[Galene] Re: Federated servers or multiple turns?

[Han So <hansolo2218@gmail.com>]

Attempted what you said, but it turned out we couldn’t even get a simple external turn server working.  We tried to use a pion go turn server, a simple one, then the log one, and also tried a coturn server.  As a last ditch effort we copied the galene local turn server and moved it externally and that didn’t work.  In all cases the initial connection was fine, relay test was successful, but the moment we enable the video and audio, it fails.  This was prior to doing any code changes to attempt multiple turns.  Any hints on how to make external turns work?
Hans

> On Nov 30, 2022, at 6:06 PM, Juliusz Chroboczek <jch@irif.fr> wrote:
> 
> 
>> 
>> This is really to improve security and anonymity
> 
> What's your attack model?  Are you assuming that the server is controlled
> by an attacker?
> 
>> Currently they both access the same turn so both individuals would see
>> the same ip addresses they are connected to.
> 
> You can easily use a different TURN server for each client.  Just change
> this line:
> 
>  https://github.com/jech/galene/blob/master/rtpconn/webclient.go#L1189
> 
> However, given that most clients don't go through a TURN server but
> connect directly to Galene, I fail to see how that would improve
> anonymity.
> 
> -- Juliusz