Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ports table according to WPB-2043 #3920

Merged
merged 1 commit into from
Apr 9, 2024
Merged

Update ports table according to WPB-2043 #3920

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 13 additions & 1 deletion docs/src/how-to/install/sft.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -123,6 +123,7 @@ An SFT instance does **not** communicate with other SFT instances, TURN does tal
Recapitulation table:

```{eval-rst}

+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Name | Origin | Destination | Direction | Protocol | Ports | Action (Policy) | Description |
+============================+=============+=============+===========+==========+=============================================================================+======================================+===============================================================================================================================================================================================+
Expand All @@ -136,8 +137,19 @@ Recapitulation table:
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Allowing SFT media ingress | Any | Here | Incoming | UDP | 32768-61000 | Allow | Allow ports in the "Ephemeral range" (https://en.wikipedia.org/wiki/Ephemeral_port), defined by the Linux Kernel ass the range from ports 32768 to 61000, used for UDP transmission of media. |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+ |
| Allowing SFT media egress | Here | Anny | Outgoing | UDP | 32768-61000 | Allow | |
| Allowing SFT media egress | Here | Any | Outgoing | UDP | 32768-61000 | Allow | |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Federation traffic in | Any | Here | Incoming | UDP/DTLS | 9191 | Allow | The TURN-servers communicate via this port. Either encrypted or unencrypted. |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+ |
| Federation traffic out | Here | Any | Outgoing | UDP/DTLS | 9191 | Allow | |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Coturn control in | Any | Here | Incoming | TCP | 3478 | Allow | (STUN and TURN (TCP), helm setting: `coturn:coturnTurnListenPort`) |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Coturn control in (TLS) | Any | Here | Incoming | TCP/TLS | 3478 | Allow | (STUN and TURN (TLS via TCP), helm setting: `coturn:coturnTurnTlsListenPort`) |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Coturn control in (UDP) | Any | Here | Incoming | UDP | 3478 | Allow | (STUN and TURN (UDP), helm setting: `coturn:coturnTurnListenPort`) |
+----------------------------+-------------+-------------+-----------+----------+-----------------------------------------------------------------------------+--------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

```

*For more information, please refer to the source code of the Ansible role:* [sft-server](https://github.com/wireapp/ansible-sft/blob/develop/roles/sft-server/tasks/traffic.yml).
Loading