[Galene] Re: Galene in Docker [was: ANNOUNCE: galene-0.6.2]

[Juliusz Chroboczek <jch@irif.fr>]

> Another point might also to configure the turn server in order to listen
> to the 443 port for users on restricted networks using galène in an
> other network (for example from Sorbonne University….)

That's an important point.  A TURN server on an unrestricted port is
essential in order for Galene to work on networks managed by the kind of
people who still believe that blocking ports is going to improve security.

The reason why Galene puts its TURN server on port 1194 by default is that
1194 is reserved for OpenVPN, and that the Eduroam policy document¹
requires that outgoing traffic to port 1194 must be allowed.  443 is even
more likely to be open, but it's a privileged port, and hence not suitable
for the default configuration.

(A nice side-effect of putting a TURN server on a carefully chosen port is
that Galene works over TOR.  But shhh...)

¹ https://www.eduroam.org/wp-content/uploads/2016/05/GN3-12-192_eduroam-policy-service-definition_ver28_26072012.pdf

-- Juliusz