Failed By ICE timeout

[rukosenpa]

Good day.
I've deployed WCS 5.2.672 server with docker container from docker hub on dedicated server.
Can't get any stream, cause error "Failed by ICE timeout."
UDP ports are reachable(checked following this guide https://docs.flashphoner.com/display/WCS52EN/Accessory+tools#Accessorytools-Portroutingchecking)
Also added "ice_tcp_transport=true" to the end of the flashphoner.properties.

Ip tables output:
Chain INPUT (policy ACCEPT 2815 packets, 245K bytes)
num pkts bytes target prot opt in out source destination
1 312 53664 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:31000:32000

Chain FORWARD (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 224 67587 DOCKER-USER all -- * * 0.0.0.0/0 0.0.0.0/0
2 224 67587 DOCKER-ISOLATION-STAGE-1 all -- * * 0.0.0.0/0 0.0.0.0/0
3 403 234K ACCEPT all -- * docker0 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
4 0 0 DOCKER all -- * docker0 0.0.0.0/0 0.0.0.0/0
5 507 50775 ACCEPT all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
6 0 0 ACCEPT all -- docker0 docker0 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT 2654 packets, 5136K bytes)
num pkts bytes target prot opt in out source destination

Chain DOCKER (1 references)
num pkts bytes target prot opt in out source destination

Chain DOCKER-ISOLATION-STAGE-1 (1 references)
num pkts bytes target prot opt in out source destination
1 507 50775 DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 0.0.0.0/0 0.0.0.0/0
2 1157 367K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0

Chain DOCKER-ISOLATION-STAGE-2 (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- * docker0 0.0.0.0/0 0.0.0.0/0
2 643 64834 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0

Chain DOCKER-USER (1 references)
num pkts bytes target prot opt in out source destination
1 1157 367K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0

 

[rukosenpa]

After installing WCS as application(this guide https://docs.flashphoner.com/display/WCS52EN/WCS+installation+and+activation) and using it, error gone all streams work successfully.
so, please check docker setup

 

[Max]

Good day

Also added "ice_tcp_transport=true" to the end of the flashphoner.properties.

If you've enabled TCP transoprt by default, TCP media ports should also be opened, but they're not according to your iptables output. So please enable TCP media ports 31000:32000/tcp.
Please also collect a report as described here including traffic dump on WCS side, docker container launch configuration and docker network configuration, and send us using this link, we'll check and try to reproduce.

 

[Max]

Good day.
Please try to run the container using docker host network to publish stream from outside docker host:

docker run -e PASSWORD=password -e LICENSE=license -e EXTERNAL_IP=host_ip -e LOCAL_IP=host_ip --net host --name wcs-docker-test --rm -it flashphoner/webcallserver:latest

Here host_ip is the docker host external ip to which you connect using websocket
Another way is to use docker command line option --publish to publish container ports to docker host, but this is not recommended due to old docker issue that still is not fixed yet (docker tries to add every port in the range to iptables which is extremely slow for 1000 media ports)