Firefox does not give video or sound

We are running the latest version of Jitsi, relay all tcp and udp trafik via TURN. The setup works great with Edge, Chrome, Safari… but Firefox appears to have problem getting the ICE trickle to work.

Entering the meeting works, but no video or sound = no active webRTC channel.

The browser console does not throw any error messages in regards to this, webrtc dev tool shows no stable ICE connection.

JVB 2022-10-17 11:29:56.666 SEVERE: [2183] [confId=1234567890 conf_name=test123@muc.meet.jitsi epId=12345678 stats_id=ABCDE-FGH] DtlsServer.accept#52: Error during DTLS connection: org.bouncycastle.tls.TlsTimeoutException: Handshake timed out
JVB 2022-10-17 11:29:56.666 SEVERE: [2183] [confId=1234567890 conf_name=test123@muc.meet.jitsi epId=12345678 stats_id=ABCDE-FGH] DtlsTransport.startDtlsHandshake#110: Error during DTLS negotiation, closing this transport manager
org.bouncycastle.tls.TlsTimeoutException: Handshake timed out
           at org.bouncycastle.tls.DTLSReliableHandshake.receiveMessage(Unknown Source)
           at org.bouncycastle.tls.DTLSServerProtocol.serverHandshake(Unknown Source)
           at org.bouncycastle.tls.DTLSServerProtocol.accept(Unknown Source)
           at org.bouncycastle.tls.DTLSServerProtocol.accept(Unknown Source)
           at org.jitsi.nlj.dtls.DtlsServer.accept(DtlsServer.kt:45)
           at org.jitsi.nlj.dtls.DtlsServer.start(DtlsServer.kt:41)
           at org.jitsi.nlj.dtls.DtlsStack.start(DtlsStack.kt:150)
           at org.jitsi.videobridge.transport.dtls.DtlsTransport.startDtlsHandshake(DtlsTransport.kt:107)
           at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
           at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
           at java.base/java.lang.Thread.run(Thread.java:829)

Any ideas?

Do you see any errors in the browser JS console? What FF version is that?

This was solved by updating the underlaying infrastructure, appears Firefox is more picky on the addresses presented by the ICE process