OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: fpn on May 21, 2020, 07:57:26 AM

Title: webrtc Reflexive connectivity fails (NAT traversal)
Post by: fpn on May 21, 2020, 07:57:26 AM
I noticed that I had some issues establishing webrtc peer connections via my upnsense firewall.

I ran the connectivity test at https://test.webrtc.org/

And got:
Reflexive connectivity (failed)
[ INFO ] Gathered candidate of Type: srflx Protocol: udp Address: x.x.x.x
[ INFO ] Gathered candidate of Type: srflx Protocol: udp Address: x.x.x.x
[ WARN ] Could not connect using reflexive candidates, likely due to the network environment/configuration.

(x.x.x.x = my external WAN ip)


I did check the box "Automatic outbound NAT for reflection".
Title: Re: webrtc Reflexive connectivity fails (NAT traversal)
Post by: Maurice on May 23, 2020, 12:51:02 AM
This particular test is known to be rather meaningless and doesn't work with most firewalls. Here's a pretty good explanation: https://github.com/webrtc/testrtc/issues/302

(As far as I know, "automatic outbound NAT for reflection" only applies to port forwards, so it's unrelated.)

Cheers

Maurice
Title: Re: webrtc Reflexive connectivity fails (NAT traversal)
Post by: fpn on May 29, 2020, 01:58:09 AM
Well it isn't only the test that fails. I can't webrtc without a TURN server... and in my mind STUN should work.