also, I just realized that in my TURN server logs say that it is binding my custom listening port and the listening port + 1. Are both of those ports used for the nextcloud setup? I am running the TURN server in a Docker container and I was only binding the one listening port.

nickvergessen commented 5 years ago

Please update to the newest Nextcloud + Talk version and see if that solves your problem.

vxq9e7bx commented 4 years ago

can this be reopened? I have the same issue with nextcloud 18.0.0 and talk 8.0.1 udp is explicitly deactivated

150: session 000000000000000001: realm <domain.tld> user <xxx>: incoming packet ALLOCATE processed, error 442: UDP Transport is not allowed by the TURN Server configuration

Name         : coturn
Version      : 4.5.1.1
Release      : 1.el8
Architecture : x86_64
Size         : 1.2 M
Source       : coturn-4.5.1.1-1.el8.src.rpm
Repository   : @System
From repo    : epel
Summary      : TURN/STUN & ICE Server
URL          : https://github.com/coturn/coturn/
cat /etc/coturn/turnserver.conf | grep -v "#" | grep -vE "^$"
listening-port=3478

listening-ip=IPv4
listening-ip=IPv6
relay-ip=IPv4
relay-ip=IPv6

verbose

fingerprint
use-auth-secret
static-auth-secret=XXXXXXXXXX
realm=domain.tld
total-quota=100
bps-capacity=0
no-udp
no-tls
no-dtls
no-udp-relay
stale-nonce=600
log-file=/var/log/coturn/turnserver.log
simple-log

no-multicast-peers
no-cli
EasyNetDev commented 6 months ago

Hi all,

Any updates? Even with Nextcloud 28 I'm noticing the same issue. Even if in Nextcloud I selected TCP Only for Turn Server.

nickvergessen commented 6 months ago

Please don't comment on a 6 year old issue. If you have an issue the code is mostlikely no longer the same, so create a new one.