Nextcloud Talk not working with symmetric nat

sebelk · April 6, 2018, 4:01pm

Hi,

Nextcloud Talk It works fine, except when combining chrome behind symmetric nat from one of the end-points.

Software versions:

Nextcloud: 13.0.1
OS: Nethserver 7.4 (Based on CentOS 7.4)
turnserver: 4.5.0.7-0.el7.centos.x86_64
Apache: httpd-2.4.6-67.el7.centos.6.x86_64
php: 7.1

My file configuration is:

listening-port=3478
external-ip=A.B.62.65
verbose
fingerprint
lt-cred-mech
use-auth-secret
static-auth-secret=north
realm=example
realm=example.com
total-quota=100
bps-capacity=0
stale-nonce
no-stdout-log
log-file=/var/tmp/turn.log
syslog
no-loopback-peers
no-multicast-peers
pidfile="/var/run/turnserver/turnserver.pid"

Logs:

https://pastebin.com/LknHvmnk

Chrome webrtc log:

{
   "time": "5/4/2018 11:10:00",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:834334544 1 tcp 1518214911 169.254.221.170 9 typ host tcptype active generation 3 ufrag O65j network-id 2"
  },
  {
   "time": "5/4/2018 11:10:00",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:698720429 1 tcp 1518149375 192.168.0.172 9 typ host tcptype active generation 3 ufrag O65j network-id 3"
  },
  {
   "time": "5/4/2018 11:10:00",
   "type": "iceGatheringStateChange",
   "value": "ICEGatheringStateComplete"
  },
  {
   "time": "5/4/2018 11:10:00",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:453123902 1 tcp 1518280447 169.254.165.102 9 typ host tcptype active generation 4 ufrag Mk3f network-id 1"
  },
  {
   "time": "5/4/2018 11:10:00",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:834334544 1 tcp 1518214911 169.254.221.170 9 typ host tcptype active generation 4 ufrag Mk3f network-id 2"
  },
  {
   "time": "5/4/2018 11:10:00",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:698720429 1 tcp 1518149375 192.168.0.172 9 typ host tcptype active generation 4 ufrag Mk3f network-id 3"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 51550 typ relay raddr A.B.62.65 rport 51550"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:2 2 UDP 1686052606 X.Y.22.158 51600 typ srflx raddr X.Y.22.158 rport 51600"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:3 2 UDP 92217086 A.B.62.65 60900 typ relay raddr A.B.62.65 rport 60900"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 63570 typ relay raddr A.B.62.65 rport 63570"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:5 2 UDP 8331262 A.B.62.65 64576 typ relay raddr A.B.62.65 rport 64576"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:2 1 UDP 1686052607 X.Y.22.158 60135 typ srflx raddr X.Y.22.158 rport 60135"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 55497 typ relay raddr A.B.62.65 rport 55497"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 64274 typ relay raddr A.B.62.65 rport 64274"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:2 2 UDP 1686052606 X.Y.22.158 34579 typ srflx raddr X.Y.22.158 rport 34579"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:3 2 UDP 92217086 A.B.62.65 56351 typ relay raddr A.B.62.65 rport 56351"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:5 2 UDP 8331262 A.B.62.65 49873 typ relay raddr A.B.62.65 rport 49873"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:2 1 UDP 1686052607 X.Y.22.158 57948 typ srflx raddr X.Y.22.158 rport 57948"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 58395 typ relay raddr A.B.62.65 rport 58395"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 65379 typ relay raddr A.B.62.65 rport 65379"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 59565 typ srflx raddr X.Y.22.158 rport 59565"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:1 2 UDP 1686052862 X.Y.22.158 51600 typ srflx raddr X.Y.22.158 rport 51600"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 60135 typ srflx raddr X.Y.22.158 rport 60135"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:1 2 UDP 1686052862 X.Y.22.158 34579 typ srflx raddr X.Y.22.158 rport 34579"
  },
  {
   "time": "5/4/2018 11:10:01",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 57948 typ srflx raddr X.Y.22.158 rport 57948"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "setRemoteDescription",
   "value": "type: offer, sdp: v=0\r\no=mozilla...THIS_IS_SDPARTA-59.0.1 184788975573963010 5 IN IP4 0.0.0.0\r\ns=-\r\nt=0 0\r\na=fingerprint:sha-256 D0:94:93:90:C4:57:A3:B5:B1:FA:70:FC:8F:48:B9:B5:55:4F:7B:A9:D9:C9:9E:EF:AB:CC:25:CF:2C:28:8C:50\r\na=group:BUNDLE sdparta_0 sdparta_1 sdparta_2\r\na=ice-options:trickle\r\na=msid-semantic:WMS *\r\nm=audio 9 UDP/TLS/RTP/SAVPF 109 9 0 8 101\r\nc=IN IP4 0.0.0.0\r\na=sendrecv\r\na=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level\r\na=extmap:2 urn:ietf:params:rtp-hdrext:sdes:mid\r\na=fmtp:109 maxplaybackrate=48000;stereo=1;useinbandfec=1\r\na=fmtp:101 0-15\r\na=ice-pwd:6531ff9565d2277774ce8e02adb1bdba\r\na=ice-ufrag:cebdf79d\r\na=mid:sdparta_0\r\na=msid:{0c9a2427-b963-42e7-b79e-2f75d1aa7512} {b15cef0d-86d4-49c0-839e-da967a890688}\r\na=rtcp-mux\r\na=rtpmap:109 opus/48000/2\r\na=rtpmap:9 G722/8000/1\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:101 telephone-event/8000/1\r\na=setup:actpass\r\na=ssrc:1778239820 cname:{648ca888-3bd2-4951-8948-f2cf02add2cc}\r\nm=video 9 UDP/TLS/RTP/SAVPF 120 121 126 97\r\nc=IN IP4 0.0.0.0\r\na=sendrecv\r\na=extmap:1 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time\r\na=extmap:2 urn:ietf:params:rtp-hdrext:toffset\r\na=extmap:3 urn:ietf:params:rtp-hdrext:sdes:mid\r\na=fmtp:126 profile-level-id=42e01f;level-asymmetry-allowed=1;packetization-mode=1\r\na=fmtp:97 profile-level-id=42e01f;level-asymmetry-allowed=1\r\na=fmtp:120 max-fs=12288;max-fr=60\r\na=fmtp:121 max-fs=12288;max-fr=60\r\na=ice-pwd:6531ff9565d2277774ce8e02adb1bdba\r\na=ice-ufrag:cebdf79d\r\na=mid:sdparta_1\r\na=msid:{0c9a2427-b963-42e7-b79e-2f75d1aa7512} {a95a2012-b6bd-477a-b1b8-7df1b643619c}\r\na=rtcp-fb:120 nack\r\na=rtcp-fb:120 nack pli\r\na=rtcp-fb:120 ccm fir\r\na=rtcp-fb:120 goog-remb\r\na=rtcp-fb:121 nack\r\na=rtcp-fb:121 nack pli\r\na=rtcp-fb:121 ccm fir\r\na=rtcp-fb:121 goog-remb\r\na=rtcp-fb:126 nack\r\na=rtcp-fb:126 nack pli\r\na=rtcp-fb:126 ccm fir\r\na=rtcp-fb:126 goog-remb\r\na=rtcp-fb:97 nack\r\na=rtcp-fb:97 nack pli\r\na=rtcp-fb:97 ccm fir\r\na=rtcp-fb:97 goog-remb\r\na=rtcp-mux\r\na=rtpmap:120 VP8/90000\r\na=rtpmap:121 VP9/90000\r\na=rtpmap:126 H264/90000\r\na=rtpmap:97 H264/90000\r\na=setup:actpass\r\na=ssrc:1101844125 cname:{648ca888-3bd2-4951-8948-f2cf02add2cc}\r\nm=application 9 DTLS/SCTP 5000\r\nc=IN IP4 0.0.0.0\r\na=sendrecv\r\na=ice-pwd:6531ff9565d2277774ce8e02adb1bdba\r\na=ice-ufrag:cebdf79d\r\na=mid:sdparta_2\r\na=sctpmap:5000 webrtc-datachannel 256\r\na=setup:actpass\r\na=max-message-size:1073741823\r\n"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:2 1 UDP 1686052607 X.Y.22.158 37392 typ srflx raddr X.Y.22.158 rport 37392"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "signalingStateChange",
   "value": "SignalingStateHaveRemoteOffer"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "setRemoteDescriptionOnSuccess",
   "value": ""
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "createAnswer",
   "value": "constraints: {{offerToReceiveAudio: {exact: 1}, offerToReceiveVideo: {exact: 1}}}"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "createAnswerOnSuccess",
   "value": "type: answer, sdp: v=0\r\no=- 8894099899879203464 7 IN IP4 127.0.0.1\r\ns=-\r\nt=0 0\r\na=group:BUNDLE sdparta_0 sdparta_1 sdparta_2\r\na=msid-semantic: WMS 9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\nm=audio 9 UDP/TLS/RTP/SAVPF 109 9 0 8 101\r\nc=IN IP4 0.0.0.0\r\na=rtcp:9 IN IP4 0.0.0.0\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_0\r\na=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level\r\na=sendrecv\r\na=rtcp-mux\r\na=rtpmap:109 opus/48000/2\r\na=fmtp:109 minptime=10;useinbandfec=1\r\na=rtpmap:9 G722/8000\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:101 telephone-event/8000\r\na=ssrc:132513049 cname:dOszY6psLnQTpU1/\r\na=ssrc:132513049 msid:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0 5e4aa72d-ccbe-49c9-96c1-4dd682232cde\r\na=ssrc:132513049 mslabel:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\na=ssrc:132513049 label:5e4aa72d-ccbe-49c9-96c1-4dd682232cde\r\nm=video 9 UDP/TLS/RTP/SAVPF 120 121 126\r\nc=IN IP4 0.0.0.0\r\na=rtcp:9 IN IP4 0.0.0.0\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_1\r\na=extmap:2 urn:ietf:params:rtp-hdrext:toffset\r\na=extmap:1 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time\r\na=sendrecv\r\na=rtcp-mux\r\na=rtpmap:120 VP8/90000\r\na=rtcp-fb:120 goog-remb\r\na=rtcp-fb:120 ccm fir\r\na=rtcp-fb:120 nack\r\na=rtcp-fb:120 nack pli\r\na=rtpmap:121 VP9/90000\r\na=rtcp-fb:121 goog-remb\r\na=rtcp-fb:121 ccm fir\r\na=rtcp-fb:121 nack\r\na=rtcp-fb:121 nack pli\r\na=rtpmap:126 H264/90000\r\na=rtcp-fb:126 goog-remb\r\na=rtcp-fb:126 ccm fir\r\na=rtcp-fb:126 nack\r\na=rtcp-fb:126 nack pli\r\na=fmtp:126 level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f\r\na=ssrc:207379318 cname:dOszY6psLnQTpU1/\r\na=ssrc:207379318 msid:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0 dd706e87-0cce-4286-88cb-8047b6e8c7ff\r\na=ssrc:207379318 mslabel:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\na=ssrc:207379318 label:dd706e87-0cce-4286-88cb-8047b6e8c7ff\r\nm=application 9 DTLS/SCTP 5000\r\nc=IN IP4 0.0.0.0\r\nb=AS:30\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_2\r\na=sctpmap:5000 webrtc-datachannel 1024\r\n"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "setLocalDescription",
   "value": "type: answer, sdp: v=0\r\no=- 8894099899879203464 7 IN IP4 127.0.0.1\r\ns=-\r\nt=0 0\r\na=group:BUNDLE sdparta_0 sdparta_1 sdparta_2\r\na=msid-semantic: WMS 9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\nm=audio 9 UDP/TLS/RTP/SAVPF 109 9 0 8 101\r\nc=IN IP4 0.0.0.0\r\na=rtcp:9 IN IP4 0.0.0.0\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_0\r\na=extmap:1 urn:ietf:params:rtp-hdrext:ssrc-audio-level\r\na=sendrecv\r\na=rtcp-mux\r\na=rtpmap:109 opus/48000/2\r\na=fmtp:109 minptime=10;useinbandfec=1\r\na=rtpmap:9 G722/8000\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:101 telephone-event/8000\r\na=ssrc:132513049 cname:dOszY6psLnQTpU1/\r\na=ssrc:132513049 msid:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0 5e4aa72d-ccbe-49c9-96c1-4dd682232cde\r\na=ssrc:132513049 mslabel:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\na=ssrc:132513049 label:5e4aa72d-ccbe-49c9-96c1-4dd682232cde\r\nm=video 9 UDP/TLS/RTP/SAVPF 120 121 126\r\nc=IN IP4 0.0.0.0\r\na=rtcp:9 IN IP4 0.0.0.0\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_1\r\na=extmap:2 urn:ietf:params:rtp-hdrext:toffset\r\na=extmap:1 http://www.webrtc.org/experiments/rtp-hdrext/abs-send-time\r\na=sendrecv\r\na=rtcp-mux\r\na=rtpmap:120 VP8/90000\r\na=rtcp-fb:120 goog-remb\r\na=rtcp-fb:120 ccm fir\r\na=rtcp-fb:120 nack\r\na=rtcp-fb:120 nack pli\r\na=rtpmap:121 VP9/90000\r\na=rtcp-fb:121 goog-remb\r\na=rtcp-fb:121 ccm fir\r\na=rtcp-fb:121 nack\r\na=rtcp-fb:121 nack pli\r\na=rtpmap:126 H264/90000\r\na=rtcp-fb:126 goog-remb\r\na=rtcp-fb:126 ccm fir\r\na=rtcp-fb:126 nack\r\na=rtcp-fb:126 nack pli\r\na=fmtp:126 level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f\r\na=ssrc:207379318 cname:dOszY6psLnQTpU1/\r\na=ssrc:207379318 msid:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0 dd706e87-0cce-4286-88cb-8047b6e8c7ff\r\na=ssrc:207379318 mslabel:9rPXwl4zqFSlik7BKMUgWepRpwKiMxSzIiu0\r\na=ssrc:207379318 label:dd706e87-0cce-4286-88cb-8047b6e8c7ff\r\nm=application 9 DTLS/SCTP 5000\r\nc=IN IP4 0.0.0.0\r\nb=AS:30\r\na=ice-ufrag:+sbW\r\na=ice-pwd:+uRpuI2aVwpmqJJ/YmSGeWPJ\r\na=ice-options:trickle\r\na=fingerprint:sha-256 2F:09:A0:BB:8B:65:86:F3:21:77:9F:F3:E2:9C:B2:1E:7C:B9:C7:A8:84:4A:C6:35:1C:4A:1E:7C:02:9B:C0:A5\r\na=setup:active\r\na=mid:sdparta_2\r\na=sctpmap:5000 webrtc-datachannel 1024\r\n"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "signalingStateChange",
   "value": "SignalingStateStable"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "setLocalDescriptionOnSuccess",
   "value": ""
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "iceGatheringStateChange",
   "value": "ICEGatheringStateGathering"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:1434575822 1 udp 2122260223 169.254.165.102 53275 typ host generation 5 ufrag +sbW network-id 1"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:2134447008 1 udp 2122194687 169.254.221.170 53276 typ host generation 5 ufrag +sbW network-id 2"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:1730567261 1 udp 2122129151 192.168.0.172 53277 typ host generation 5 ufrag +sbW network-id 3"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:453123902 1 tcp 1518280447 169.254.165.102 9 typ host tcptype active generation 4 ufrag Mk3f network-id 1"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:834334544 1 tcp 1518214911 169.254.221.170 9 typ host tcptype active generation 4 ufrag Mk3f network-id 2"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:698720429 1 tcp 1518149375 192.168.0.172 9 typ host tcptype active generation 4 ufrag Mk3f network-id 3"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "iceGatheringStateChange",
   "value": "ICEGatheringStateComplete"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:453123902 1 tcp 1518280447 169.254.165.102 9 typ host tcptype active generation 5 ufrag +sbW network-id 1"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:834334544 1 tcp 1518214911 169.254.221.170 9 typ host tcptype active generation 5 ufrag +sbW network-id 2"
  },
  {
   "time": "5/4/2018 11:10:13",
   "type": "onIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: candidate:698720429 1 tcp 1518149375 192.168.0.172 9 typ host tcptype active generation 5 ufrag +sbW network-id 3"
  },
  {
   "time": "5/4/2018 11:10:14",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 56535 typ relay raddr A.B.62.65 rport 56535"
  },
  {
   "time": "5/4/2018 11:10:14",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:2 2 UDP 1686052606 X.Y.22.158 34174 typ srflx raddr X.Y.22.158 rport 34174"
  },
  {
   "time": "5/4/2018 11:10:14",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:3 2 UDP 92217086 A.B.62.65 61672 typ relay raddr A.B.62.65 rport 61672"
  },
  {
   "time": "5/4/2018 11:10:14",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 53634 typ relay raddr A.B.62.65 rport 53634"
  },
  {
   "time": "5/4/2018 11:10:14",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:5 2 UDP 8331262 A.B.62.65 49367 typ relay raddr A.B.62.65 rport 49367"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:2 1 UDP 1686052607 X.Y.22.158 45751 typ srflx raddr X.Y.22.158 rport 45751"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 61577 typ relay raddr A.B.62.65 rport 61577"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 51137 typ relay raddr A.B.62.65 rport 51137"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:2 2 UDP 1686052606 X.Y.22.158 44856 typ srflx raddr X.Y.22.158 rport 44856"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:3 2 UDP 92217086 A.B.62.65 51670 typ relay raddr A.B.62.65 rport 51670"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:5 2 UDP 8331262 A.B.62.65 64722 typ relay raddr A.B.62.65 rport 64722"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:2 1 UDP 1686052607 X.Y.22.158 59337 typ srflx raddr X.Y.22.158 rport 59337"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:3 1 UDP 92217087 A.B.62.65 57640 typ relay raddr A.B.62.65 rport 57640"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:5 1 UDP 8331263 A.B.62.65 60248 typ relay raddr A.B.62.65 rport 60248"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 37392 typ srflx raddr X.Y.22.158 rport 37392"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_0, sdpMLineIndex: 0, candidate: a=candidate:1 2 UDP 1686052862 X.Y.22.158 34174 typ srflx raddr X.Y.22.158 rport 34174"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 45751 typ srflx raddr X.Y.22.158 rport 45751"
  },
  {
   "time": "5/4/2018 11:10:15",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_1, sdpMLineIndex: 1, candidate: a=candidate:1 2 UDP 1686052862 X.Y.22.158 44856 typ srflx raddr X.Y.22.158 rport 44856"
  },
  {
   "time": "5/4/2018 11:10:16",
   "type": "addIceCandidate",
   "value": "sdpMid: sdparta_2, sdpMLineIndex: 2, candidate: a=candidate:1 1 UDP 1686052863 X.Y.22.158 59337 typ srflx raddr X.Y.22.158 rport 59337"
  },
  {
   "time": "5/4/2018 11:10:29",
   "type": "iceConnectionStateChange",
   "value": "ICEConnectionStateFailed"
  }
 ],
 "url": "https://A.B.62.65:4430/nextcloud/index.php/call/q7z42eaj"
}
},
"UserAgent": "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
}

From the Firefox (the another end point):

Local candidate	Remote candidate	ICE State	Priority	Nominado	Seleccionado
192.168.80.152:37392/udp(host)	192.168.0.172:53277/udp(host)	failed	9114475305677750000	false	false
A.B.62.65:56535/udp(relayed-udp)	192.168.0.172:53277/udp(host)	failed	396069377041645060	false	false
A.B.62.65:53634/udp(relayed-tcp)	192.168.0.172:53277/udp(host)	failed	35782506363633150	false	false

Please could you tell me where is the error?

Thanks in advance

mario · April 6, 2018, 4:05pm

TURN should usually resolve the issue and in this case something is probably misconfigured. How did you configure TURN in your Nextcloud admin interface?

sebelk · April 6, 2018, 4:13pm

@mario This the configuration:

"spreed": {
            "enabled": "yes",
            "installed_version": "3.1.0",
            "signaling_ticket_secret": "Xn56P4Gryim++K+vwISmEp1tzDRqn6Z8I6OTREUqXNUX\/1pPkJalwoh8HDrAOYRghicMsDi3Z0yz2kO2o\/RyxHX7PrJXdOWItaPryTrBwG7e6PMvvw+NSFhyunLA0Pl1htEnHT7i5x6nMnoPIhAfM6BWL+u+y+IWgjMNtT0t4uH22ZbFX3f4NdywyDMIjPt1KwYoAnzMThhuaoRor\/FOtL5b9ICs35VkxF89Mq42iDhzO5+mecXDj2ABy\/zyk+O",
            "stun_servers": "[\"stun.nextcloud.com:443\",\"192.168.50.3:3478\",\"A.B.62.65:3478\"]",
            "turn_servers": "[{\"server\":\"192.168.50.3:3478\",\"secret\":\"mysecret\",\"protocols\":\"udp,tcp\"},{\"server\":\"A.B.62.65:3478\",\"secret\":\"mysecret\",\"protocols\":\"udp,tcp\"}]",
            "types": "prevent_group_restriction"
        },

mario · April 6, 2018, 4:34pm

Ergh, wait what? You have two Turn servers configured?

sebelk · April 6, 2018, 5:03pm

@mario Well I added 2 ip address because one is the private IP (turn server is in the same host that NextCloud) and the public IP belongs to nat device.

Is it not right?

mario · April 6, 2018, 5:15pm

Please try just with the public IP where TURN can be accessed.

sebelk · April 9, 2018, 6:09pm

@mario I’ve deleted the private such a line and it worked.

Thanks a lot!

PS: The only case when it does not work is when one end try to connect using openvpn and the other one connects normally. I guess that is because VPNed end try to use the private ip address of interface tun0 instead of public one, isn’t it?