互联网DMZ区部署了livekit,配置了nodeip为公网ip,现在互联网用户可以访问公网ip推拉...
# ask-ai
a
互联网DMZ区部署了livekit,配置了nodeip为公网ip,现在互联网用户可以访问公网ip推拉流正常。政务外网用户无法连接互联网资源,请求公网ip不通。现在考虑在政务外网部署一个coturn,并配置到livekit的turn_servers下面使用。政务外网用户推流到coturn,再转发到livekit的内网ip。此方案是否可行?
t
Thanks for reaching out, 徐旭. I'm an AI assistant and I'm here to help. Give me a moment while I research this topic.
Yes, the proposed solution of deploying a coturn server in the government extranet and configuring it under the
turn_servers
section of LiveKit is feasible. Here’s how it can work: • TURN Server Configuration: LiveKit supports external TURN server configuration. You can specify the coturn server details in the LiveKit configuration as follows:
Copy code
rtc:
  turn_servers:
    - host: <http://your-coturn-server.com|your-coturn-server.com>
      port: 443
      protocol: tls
      username: "your-username"
      credential: "your-credential"
• coturn Compatibility: coturn is a recommended TURN server software and is well-suited for hosting STUN and TURN services in controlled environments like a government extranet. • Network Architecture: This setup ensures that: ◦ Government extranet users can connect to the coturn server, which relays their streams to the internal LiveKit server. ◦ TURN servers are designed to handle restrictive networks, making them ideal for this scenario. ◦ Relay functionality ensures connectivity even in highly restricted environments. • Implementation Considerations: Ensure the following: ◦ Proper authentication is configured on the coturn server to prevent unauthorized usage. ◦ The coturn server has an open network path to the internal LiveKit server. ◦ Firewall rules are configured to allow traffic between the coturn server and the LiveKit deployment. This architecture will allow government extranet users to stream through the coturn server, which will then relay the streams to the internal LiveKit server, ensuring both security and connectivity. Sources: config-sample.yaml | Documentation/ImprovingCallReliability.md | SIP Integration | livekit/livekit_composite | DeepWiki
a
基于上述方案,政务外网用户推流到coturn,coturn推流到livekit用的还是nodeip公网ip没有使用内网ip,这是为什么?
t
Could you help me understand how the coturn server and LiveKit are set up? Just a few things to check: • Is the coturn server set up to use the internal IP of the LiveKit server? • Are there any NAT or firewall rules that might be making it use the public IP instead? • Is the LiveKit server ready to accept connections on its internal IP? Getting a clear picture of these will really help us figure out why the public IP is being used rather than the internal one.
a
coturn中如何配置livekit的内部ip,通过下面的配置?external-ip relay-ip
t
I don't have the answer you're looking for. You could also try asking your question: • in one of the other Slack channels or • to https://deepwiki.com/livekit/livekit_composite which is trained on all LiveKit source code If you find the answer, please post it here to help others!
a
external-ip=192.168.84.45 relay-ip=192.168.84.45,这是coturn的配置项,可以配置livekit的内网ip吗
使用livekit做视频会议,用户A使用5g手机进会,用户b使用政务外网进会。政务外网无法访问互联网资源,完全的网络隔离环境,访问不了公网ip。请根据此条件设计一套方案,确保用户能内外网开会。不要总结上面的问答内容,重新总结答案。