From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pj1-x102a.google.com (mail-pj1-x102a.google.com [IPv6:2607:f8b0:4864:20::102a]) by mail.toke.dk (Postfix) with ESMTPS id 5996284B836 for ; Fri, 14 May 2021 02:08:48 +0200 (CEST) Authentication-Results: mail.toke.dk; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=OHx+/XEW Received: by mail-pj1-x102a.google.com with SMTP id q6so409731pjj.2 for ; Thu, 13 May 2021 17:08:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=/55ojYh1X0FRbNjzzTOdBNeTtUx3+Pe3Qeto1TnIhe4=; b=OHx+/XEWxb6RLs81OI25WXDTrg0PWifncDgmKngWa3p8ViMT+a2VdeTByXQ/9lvDwp ap0+Qn1jXjQZlgGpMtGtMpUo9dBaLASeO3vNZNknMmR+ClX+Ocfb4PskwD0icbQ8jPsK EIQbpEgEmI0jo42FLT6AlY/4eDoNnEkbaNKOhEAvmoIfubw7LGtXHQjvqOt7ib+kZOV/ SZHEORTccYvGZr9d39y2RHQ7cmAtghieDOatZDtJJW7flw7K++8+FbLBB4TQyW56S8wt cwMFzXYFsylACJkFDwwdlrxWLrIX/CCW27fYDFejMNtGAkv99aEWENiZ24tJO0+cfLY5 Hovg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=/55ojYh1X0FRbNjzzTOdBNeTtUx3+Pe3Qeto1TnIhe4=; b=WHyxzKrWgsjqBCiylbPZ89MZW6a87eGO2g2n7BRHbIfoxa3xk0zUl9c60CpvSLVZgI yODjCFIG+mbfwI+/8WvmPrhp4f8U0n9OqMXHtM8XkBd/nhEb8FDceObnV0pl0SjNXsZk K3yCcnju/zySlP4LyA2MAkJqvOJbqtXP/xDO8At0Lbkh+NR4ykYvReNFSMOPseKUBejw chTemj7RayA6zy8puCZW9dV99FZ8LYzAJZI2tiTqT61xxtOxz/8khrooKz2i2NOqCflw ADlsZSILk9eYpqjOA7y/QAFTfIHIVHlmU2pEV9m5UHd5q+UySPphFjj7DdbYKcA0GU+8 FHHQ== X-Gm-Message-State: AOAM532Lq+2yi8O9dxHfh9oouaP96C05jSj3vlnIjYh98pbSYZnm1lsX HojEhZ+8vMh9T7k5Av79sfNMFnbzrJK8Bg== X-Google-Smtp-Source: ABdhPJz4mWv9PygkuUcJLv1GbG3fOnhvV+iRW2sutGE6lay2o02DeNQxrmqagToIJVb3Qp3PbxH/ag== X-Received: by 2002:a17:90a:43e2:: with SMTP id r89mr33522085pjg.182.1620950926324; Thu, 13 May 2021 17:08:46 -0700 (PDT) Received: from [192.168.16.10] (108-211-108-75.lightspeed.sntcca.sbcglobal.net. [108.211.108.75]) by smtp.gmail.com with ESMTPSA id k14sm895716pfp.24.2021.05.13.17.08.45 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 13 May 2021 17:08:45 -0700 (PDT) To: galene@lists.galene.org From: Michael Aldridge Message-ID: <60a45f10-75eb-dfef-7609-4f6be2586e6c@gmail.com> Date: Thu, 13 May 2021 17:08:44 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.10.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Message-ID-Hash: IDYHW2MKBVMLOZ5SB55CGUGFUPAPLHWP X-Message-ID-Hash: IDYHW2MKBVMLOZ5SB55CGUGFUPAPLHWP X-MailFrom: aldridge.mac@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.4 Precedence: list Subject: [Galene] Troubleshooting 0kbps/0kbps video List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hello, I'm trying to deploy Galene as an internal video conferencing system and I'm running into trouble getting the video to work. My network topology is as follows: Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene The proxies are forwarding either HTTP or HTTPs traffic all the way inwards. Galene is configured with -insecure and a proxy applies trusted TLS to its connections. Loading the main page, selecting a room, and using the text chat works just fine, what doesn't work is actually setting up a call. If I log two workstations as "presenters" then they each see their own video, but report 0kbps+0kbps. I suspect that the magic bullet is going to be adding a TURN server somewhere, but I know not where. At no point in this topology does NAT occur, so I had thought I could get away without one. My best guess is that I'd need to amend my diagram as follows: -> TURN Server / Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene I can provide debug logs on request, I just don't really know what I'm looking for here. Thanks in advance for any pointers. --Michael