5 min read
WebRTC behind a firewall: TURN over TLS on port 443
Calls that fail on corporate networks usually need TURN over TLS on 443. How to configure it, confirm it works, and why it should stay the last resort.
turnice
Topic
WebRTC ICE in production: candidate gathering, STUN and TURN, ICE restarts, renomination and getting a call reconnected after a network change.
3 articles
Calls that fail on corporate networks usually need TURN over TLS on 443. How to configure it, confirm it works, and why it should stay the last resort.
iceCandidatePoolSize gathers STUN and TURN candidates before the offer exists. In Chromium it cut gathering from 456ms to 2ms. It only works once.
When a phone moves from Wi-Fi to cellular, an ICE restart costs a full offer/answer. Against your own SFU there are faster ways to move the call.