[Freeswitch-users] Anyone running FS 1.6 + Video in Google Cloud (or AWS)?

[Ken Rice]

Keep in mind that you might see the UDP coming from any available port not
just what you have defined in FreeSWITCH... The setting in FreeSWITCH (see
switch.conf.xml) only addresses the local UDP ports freeswitch will use for
its end of the call.

If you are trying to firewall this down to both local and remote ports you
firewall rules are just too restrictive


On 6/4/15, 10:59 AM, "Victor Medina" <victor.medina at cibersys.com> wrote:

> Regarding point #2
> 
> 2.  Documentation on FreeSWITCH network configuration says to open UDP
> ports 16384-32768.  But, I am seeing UDP ports up into the 60K range, so
> either enable the port-limit parameters or extend the UDP range on the
> firewall.
> 
> 
> Would this be a good advice? In general? explicitly telling fs to use a
> defined range of ports?
> 
> 2015-06-03 19:26 GMT-04:30 Anthony Minessale <anthony.minessale at gmail.com>:
>> Also make sure you update every single day and are on master.  The branch is
>> dead now.
>> 
>> 
>> On Wednesday, June 3, 2015, Jack <jack at livecall.com> wrote:
>>>     
>>>  Craig, 
>>>   changing the ext-rtp-ip  to my external IP was my last hurdle to make it
>>> work.  
>>>  
>>>  
>>>  make sure you have
>>>   <param name="tls-cert-dir" value="$${internal_tls_dir}"/>
>>>  uncommitted in your internal.xml and have your certs in the directory. 
>>>  
>>>  make sure you are loading these mods modules.conf.xml
>>>   <load module="mod_rtc"/>
>>>  <load module="mod_verto"/>
>>>  <load module="mod_opus"/>
>>>  
>>>  good luck,
>>>   Jack
>>>  
>>>  
>>> On 6/3/2015 9:18 AM, Craig Stevenson wrote:
>>>  
>>>  
>>>>  
>>>> I think there may be additional advise that is not documented on the FS 1.6
>>>> + Video install pages...
>>>> 
>>>>  
>>>>  
>>>> Please correct me if I am missing something here, but the following edits
>>>> are needed:
>>>>  
>>>> 
>>>>  
>>>>  
>>>>>  
>>>>> 1.  Set ext-rtp-up parameter (IPv4 profile) in
>>>>> .../conf/autoload_configs/verto.conv.xml.  Otherwise, Verto will not
>>>>> initiate a connection stun:stun.freeswitch.org
>>>>> <http://stun.freeswitch.org>  and the FreeSWITCH instance will use private
>>>>> IP addresses instead of public IP address in the offered SDP (WebRTC
>>>>> client can't return packets to a private network).
>>>>>  
>>>>> 
>>>>>  
>>>>>  
>>>>>  
>>>>>>  
>>>>>> Replace:  <!--  <param name="ext-rtp-ip" value=""/> -->
>>>>>>  
>>>>>  
>>>>>  
>>>>>  
>>>>>>  
>>>>>> With:   <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
>>>>>>  
>>>>>  
>>>>>  
>>>>>  
>>>>>>  
>>>>>> 
>>>>>>  
>>>>>>  
>>>>>  
>>>>>  
>>>>> 2.  Documentation on FreeSWITCH network configuration says to open UDP
>>>>> ports 16384-32768.  But, I am seeing UDP ports up into the 60K range, so
>>>>> either enable the port-limit parameters or extend the UDP range on the
>>>>> firewall.
>>>>>  
>>>>> 
>>>>>  
>>>>>  
>>>>  
>>>> 
>>>>  
>>>>  
>>>> With these changes, FreeSWITCH is now using STUN to learn its public IP
>>>> address and the firewall is no longer blocking return UDP packets from the
>>>> WebRTC client.
>>>>  
>>>> 
>>>>  
>>>>  
>>>> -- Craig
>>>>  
>>>> 
>>>>  
>>>>  
>>>> p.s., There are still a few more "secret codes" I need to find to make the
>>>> demo properly work; I'd welcome any additional hints from others who have
>>>> made it all the way down this path.
>>>>  
>>>> 
>>>>  
>>>>  
>>>> 
>>>>  
>>>>  
>>>>  
>>>> 
>>>>  
>>>> On Mon, Jun 1, 2015 at 7:36 AM, Anthony Minessale
>>>> <anthony.minessale at gmail.com> wrote:
>>>>  
>>>>> All virtual usage of FS is at your own risk.
>>>>> The only real advice is you MUST use dedicated instances and there still
>>>>> is no guarentee.
>>>>>  
>>>>>  
>>>>>  
>>>>> 
>>>>>  
>>>>>  
>>>>> 
>>>>>  
>>>>>  On Sunday, May 31, 2015, Craig Stevenson <craig at stevenson.com> wrote:
>>>>>  
>>>>>>  
>>>>>> Has anyone brought up FS 1.6 + video on a Google Cloud instance?  Any
>>>>>> tips or tricks that I need to know?
>>>>>> 
>>>>>>  
>>>>>>  
>>>>>> Alternatively, what about instances on the AWS EC2 cloud?
>>>>>>  
>>>>>> 
>>>>>>  
>>>>>>  
>>>>>> 
>>>>>>  
>>>>>>  
>>>>>>  
>>>>>> 
>>>>>>  
>>>>>>  
>>>>>>  
>>>>>>  
>>>>>  
>>>>>  
>>>>>  
>>>>>  
>>>>>  
>>>>>  

-- 
Ken
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org
irc.freenode.net #freeswitch
Twitter: @FreeSWITCH


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150604/f3d30c73/attachment.html