It may be useful to deploy a TURN server for users to publish and play streams with media ports closed on users side. If internal TURN server is not enough for some reasons, and it is not desireable to deploy a separate AWS EC2 instance for this task, or the server should be used in autoscaling group, the coturn server can be deployed in the same instance with WCS.
Deploy AWS EC2 WCS instance as described here. Add TCP port 443 to security group while launching the instance.
Add the following parameter to flashphoner.properties file
rtc_ice_add_local_interface=true |
and restart WCS.
1. Install coturn from epel-release repository
sudo amazon-linux-extras install epel sudo yum install coturn |
2. Set the following parameters in coturn configuration file /etc/coturn/turnserver.conf
# Listen port 443 listening-port=443 # Listen on internal IP only listening-ip=172.31.xx.xxx # Set up external IP option as coturn manual recommends external-ip=54.75.x.xxx/172.31.xx.xxx # Set user and password user=username:password # Set the domain realm=yourdomain.com # Disable UDP listener no-udp # SSL certificate and key cert=/etc/pki/coturn/public/cert.pem cert=/etc/pki/coturn/private/cert.key |
Leave the rest of coturn param,eters by default
3. Add the following parameter to [Service] section of the /lib/systemd/system/coturn.service file to allow coturn to listen TCP port 443
AmbientCapabilities=CAP_NET_BIND_SERVICE |
4. Launch coturn
sudo systemctl start coturn |
Open Firewall Traversal Streaming example page in Chrome browser, set your server name and port 443 to "TURN server" field, set username and password you configured in coturn settings, then publish and play a stream
