Comments on: Do you still need TURN server if your media server has a public IP address? https://bloggeek.me/turn-public-ip-address/ The leading authority on WebRTC Mon, 01 Feb 2021 19:30:46 +0000 hourly 1 By: Tsahi Levent-Levi https://bloggeek.me/turn-public-ip-address/#comment-126546 Mon, 01 Feb 2021 19:30:46 +0000 https://bloggeek.me/?p=10539#comment-126546 In reply to Rohit Aggarwal.

Needing or not needing a TURN server relies only on the network connection. Mobile app or no mobile app, audio only or audio+video has no effect on that.

Or simply put – yes. You will need STUN/TURN for mobile app with audio only calls.

]]>
By: Rohit Aggarwal https://bloggeek.me/turn-public-ip-address/#comment-126545 Mon, 01 Feb 2021 19:20:23 +0000 https://bloggeek.me/?p=10539#comment-126545 Thank you for such an insightful post!

Do you think Turn/Stun is needed if it is a mobile app and the traffic is an audio call only?

]]>
By: Tsahi Levent-Levi https://bloggeek.me/turn-public-ip-address/#comment-124082 Mon, 09 Nov 2020 06:05:13 +0000 https://bloggeek.me/?p=10539#comment-124082 In reply to DW.

DW,

As with everything, it is a matter of priorities, needs and your clients.

For the most part, you will have ~5% of your users connected via TCP – simply because their network will block UDP traffic. For that alone, you need to either use TURN/TCP or ICE-TCP on your server.

Then there are those with a nasty firewall that actually validates that data is sent over TLS (ie – is being encrypted using TLS) or that just forces traffic over port 443. In such cases, you may need to have TURN/TLS – and this can happen to ~0.5% of your users.

Your userbase will be different. It might have MORE users behind such nasty firewalls. Or there might be less.

If you don’t care about these users, then by all means – don’t use TURN servers. If your users don’t complain – ask yourself first if that’s because they just move on to other services or because there are no issues at all.

The easiest way to add TURN is by purchasing it from Xirsys or Twilio as a service. You’ll immediately know if it is being used or not…

]]>
By: DW https://bloggeek.me/turn-public-ip-address/#comment-124078 Sun, 08 Nov 2020 22:47:06 +0000 https://bloggeek.me/?p=10539#comment-124078 Do you hold that TURN is always required even if there are no peer to peer connections? In our case, the media server is always the peer to every client.

We currently have TURN/STUN setup and I don’t think ANY sessions are being proxied via TURN. There isn’t enough bandwidth being consumed to indicate that is happening.

The developer of the SFU we are using, MediaSoup, repeatedly tells users that STUN isn’t required as the software uses ice-lite. And I can’t see any evidence that TURN is being used so I’m thinking about removing both.

If there are only one or two clients that cannot connect to our service, I don’t want to maintain TURN for just rare cases. It is sufficient to blame their firewall and say that they are unsupported. (If we are talking about 0.01% of users…. and I think this may be the case unless our TURN service is not configured properly….. there is simply no bandwidth being used and we are not having any complaints either.)

So before telling everyone that they absolutely, positively need TURN, I think you should point out that cost vs benefit needs to be considered, or add the caveat that you are only talking about p2p, and maybe p2p involving corporate networks with strict firewalls. We provide a free service on the web to consumers, where home routers are generally more permissive I guess, and it is not cost effective for us to pay for TURN bandwidth or worth adding complexity for such rare cases….. (if it was even necessary… because as I said, we provide it now and it isn’t being used.)

Because of your post here, I have to spend time trying to figure out if I am missing something or if our TURN is not configured properly to explain the lack of usage. But I am pretty sure that we would be hearing from our users if a TURN was critical and not working. So I am highly inclined to think that our case breaks your logic here.

]]>
By: Tsahi Levent-Levi https://bloggeek.me/turn-public-ip-address/#comment-120843 Wed, 11 Mar 2020 15:07:57 +0000 https://bloggeek.me/?p=10539#comment-120843 In reply to Amgaa.

Amgaa,

Such technical questions are more suitable for the discuss-webrtc group and less on this article. You might want to check there.

That said, you must at least make sure and verify that your TURN server has public access and a public IP associated with it.

]]>
By: Amgaa https://bloggeek.me/turn-public-ip-address/#comment-120840 Wed, 11 Mar 2020 07:01:52 +0000 https://bloggeek.me/?p=10539#comment-120840 Can TURN server connected with my media server via internal IP? If not, why?
I installed TURN server on one of my local server beside media server. They are connected through local network. But, it is not working.
Thank you.

]]>
By: Tsahi Levent-Levi https://bloggeek.me/turn-public-ip-address/#comment-120574 Sun, 09 Feb 2020 07:34:44 +0000 https://bloggeek.me/?p=10539#comment-120574 In reply to Alex.

Alex, you need to use turns: instead of using turn: in that same line where you use ?transport=tcp

]]>
By: Alex https://bloggeek.me/turn-public-ip-address/#comment-120546 Wed, 05 Feb 2020 17:50:34 +0000 https://bloggeek.me/?p=10539#comment-120546 I wonder how to force a browser to use TURN relay over TLS? I’m aware of ?transport=tcp flag, but TLS?… Will appreciate any clues.

]]>
By: Tsahi Levent-Levi https://bloggeek.me/turn-public-ip-address/#comment-118622 Tue, 07 Nov 2017 08:01:03 +0000 https://bloggeek.me/?p=10539#comment-118622 In reply to Jai.

Jai,

Such a specific case should be workable without STUN and TURN.

]]>
By: Jai https://bloggeek.me/turn-public-ip-address/#comment-118621 Tue, 07 Nov 2017 07:59:38 +0000 https://bloggeek.me/?p=10539#comment-118621 Dear Sir,

For WebRTC multi party screen, voice share functionality with in intranet (assuming all devices connected to same switch and no NAT) still we need STUN and TURN?

]]>