It may be useful to deploy a TURN server for users to publish and play streams with media ports closed on users side. If internal TURN server is not enough for some reasons, and it is not desireable to deploy a separate AWS EC2 instance for this task, or the server should be used in autoscaling group, the coturn server can be deployed in the same instance with WCS.
WCS EC2 instance deploying
Deploy AWS EC2 WCS instance as described here. Add TCP port 443 to security group while launching the instance.
Add the following parameter to flashphoner.properties file
and restart WCS.
coturn installation and configuration
1. Install coturn from epel-release repository
2. Set the following parameters in coturn configuration file /etc/coturn/turnserver.conf
Leave the rest of coturn param,eters by default
3. Add the following parameter to [Service] section of the /lib/systemd/system/coturn.service file to allow coturn to listen TCP port 443
4. Launch coturn
Open Firewall Traversal Streaming example page in Chrome browser, set your server name and port 443 to "TURN server" field, set username and password you configured in coturn settings, then publish and play a stream