Prob with the internet deployement


#1

Hi,
I just create my own jitsi server on local and that work perfectly.
But when i try to put it on internet we can acces to the lobby to create a new room but when we try to create one we can’t connect to it.
Does anyone have an idea about this?


#2

Have you checked this: https://github.com/jitsi/jitsi-meet/blob/master/doc/quick-install.md#advanced-configuration the part about ports and ip addresses.


#3

Yeah i add :
org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=
org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=

on my file sip-communicator.properties

but now when i start a call everyone on the the local network can go on it and use video + mic + chat
but when some one come from internet they are connect on the room for few seconds and get disconnect with the message “Fellow Jitster is having connectivity issues…”
so they don’t have the vid or the mic but they can use and see in real time the tect chat


#4

Have you forwarded the ports? Make sure the private and public addresses are correct.
After adding those settings did you restart jvb?


#5

Yeah i’m sure about my adresses and i restarted the jvb.
That’s really strange cause the internet user can’t see the other ones on the conversation when he get disconnect but he can have acces to the chat.


#6

Check if ur network has any firewall, if there is a firewall make sure your tcp port 4443 and udp port 10000 is open.


#7

This is completely normal. The chat and the signaling are over https using a bosh connection to the XMPP server. Where for the media every participant sends media to jvb and receive it from there, but if porta are not open/forwarded or jvb is advertising wrong addresses the link between the Internet participants and jvb cannot be established.


#8

Yeah i opened 80/tcp, 443/tcp, 10000:20000/udp and 4443/tcp


#9

@xYokilyoksx can you give me a link to test it?


#10

Sry i’m working for an business and i can’t give you an acces.
but here a screenshot about my wireshark when i try to join a conversation (filter : udp) :


#11

There are not any udp trades between jvb and the internet user


#12

This happened to me too with the latest stable version of Jitsi-Meet.
This is what I get in the JS console

it works fine in test environment though (local network)


#13

Can you open chrome://webrtc-internals open 3 tabs, find a peer connection to the bridge and show the set remote description. What are the bridge candidates, do you see the issue private and the public addresses?
Have you installed a webserver before installing jitsi-meet? If yes then from internet try doing telnet thepublicaddress 4443, does it work?
These are the simple steps for checking what I was asking does it work. There is and one more step, stopping jvb and checking with nc whether udp forwarding works.


#14

It is the other way around, first the clients need to connect to jvb. So either jvb is not advertising his addresses correctly, or there is no forwarding, or you have some firwall on the way that drop the packets.


#15

@hkhait Are the candidates ok in the remote description?


#16

Yes I get the remote description.
We had some routing problems after I rebooted the server. I will let you know once this routing problem is solved


#17

I mean, whether you see the right jvb candidates there in the remote description for the jvb peer connection.


#18

Actually i just disable the firewall and there is a screen shot from my javascript consol :


#19

ICE failed, means client cannot connect to jvb either because of not port forwarded, some firewall on the way or jvb advertises wrong addresses. Did you check my comment above about webrtc-internals? Did you verify that jvb advertises the correct ip-addresses?
What about the webserver question?


#20

icecandidatehost :
sdpMid: audio, sdpMLineIndex: 0, candidate: candidate:3067771838 1 tcp 1518280447 192.168.5.21 9 typ host tcptype active generation 0 ufrag SLts network-id 1

type: offer, sdp: v=0
o=- 1923518516 2 IN IP4 127.0.0.1
s=-
t=0 0
a=msid-semantic: WMS
a=group:BUNDLE audio video data
m=audio 10000 RTP/SAVPF 111 103 104 126
c=IN IP4 172.16.7.2
a=rtpmap:111 opus/48000/2
a=rtpmap:103 ISAC/16000
a=rtpmap:104 ISAC/32000
a=rtpmap:126 telephone-event/8000
a=fmtp:111 minptime=10;useinbandfec=1
a=rtcp:9 IN IP4 0.0.0.0
a=rtcp-fb:111 transport-cc
a=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level
a=setup:actpass
a=mid:audio
a=sendrecv
a=ice-ufrag:8nquh1cqhuvsb8
a=ice-pwd:58obnqbb3tbm95fkmaebvj49bh
a=fingerprint:sha-1 12:D4:6D:96:79:CC:44:92:74:AE:50:D5:2B:0E:9E:0D:8A:CE:83:A0
a=candidate:1 1 ssltcp 2130706431 172.16.7.2 4443 typ host generation 0
a=candidate:2 1 udp 2130706431 172.16.7.2 10000 typ host generation 0
a=ssrc:3953268500 cname:mixed
a=ssrc:3953268500 msid:mixedmslabel mixedlabelaudio0
a=ssrc:3953268500 mslabel:mixedmslabel
a=ssrc:3953268500 label:mixedlabelaudio0
a=ssrc:3740138585 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:3740138585 msid:b1e9b86d-b3d8-4e82-8bd5-976bbbee2504-3 1dd49fb3-1f57-40a4-a6d4-59f67877401b-3
a=ssrc:3740138585 mslabel:b1e9b86d-b3d8-4e82-8bd5-976bbbee2504-3
a=ssrc:3740138585 label:1dd49fb3-1f57-40a4-a6d4-59f67877401b-3
a=ssrc:4086266707 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:4086266707 msid: 4/mbAxG4
a=ssrc:4086266707 mslabel:
a=ssrc:4086266707 label:4/mbAxG4
a=ssrc:3219952445 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:3219952445 msid: 6vtE8fa2
a=ssrc:3219952445 mslabel:
a=ssrc:3219952445 label:6vtE8fa2
a=ssrc:4177156100 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:4177156100 msid: BV75OIVG
a=ssrc:4177156100 mslabel:
a=ssrc:4177156100 label:BV75OIVG
a=ssrc:2907544366 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:2907544366 msid: t2fewwp1
a=ssrc:2907544366 mslabel:
a=ssrc:2907544366 label:t2fewwp1
a=ssrc:484247473 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:484247473 msid:9652a34c-1464-44f0-8083-89a72eaffb55-1 73e7cc27-113c-4762-8423-d1e4643e2ca2-1
a=ssrc:484247473 mslabel:9652a34c-1464-44f0-8083-89a72eaffb55-1
a=ssrc:484247473 label:73e7cc27-113c-4762-8423-d1e4643e2ca2-1
a=ssrc:2894829819 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:2894829819 msid: QcKfRmD+
a=ssrc:2894829819 mslabel:
a=ssrc:2894829819 label:QcKfRmD+
a=ssrc:3797740147 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:3797740147 msid: McFmM0Qb
a=ssrc:3797740147 mslabel:
a=ssrc:3797740147 label:McFmM0Qb
a=ssrc:2576068444 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:2576068444 msid: 1hiRql3w
a=ssrc:2576068444 mslabel:
a=ssrc:2576068444 label:1hiRql3w
a=ssrc:1428098521 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:1428098521 msid: IbJgdEky
a=ssrc:1428098521 mslabel:
a=ssrc:1428098521 label:IbJgdEky
a=ssrc:1062006364 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=rtcp-mux
m=video 10000 RTP/SAVPF 100 107 101 96 99 97
c=IN IP4 172.16.7.2
a=rtpmap:100 VP8/90000
a=rtpmap:107 H264/90000
a=rtpmap:101 VP9/90000
a=rtpmap:96 rtx/90000
a=rtpmap:99 rtx/90000
a=rtpmap:97 rtx/90000
a=fmtp:100 x-google-start-bitrate=800
a=fmtp:107 level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f;x-google-start-bitrate=800
a=fmtp:101 x-google-start-bitrate=800
a=fmtp:96 apt=100
a=fmtp:99 apt=107
a=fmtp:97 apt=101
a=rtcp:9 IN IP4 0.0.0.0
a=rtcp-fb:100 ccm fir
a=rtcp-fb:100 nack
a=rtcp-fb:100 nack pli
a=rtcp-fb:100 transport-cc
a=rtcp-fb:107 ccm fir
a=rtcp-fb:107 nack
a=rtcp-fb:107 nack pli
a=rtcp-fb:107 transport-cc
a=rtcp-fb:101 ccm fir
a=rtcp-fb:101 nack
a=rtcp-fb:101 nack pli
a=rtcp-fb:101 transport-cc
a=rtcp-fb:96 ccm fir
a=rtcp-fb:96 nack
a=rtcp-fb:96 nack pli
a=extmap:3 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time
a=extmap:4 urn:ietf:params:rtp-hdrext:sdes:rtp-stream-id
a=extmap:5 http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
a=setup:actpass
a=mid:video
a=sendrecv
a=ice-ufrag:8nquh1cqhuvsb8
a=ice-pwd:58obnqbb3tbm95fkmaebvj49bh
a=fingerprint:sha-1 12:D4:6D:96:79:CC:44:92:74:AE:50:D5:2B:0E:9E:0D:8A:CE:83:A0
a=candidate:1 1 ssltcp 2130706431 172.16.7.2 4443 typ host generation 0
a=candidate:2 1 udp 2130706431 172.16.7.2 10000 typ host generation 0
a=ssrc:2595439499 cname:mixed
a=ssrc:2595439499 msid:mixedmslabel mixedlabelvideo0
a=ssrc:2595439499 mslabel:mixedmslabel
a=ssrc:2595439499 label:mixedlabelvideo0
a=ssrc:1817162413 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:1817162413 msid:b1e9b86d-b3d8-4e82-8bd5-976bbbee2504-3 ff0d40fb-7f0c-4415-b829-8dc83f0983a8-3
a=ssrc:1817162413 mslabel:b1e9b86d-b3d8-4e82-8bd5-976bbbee2504-3
a=ssrc:1817162413 label:ff0d40fb-7f0c-4415-b829-8dc83f0983a8-3
a=ssrc:2616848778 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:2616848778 msid: FynYypde
a=ssrc:2616848778 mslabel:
a=ssrc:2616848778 label:FynYypde
a=ssrc:4179847871 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:4179847871 msid: J/UdIUn3
a=ssrc:4179847871 mslabel:
a=ssrc:4179847871 label:J/UdIUn3
a=ssrc:3134638345 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:3134638345 msid: Qb5Rxm8r
a=ssrc:3134638345 mslabel:
a=ssrc:3134638345 label:Qb5Rxm8r
a=ssrc:2525277372 cname:173621ae-1627-4a59-9cd9-d94b046025cb-3
a=ssrc:2525277372 msid: 5GFfzmB/
a=ssrc:2525277372 mslabel:
a=ssrc:2525277372 label:5GFfzmB/
a=ssrc:3509070960 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:3509070960 msid:9652a34c-1464-44f0-8083-89a72eaffb55-1 cbb04179-373b-4d02-8767-42301a483656-1
a=ssrc:3509070960 mslabel:9652a34c-1464-44f0-8083-89a72eaffb55-1
a=ssrc:3509070960 label:cbb04179-373b-4d02-8767-42301a483656-1
a=ssrc:2537822816 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:2537822816 msid: QMCpjCia
a=ssrc:2537822816 mslabel:
a=ssrc:2537822816 label:QMCpjCia
a=ssrc:2664502552 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:2664502552 msid: y7ZEZbRA
a=ssrc:2664502552 mslabel:
a=ssrc:2664502552 label:y7ZEZbRA
a=ssrc:1787389407 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:1787389407 msid: Vgi0cywf
a=ssrc:1787389407 mslabel:
a=ssrc:1787389407 label:Vgi0cywf
a=ssrc:162723145 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=ssrc:162723145 msid: b1Cz8uCQ
a=ssrc:162723145 mslabel:
a=ssrc:162723145 label:b1Cz8uCQ
a=ssrc:2203030703 cname:7a24f78b-641c-416e-8976-abb3cd270807-1
a=rtcp-mux
a=x-google-flag:conference
m=application 10000 DTLS/SCTP 5000
c=IN IP4 172.16.7.2
a=setup:actpass
a=mid:data
a=ice-ufrag:8nquh1cqhuvsb8
a=ice-pwd:58obnqbb3tbm95fkmaebvj49bh
a=fingerprint:sha-1 12:D4:6D:96:79:CC:44:92:74:AE:50:D5:2B:0E:9E:0D:8A:CE:83:A0
a=candidate:1 1 ssltcp 2130706431 172.16.7.2 4443 typ host generation 0
a=candidate:2 1 udp 2130706431 172.16.7.2 10000 typ host generation 0
a=sctpmap:5000 webrtc-datachannel 1024

172.16.7.2 is the server’s private addresse and 192.168.5.21 is the web user private user.