Différences

Ci-dessous, les différences entre deux révisions de la page.

--- admin:services:turn.chapril.org [2020/03/21 14:28] – [Installation de coturn] fpoulain
+++ admin:services:turn.chapril.org [2020/03/21 19:14] (Version actuelle) – [Monitoring] fpoulain
@@ Ligne 44: / Ligne 44: @@
 === Sur la VM ===
+On déclare un service turn:
+<code conf /etc/firehol/services/turn.conf>
+#FHVER: 1:213
+# La premiere ligne ci dessus est nécessaire !!
+server_turn_ports="tcp/3478 udp/3478"
+client_turn_ports="default"
+</code>
+Et on ajoute l'ouverture du service dans firehol-ext2me.conf et firehol-lan2me.conf
+   server turn accept
 === Sur les hyperviseurs ===
+On déclare un service turn:
+<code conf /etc/firehol/services/turn.conf>
+#FHVER: 1:213
+# La premiere ligne ci dessus est nécessaire !!
+server_turn_ports="tcp/3478 udp/3478"
+client_turn_ports="default"
+</code>
+Et on ajoute le service turn dans la liste des services à ouvrir et (pour IPv4) à rediriger vers la [[admin:machines_virtuelles:allo|VM allo]] :
+<code>
+    ["turn"]='(  "3478" "tcp udp" "192.168.1.64" "2a01:4f8:10b:c41::64" "2a01:4f8:10b:c42::64")'
+</code>
 ==== Test ====
+Coturn fourni un utilitaire de test, malheureusement il n'est pas packagé séparément. On installe donc un coturn minimal sur sa station de travail et on le désactive :
+<code>
+sudo apt install coturn --no-install-recommends
+sudo systemctl disable coturn
+sudo systemctl stop coturn
+</code>
+Une fois installé on teste le service :
+<code>
+$ turnutils_uclient -v turn.chapril.org -W XXXXXXXXXXXXXXXXX -t
+: IPv4. Connected from: 192.168.8.101:59510
+: IPv4. Connected to: 88.99.233.240:3478
+: allocate sent
+: allocate response received:
+: allocate sent
+: allocate response received:
+: success
+: IPv4. Received relay addr: 192.168.1.64:52198
+: clnet_allocate: rtv=2985305615676396384
+: refresh sent
+: refresh response received:
+: success
+: IPv4. Connected from: 192.168.8.101:59512
+: IPv4. Connected to: 88.99.233.240:3478
+: IPv4. Connected from: 192.168.8.101:59514
+: IPv4. Connected to: 88.99.233.240:3478
+: allocate sent
+: allocate response received:
+: allocate sent
+: allocate response received:
+: success
+: IPv4. Received relay addr: 192.168.1.64:52199
+: clnet_allocate: rtv=0
+: refresh sent
+: refresh response received:
+: success
+: allocate sent
+: allocate response received:
+: allocate sent
+: allocate response received:
+: success
+: IPv4. Received relay addr: 192.168.1.64:54112
+: clnet_allocate: rtv=14986022966068701615
+: refresh sent
+: refresh response received:
+: success
+: channel bind sent
+: cb response received:
+: success: 0x69e2
+: channel bind sent
+: cb response received:
+: success: 0x69e2
+: channel bind sent
+: cb response received:
+: success: 0x40dd
+: channel bind sent
+: cb response received:
+: success: 0x40dd
+: channel bind sent
+: cb response received:
+: success: 0x6c59
+: Total connect time is 2
+: start_mclient: msz=2, tot_send_msgs=0, tot_recv_msgs=0, tot_send_bytes ~ 0, tot_recv_bytes ~ 0
+: start_mclient: msz=2, tot_send_msgs=0, tot_recv_msgs=0, tot_send_bytes ~ 0, tot_recv_bytes ~ 0
+: start_mclient: msz=2, tot_send_msgs=0, tot_recv_msgs=0, tot_send_bytes ~ 0, tot_recv_bytes ~ 0
+: start_mclient: msz=2, tot_send_msgs=0, tot_recv_msgs=0, tot_send_bytes ~ 0, tot_recv_bytes ~ 0
+: start_mclient: msz=2, tot_send_msgs=5, tot_recv_msgs=0, tot_send_bytes ~ 500, tot_recv_bytes ~ 0
+...
+</code>
 ==== Monitoring ====
+C'est un peu un ovni à monitorer. On monitore la présence du process et la capacité à ouvrir une connexion TCP depuis l'extérieur.