LiveKit Community

Hey <@U05NRUKDN80>, you will not be able to deploy WebRTC servers to private subnets. We do mention this in our Kubernetes <https://docs.livekit.io/realtime/self-hosting/kubernetes/|docs>.

Thanks! How I miss that :man-facepalming:

Ok. I have everything on Public Subnets. And it's working !!! :)

I managed to have the following config. Both direct connect and turn connect are working

```
livekit:
  rtc:
    use_external_ip: true
    udp_port: 7882
  turn:
    enabled: true
    tls_port: 3478
    external_tls: true
```

But i'm not "happy" with so many ports open.

Is that possible to have only 443?
I mean, as far as I understand, if using TURN/TLS should allow that, no?

Traffic would go through TURN/TLS (443). Do we still need the udp_port open to the world?

What am I missing?

you can force all traffic to go through TURN/TLS.. though it would not be the best experience. WebRTC works best over UDP.