From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mail.toke.dk; spf=pass (mailfrom) smtp.mailfrom=irif.fr (client-ip=2001:660:3301:8000::1:2; helo=korolev.univ-paris7.fr; envelope-from=jch@irif.fr; receiver=) Authentication-Results: mail.toke.dk; dkim=pass (2048-bit key; unprotected) header.d=irif.fr header.i=@irif.fr header.a=rsa-sha256 header.s=dkim-irif header.b=KGHLfJ60 Received: from korolev.univ-paris7.fr (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]) by mail.toke.dk (Postfix) with ESMTPS id CA0FD9DD0FF for ; Thu, 12 Jan 2023 22:30:42 +0100 (CET) Received: from potemkin.univ-paris7.fr (potemkin.univ-paris7.fr [IPv6:2001:660:3301:8000::1:1]) by korolev.univ-paris7.fr (8.14.4/8.14.4/relay1/82085) with ESMTP id 30CLUeRb017702 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 12 Jan 2023 22:30:40 +0100 Received: from mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [81.194.30.253]) by potemkin.univ-paris7.fr (8.14.4/8.14.4/relay2/82085) with ESMTP id 30CLUeEU002681; Thu, 12 Jan 2023 22:30:40 +0100 Received: from mailhub.math.univ-paris-diderot.fr (localhost [127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTP id A9F40F5814; Thu, 12 Jan 2023 22:30:39 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=irif.fr; h= content-type:content-type:mime-version:user-agent:references :in-reply-to:subject:subject:from:from:message-id:date:date :received:received; s=dkim-irif; t=1673559038; x=1674423039; bh= e1XZ33gGLPZcFWkCuSoupKJ1d6P48EBRDwhz95qU8jU=; b=KGHLfJ60HWUF1q9f ICiW25p35JXbN1EV6gcoWi4qbpl4N5xyOM9Xty+pdzyxJ9ugnylAK99NUOe0clGA b2HwTF2FUPenqTDrHblPPT2zasfcgHy7ZP1ByRZjz5XLlGN/AuDFp1vJU+p918OJ 8ST/Ec6koun2VJNMAmWp9MNUN/wkU2elhnihc126BhfbOneknyKuzuFtlBDS7Ut9 1bNiBOY6q5Ut/kbGpXCinMVOsT0nlWSYVOQnTKVrgWY0thJhspFCcFscKt7ALPE5 QshnehJmjSp9qLKHuhnH0gtP26kS/RncfFJbjabX+BLkhD6wzydKjVunMABXNJqy Jv8S+g== X-Virus-Scanned: amavisd-new at math.univ-paris-diderot.fr Received: from mailhub.math.univ-paris-diderot.fr ([127.0.0.1]) by mailhub.math.univ-paris-diderot.fr (mailhub.math.univ-paris-diderot.fr [127.0.0.1]) (amavisd-new, port 10023) with ESMTP id bmwdRMeHnj-M; Thu, 12 Jan 2023 22:30:38 +0100 (CET) Received: from pirx.irif.fr (unknown [78.194.40.74]) (Authenticated sender: jch) by mailhub.math.univ-paris-diderot.fr (Postfix) with ESMTPSA id A42BAF5812; Thu, 12 Jan 2023 22:30:37 +0100 (CET) Date: Thu, 12 Jan 2023 22:30:37 +0100 Message-ID: <87sfgf4f0i.wl-jch@irif.fr> From: Juliusz Chroboczek To: Dianne Skoll In-Reply-To: <20230112131616.046f2f09@gato.skoll.ca> References: <87sfgg3nmy.wl-jch@irif.fr> <87r0w03ml3.wl-jch@irif.fr> <3EEAFE96-7303-41BA-B7A8-C54C8E07A3EB@rouillier.fr> <87a62o54ts.wl-jch@irif.fr> <39712e61-808a-7dc3-989f-c65410de7129@gmail.com> <878ri76i0n.wl-jch@irif.fr> <875ydb6c8c.wl-jch@irif.fr> <871qnz6abi.wl-jch@irif.fr> <20230112103442.14651e37@gato.skoll.ca> <410ea8f2-1981-8521-62bc-27f2cf5cb073@umontpellier.fr> <20230112131616.046f2f09@gato.skoll.ca> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/28.2 Mule/6.0 MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (korolev.univ-paris7.fr [IPv6:2001:660:3301:8000::1:2]); Thu, 12 Jan 2023 22:30:40 +0100 (CET) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (potemkin.univ-paris7.fr [194.254.61.141]); Thu, 12 Jan 2023 22:30:40 +0100 (CET) X-Miltered: at korolev with ID 63C07C00.001 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)! X-Miltered: at potemkin with ID 63C07C00.000 by Joe's j-chkmail (http : // j-chkmail dot ensmp dot fr)! X-j-chkmail-Enveloppe: 63C07C00.001 from potemkin.univ-paris7.fr/potemkin.univ-paris7.fr/null/potemkin.univ-paris7.fr/ X-j-chkmail-Enveloppe: 63C07C00.000 from mailhub.math.univ-paris-diderot.fr/mailhub.math.univ-paris-diderot.fr/null/mailhub.math.univ-paris-diderot.fr/ X-j-chkmail-Score: MSGID : 63C07C00.001 on korolev.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000 X-j-chkmail-Score: MSGID : 63C07C00.000 on potemkin.univ-paris7.fr : j-chkmail score : . : R=. U=. O=. B=0.000 -> S=0.000 X-j-chkmail-Status: Ham X-j-chkmail-Status: Ham Message-ID-Hash: FDG53FZLQSDAXE2OXUPMSDRWYQX6TWW4 X-Message-ID-Hash: FDG53FZLQSDAXE2OXUPMSDRWYQX6TWW4 X-MailFrom: jch@irif.fr X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: galene@lists.galene.org X-Mailman-Version: 3.3.7 Precedence: list Subject: [Galene] Re: Galene in Docker [was: ANNOUNCE: galene-0.6.2] List-Id: =?utf-8?q?Gal=C3=A8ne_videoconferencing_server_discussion_list?= Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: >> My Galene server is running behind a Nginx RP for more than one year. >> I attached my galene server configuration on nginx. It is really >> simple. > I run it behind an Apache reverse-proxy. Config is below. You need > the mod_proxy_wstunnel module to proxy the Websocket traffic. What both of you are doing is reverse proxying Galene's web server and WebSocket endpoint while leaving the media endpoints exposed to the Internet. That's fine, and there are many circumstances where it is useful. On the other hand, what people used to web applications are requesting is the ability to put Galene into a container isolated from the Internet, with all the traffic going through a proxy. That's not going to work, at least not efficiently, and not without a lot of hassle. In short: the Internet is more than just HTTP. -- Juliusz