How to auto-detect NAT_HARVESTER_PUBLIC_ADDRESS

narcisgarcia · March 25, 2020, 5:24pm

I had to configure /etc/jitsi/videobridge/sip-communicator.properties with:

org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=192.168.123.456
org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=1.2.3.4

How can I replace those values by a resolvable FQDN or subshell call for autodetection?

damencho · March 25, 2020, 10:22pm

For auto detection you can use these two properties and values:

github.com

jitsi/jitsi-videobridge/blob/master/debian/postinst#L101


-Dnet.java.sip.communicator.SC_LOG_DIR_LOCATION=/var/log/jitsi\
-Djava.util.logging.config.file=/etc/jitsi/videobridge/logging.properties\"" >> $CONFIG
       fi


       # unused old parameter, systemd unit files does not resolve bash variables,
       # and this breaks startup script
       sed -i 's/\$JVB_EXTRA_JVM_PARAMS//g' $CONFIG


       if ! grep -q "org.ice4j.ice.harvest.STUN_MAPPING_HARVESTER_ADDRESSES" "$NEW_JITSI_CONFIG" \
         && ! grep -q "org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS" "$NEW_JITSI_CONFIG" ;then
           echo "org.ice4j.ice.harvest.DISABLE_AWS_HARVESTER=true" >> $NEW_JITSI_CONFIG
           echo "org.ice4j.ice.harvest.STUN_MAPPING_HARVESTER_ADDRESSES=meet-jit-si-turnrelay.jitsi.net:443" >> $NEW_JITSI_CONFIG
       fi


       if ! grep -q "#org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP" "$NEW_JITSI_CONFIG" ;then
           sed -i 's/org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP/#org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP/g' $NEW_JITSI_CONFIG
       fi


       if ! grep -q "org.jitsi.videobridge.xmpp.user.shard.MUC_JIDS" "$NEW_JITSI_CONFIG" ;then
           echo "org.jitsi.videobridge.ENABLE_STATISTICS=true" >> $NEW_JITSI_CONFIG
           echo "org.jitsi.videobridge.STATISTICS_TRANSPORT=muc" >> $NEW_JITSI_CONFIG

github.com

jitsi/jitsi-videobridge/blob/master/debian/postinst#L102


-Djava.util.logging.config.file=/etc/jitsi/videobridge/logging.properties\"" >> $CONFIG
       fi


       # unused old parameter, systemd unit files does not resolve bash variables,
       # and this breaks startup script
       sed -i 's/\$JVB_EXTRA_JVM_PARAMS//g' $CONFIG


       if ! grep -q "org.ice4j.ice.harvest.STUN_MAPPING_HARVESTER_ADDRESSES" "$NEW_JITSI_CONFIG" \
         && ! grep -q "org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS" "$NEW_JITSI_CONFIG" ;then
           echo "org.ice4j.ice.harvest.DISABLE_AWS_HARVESTER=true" >> $NEW_JITSI_CONFIG
           echo "org.ice4j.ice.harvest.STUN_MAPPING_HARVESTER_ADDRESSES=meet-jit-si-turnrelay.jitsi.net:443" >> $NEW_JITSI_CONFIG
       fi


       if ! grep -q "#org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP" "$NEW_JITSI_CONFIG" ;then
           sed -i 's/org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP/#org.jitsi.videobridge.AUTHORIZED_SOURCE_REGEXP/g' $NEW_JITSI_CONFIG
       fi


       if ! grep -q "org.jitsi.videobridge.xmpp.user.shard.MUC_JIDS" "$NEW_JITSI_CONFIG" ;then
           echo "org.jitsi.videobridge.ENABLE_STATISTICS=true" >> $NEW_JITSI_CONFIG
           echo "org.jitsi.videobridge.STATISTICS_TRANSPORT=muc" >> $NEW_JITSI_CONFIG
           echo "org.jitsi.videobridge.xmpp.user.shard.HOSTNAME=localhost" >> $NEW_JITSI_CONFIG

dbddhkpde · March 25, 2020, 11:09pm

Hi,
Did not get your point!
I have the same problem, the public IP is changing every 24 hours. Does you post points to two scripts which change the org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS to a new IP? How do I execute these scripts?

Maybe silly questions, but I can’t figure it out, sorry.

Thx in advance!

damencho · March 26, 2020, 12:53am

Add these as settings instead of private and public address:

org.ice4j.ice.harvest.DISABLE_AWS_HARVESTER=true
org.ice4j.ice.harvest.STUN_MAPPING_HARVESTER_ADDRESSES=meet-jit-si-turnrelay.jitsi.net:443

And whenever your IP changes just restart jvb and then jicofo.

narcisgarcia · March 26, 2020, 1:28pm

To not depend on jitsi.net or another third-party, I suppose a STUN server must be implemented somewhere.
Maybe Jitsi client could make this information job (new feature)?

damencho · March 26, 2020, 6:47pm

Latest packages install a stun/turn server and you can change it to use that.

narcisgarcia · March 27, 2020, 7:27am

Sorry for my ignorance about stun/turn services:
Is stun/turn server useful at same Jitsi server? (without being on another Internet place)
How cant it be enabled & started on a default Debian setup?
Some tcp/udp port to be forwarded?

Thank you.

dbddhkpde · March 27, 2020, 8:52am

Hi Damencho!
Works perfectly fine, thanks!

yasen · April 10, 2020, 9:29am

Just a side note, in addition to the stun config - if you still want to have the local and public IPs, in most cloud platforms there is a way to discover the VM’s details, including private and public addresses.

For example in AWS a simple call to http://169.254.169.254/latest/meta-data/public-ipv4 gives you the public IP and to http://169.254.169.254/latest/meta-data/local-ipv4 gives you the private one.

With some automation scripts you can pre-populate the configs, with cron you can keep them updated in case IPs change.

narcisgarcia · April 18, 2020, 12:16pm

I’ve found a hosting-independent way to get public address, by only using external DNS. Let’s suppose we use a public DNS 1.2.3.4 from Internet:

host $(hostname -f) 1.2.3.4 | grep -e 'has address'

apit · May 18, 2020, 3:39pm

an easier to remember to get public ip is curl http://icanhazip.com