From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mail.toke.dk; spf=pass (mailfrom) smtp.mailfrom=irif.fr (client-ip=2001:660:3301:8000::1:2; helo=korolev.univ-paris7.fr; envelope-from=jch@irif.fr; receiver=) Received: from korolev.univ-paris7.fr (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]) by mail.toke.dk (Postfix) with ESMTPS id 771E784BF03 for ; Fri, 14 May 2021 14:04:38 +0200 (CEST) Received: from potemkin.univ-paris7.fr (potemkin.univ-paris7.fr [IPv6:2001:660:3301:8000::1:1]) by korolev.univ-paris7.fr (8.14.4/8.14.4/relay1/82085) with ESMTP id 14EC4Z0l029341 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 14 May 2021 14:04:35 +0200 Received: from mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [81.194.30.253]) by potemkin.univ-paris7.fr (8.14.4/8.14.4/relay2/82085) with ESMTP id 14EC4Ze1016957; Fri, 14 May 2021 14:04:35 +0200 Received: from mailhub.math.univ-paris-diderot.fr (localhost [127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTP id 50C85FEEA6; Fri, 14 May 2021 14:04:35 +0200 (CEST) X-Virus-Scanned: amavisd-new at math.univ-paris-diderot.fr Received: from mailhub.math.univ-paris-diderot.fr ([127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id mi0UStpw4UVC; Fri, 14 May 2021 14:04:33 +0200 (CEST) Received: from pirx.irif.fr (unknown [78.194.40.74]) (Authenticated sender: jch) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTPSA id A84BDFEEA4; Fri, 14 May 2021 14:04:33 +0200 (CEST) Date: Fri, 14 May 2021 14:04:33 +0200 Message-ID: <87lf8hldwu.wl-jch@irif.fr> From: Juliusz Chroboczek To: Michael Aldridge In-Reply-To: <60a45f10-75eb-dfef-7609-4f6be2586e6c@gmail.com> References: <60a45f10-75eb-dfef-7609-4f6be2586e6c@gmail.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/28.0 Mule/6.0 MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]); Fri, 14 May 2021 14:04:35 +0200 (CEST) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (potemkin.univ-paris7.fr [194.254.61.141]); Fri, 14 May 2021 14:04:35 +0200 (CEST) X-Miltered: at korolev with ID 609E6753.000 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)! X-Miltered: at potemkin with ID 609E6753.000 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)! X-j-chkmail-Enveloppe: 609E6753.000 from potemkin.univ-paris7.fr/potemkin.univ-paris7.fr/null/potemkin.univ-paris7.fr/ X-j-chkmail-Enveloppe: 609E6753.000 from mailhub.math.univ-paris-diderot.fr/mailhub.math.univ-paris-diderot.fr/null/mailhub.math.univ-paris-diderot.fr/ X-j-chkmail-Score: MSGID : 609E6753.000 on korolev.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000 X-j-chkmail-Score: MSGID : 609E6753.000 on potemkin.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000 X-j-chkmail-Status: Ham X-j-chkmail-Status: Ham Message-ID-Hash: TEYW7COWJFE7SZEIDUV7VWTVHTIQM4HN X-Message-ID-Hash: TEYW7COWJFE7SZEIDUV7VWTVHTIQM4HN X-MailFrom: jch@irif.fr X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: galene@lists.galene.org X-Mailman-Version: 3.3.4 Precedence: list Subject: [Galene] Re: Troubleshooting 0kbps/0kbps video List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: > Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene Wow. > Loading the main page, selecting a room, and using the text chat works > just fine, what doesn't work is actually setting up a call. If I log > two workstations as "presenters" then they each see their own video, but > report 0kbps+0kbps. This means that the HTTPS traffic is getting through, but that the RTP traffic (media) isn't. > I suspect that the magic bullet is going to be adding a TURN server > somewhere, Yes. You need to put a TURN server somewhere where it can be reached by both the client and the server. So your diagram becomes: --------------> TURN Server <------------- / \ Laptop -> VPN Server -> Proxy -> Proxy -> Proxy -> Galene Since there's a VPN in the way, it might be difficult to make the TURN server reachable by both sides. In particular, if the goal is to hide IP addresses, then the TURN server is going to have too much knowledge. -- Juliusz