About the ports that need to be opened behind the firewall

[kip9696]

I am configuring a server behind a firewall

udp range changed to 20000-25000 and service ports(ex 8080, 8888 more....) opened

Mainly used module is rtsp to Webrtc
But I cant receive webrtc video


When all ports are open, I can receive Video
But When closed except that port, I just receive ice timeout

Please tell me the port information to be opened in addition to the UDP port.



And How can i change WebSocket port?

reply please
Thank you

 

[Max]

Good day.
Let's have a look to firewalld example setup script (this is used in Digital Ocean Marketplace image for example) for default ports

#!/bin/bash
#
systemctl start firewalld
# Websocket ports
firewall-cmd --permanent --zone=public --add-port=8443/tcp
firewall-cmd --permanent --zone=public --add-port=8080/tcp
# RTMP ports
firewall-cmd --permanent --zone=public --add-port=1935/tcp
firewall-cmd --permanent --zone=public --add-port=1935/udp
# REST API and web interface ports
firewall-cmd --permanent --zone=public --add-port=8081/tcp
firewall-cmd --permanent --zone=public --add-port=8444/tcp
firewall-cmd --permanent --zone=public --add-port=8888/tcp
# CDN port (if needed)
firewall-cmd --permanent --zone=public --add-port=8084/tcp
# HLS server ports
firewall-cmd --permanent --zone=public --add-port=8082/tcp
firewall-cmd --permanent --zone=public --add-port=8445/tcp
# WebRTC media ports (both UDP and TCP)
firewall-cmd --permanent --zone=public --add-port=30000-33000/udp
firewall-cmd --permanent --zone=public --add-port=30000-33000/tcp
firewall-cmd --reload

All ports should be opened for incoming connections, including WebRTC media ports. All outgoing connections must be allowed.
If you are using this media ports

media_port_from=20000
media_port_to=25000

you should open 20000-25000/udp for incoming connections

And How can i change WebSocket port?

Use ws.port and wss.port parameters in flashphoner.properties file to set Websocket and Secure Websocket ports respectively. By default:

ws.port=8080
wss.port=8443

 

[kip9696]

Thank you for reply
I have one more question

See attached photo
When i raise the server through docker, the cpu is occupied
Only the conf folder is mounted and used

And..When I command /service webcallserver restart /
,I show this message..

FlashphonerWebCallServer: not running
FlashphonerWebCallServer: starting

Of course, ths cpu load is not reduced



Why is this?

 

[Max]

When i raise the server through docker, the cpu is occupied

If you are using our official docker image, please use build 5.2.798
If you are using custom docker image, and installing WCS manually into this image, use build 5.2.798 and JDK 12 or 14 to prevent CPU consumption.

 

[kip9696]

But Already I used build 5.2.798... official docker image

Is the problem with the conf folder being mounted outside?

 

[Max]

But Already I used build 5.2.798... official docker image

There is no systemctl in official docker image. WCS should not be stopped or started manually, but whole container only

Is the problem with the conf folder being mounted outside?

Please clarify how do you starting WCS container. Also, mount logs folder as decribed here, collect the logs while java process comsuming CPU, and provide us:
- command to start WCS container
- conf folder contents you mount
- logs folder contents
using this private form

 

[kip9696]

I kept changing /usr/local/FlashphonerWebCallServer/conf

I refer to the guide and put it in /conf/ and it works fine. Thank you