I think there may be additional advise that is not documented on the FS 1.6 + Video install pages... Please correct me if I am missing something here, but the following edits are needed: 1. Set ext-rtp-up parameter (IPv4 profile) in .../conf/autoload_configs/verto.conv.xml. Otherwise, Verto will not initiate a connection stun:stun.freeswitch.org and the FreeSWITCH instance will use private IP addresses instead of public IP address in the offered SDP (WebRTC client can't return packets to a private network). Replace: <!-- <param name="ext-rtp-ip" value=""/> --> With: <param name="ext-rtp-ip" value="$${external_rtp_ip}"/> 2. Documentation on FreeSWITCH network configuration says to open UDP ports 16384-32768. But, I am seeing UDP ports up into the 60K range, so either enable the port-limit parameters or extend the UDP range on the firewall. With these changes, FreeSWITCH is now using STUN to learn its public IP address and the firewall is no longer blocking return UDP packets from the WebRTC client. -- Craig p.s., There are still a few more "secret codes" I need to find to make the demo properly work; I'd welcome any additional hints from others who have made it all the way down this path. On Mon, Jun 1, 2015 at 7:36 AM, Anthony Minessale < anthony.minessale@gmail.com> wrote:

All virtual usage of FS is at your own risk. The only real advice is you MUST use dedicated instances and there still is no guarentee.

On Sunday, May 31, 2015, Craig Stevenson <craig@stevenson.com> wrote:

...

Has anyone brought up FS 1.6 + video on a Google Cloud instance? Any tips or tricks that I need to know?

Alternatively, what about instances on the AWS EC2 cloud?

-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬

☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*

ClueCon Weekly Development Call [image: ☎] sip:888@conference.freeswitch.org [image: ☎] +19193869900

https://www.youtube.com/watch?v=9XXgW34t40s https://www.youtube.com/watch?v=NLaDpGQuZDA

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

Also make sure you update every single day and are on master. The branch is dead now. On Wednesday, June 3, 2015, Jack <jack@livecall.com> wrote:

Craig, changing the ext-rtp-ip to my external IP was my last hurdle to make it work.

make sure you have <param name="tls-cert-dir" value="$${internal_tls_dir}"/> uncommitted in your internal.xml and have your certs in the directory.

make sure you are loading these mods modules.conf.xml <load module="mod_rtc"/> <load module="mod_verto"/> <load module="mod_opus"/>

good luck, Jack

On 6/3/2015 9:18 AM, Craig Stevenson wrote:

I think there may be additional advise that is not documented on the FS 1.6 + Video install pages...

Please correct me if I am missing something here, but the following edits are needed:

1. Set ext-rtp-up parameter (IPv4 profile) in .../conf/autoload_configs/verto.conv.xml. Otherwise, Verto will not initiate a connection stun:stun.freeswitch.org and the FreeSWITCH instance will use private IP addresses instead of public IP address in the offered SDP (WebRTC client can't return packets to a private network).

Replace: <!-- <param name="ext-rtp-ip" value=""/> -->

With: <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>

2. Documentation on FreeSWITCH network configuration says to open UDP ports 16384-32768. But, I am seeing UDP ports up into the 60K range, so either enable the port-limit parameters or extend the UDP range on the firewall.

With these changes, FreeSWITCH is now using STUN to learn its public IP address and the firewall is no longer blocking return UDP packets from the WebRTC client.

-- Craig

p.s., There are still a few more "secret codes" I need to find to make the demo properly work; I'd welcome any additional hints from others who have made it all the way down this path.

On Mon, Jun 1, 2015 at 7:36 AM, Anthony Minessale < anthony.minessale@gmail.com <javascript:_e(%7B%7D,'cvml','anthony.minessale@gmail.com');>> wrote:

...

All virtual usage of FS is at your own risk. The only real advice is you MUST use dedicated instances and there still is no guarentee.

On Sunday, May 31, 2015, Craig Stevenson <craig@stevenson.com <javascript:_e(%7B%7D,'cvml','craig@stevenson.com');>> wrote:

...

Has anyone brought up FS 1.6 + video on a Google Cloud instance? Any tips or tricks that I need to know?

Alternatively, what about instances on the AWS EC2 cloud?

-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬

☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*

ClueCon Weekly Development Call [image: ☎] sip:888@conference.freeswitch.org <javascript:_e(%7B%7D,'cvml','sip:888@conference.freeswitch.org');> [image: ☎] +19193869900

ClueCon Testimonials <https://www.youtube.com/watch?v=9XXgW34t40s> ClueCon This Summer <https://www.youtube.com/watch?v=NLaDpGQuZDA>

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>http://www.freeswitchsolutions.com

Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....

FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...

No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4800 / Virus Database: 4311/9934 - Release Date: 06/03/15

-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬ ☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>* ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900 https://www.youtube.com/watch?v=9XXgW34t40s https://www.youtube.com/watch?v=NLaDpGQuZDA

Keep in mind that you might see the UDP coming from any available port not just what you have defined in FreeSWITCH... The setting in FreeSWITCH (see switch.conf.xml) only addresses the local UDP ports freeswitch will use for its end of the call. If you are trying to firewall this down to both local and remote ports you firewall rules are just too restrictive On 6/4/15, 10:59 AM, "Victor Medina" <victor.medina@cibersys.com> wrote:

Regarding point #2

2.  Documentation on FreeSWITCH network configuration says to open UDP ports 16384-32768.  But, I am seeing UDP ports up into the 60K range, so either enable the port-limit parameters or extend the UDP range on the firewall.

Would this be a good advice? In general? explicitly telling fs to use a defined range of ports?

2015-06-03 19:26 GMT-04:30 Anthony Minessale <anthony.minessale@gmail.com>:

...

Also make sure you update every single day and are on master.  The branch is dead now.

On Wednesday, June 3, 2015, Jack <jack@livecall.com> wrote:

...

Craig,  changing the ext-rtp-ip  to my external IP was my last hurdle to make it work. 

make sure you have  <param name="tls-cert-dir" value="$${internal_tls_dir}"/> uncommitted in your internal.xml and have your certs in the directory. 

make sure you are loading these mods modules.conf.xml  <load module="mod_rtc"/> <load module="mod_verto"/> <load module="mod_opus"/>

good luck,  Jack

On 6/3/2015 9:18 AM, Craig Stevenson wrote:

...

I think there may be additional advise that is not documented on the FS 1.6 + Video install pages...

Please correct me if I am missing something here, but the following edits are needed:

...

1.  Set ext-rtp-up parameter (IPv4 profile) in .../conf/autoload_configs/verto.conv.xml.  Otherwise, Verto will not initiate a connection stun:stun.freeswitch.org <http://stun.freeswitch.org> and the FreeSWITCH instance will use private IP addresses instead of public IP address in the offered SDP (WebRTC client can't return packets to a private network).

...

Replace:  <!--  <param name="ext-rtp-ip" value=""/> -->

...

With:   <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>

...

2.  Documentation on FreeSWITCH network configuration says to open UDP ports 16384-32768.  But, I am seeing UDP ports up into the 60K range, so either enable the port-limit parameters or extend the UDP range on the firewall.

With these changes, FreeSWITCH is now using STUN to learn its public IP address and the firewall is no longer blocking return UDP packets from the WebRTC client.

-- Craig

p.s., There are still a few more "secret codes" I need to find to make the demo properly work; I'd welcome any additional hints from others who have made it all the way down this path.

On Mon, Jun 1, 2015 at 7:36 AM, Anthony Minessale <anthony.minessale@gmail.com> wrote:

...

All virtual usage of FS is at your own risk. The only real advice is you MUST use dedicated instances and there still is no guarentee.

On Sunday, May 31, 2015, Craig Stevenson <craig@stevenson.com> wrote:

...

Has anyone brought up FS 1.6 + video on a Google Cloud instance?  Any tips or tricks that I need to know?

Alternatively, what about instances on the AWS EC2 cloud?

-- Ken http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org irc.freenode.net #freeswitch Twitter: @FreeSWITCH