WebRTC firewall rules

[lurendrejer]

Hi.

We have a quite restrictive network setup, I have set up WebRTC in mesh - which works when used from a network allowing any traffic, to any networks.

What specific ports / protocols should be allowed to allow WebRTC to and from the more restrictive networks?

[si458]

webrtc doesnt use set port numbers,
it will use whatever port it feels like, and it will even use UDP if it can too

[lurendrejer]

ah... that makes sense.

[lurendrejer]

As far as i can see, it is not possible in the browser - but the 'mediaserver' in RTC terminology should be able to limit the portrange.
So, i the mesh-agent should be in control.

[si458]

then this would require extensive reconfig/recompile of the agent to support this
and wont be easy!

[lurendrejer]

The 'turn' server can also dictate this. I don't know if the meshcentral-server is an actual TURN server or something propriatary.

[si458]

meshcentral isnt a TURN server, its just the main server to setup the webrtc,
the client and agent talk directly to each other over webrtc IF POSSIBLE, and if not possible then just use the standard websockets which get relayed via your meshcentral server