Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Connecting external users via their proxy #1869

Open
Tam-Ov opened this issue Aug 1, 2024 · 3 comments
Open

Connecting external users via their proxy #1869

Tam-Ov opened this issue Aug 1, 2024 · 3 comments

Comments

@Tam-Ov
Copy link

Tam-Ov commented Aug 1, 2024

Hi.
We have server behind a NAT.
Added lines
org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=192.....
org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=18.....

External users are connecting normally. But there are problems for those external users who use a proxy. They see and hear only themselves.
Wireshark shows that traffic on port 10000 does not go through a proxy, there is an attempt to connect to external ip address.

Internet Protocol Version 4, Src: 192.168.1.26, Dst: 18X.....202
User Datagram Protocol, Src Port: 54052, Dst Port: 10000

Help me understand why data on port 443 goes through a proxy, but data on port 10000 does not

@Tam-Ov Tam-Ov changed the title Proxy Connecting external users via their proxy Aug 1, 2024
@saghul
Copy link
Member

saghul commented Aug 1, 2024

What type of proxy are they using? Any chance they are blocking UDP traffic?

@Tam-Ov
Copy link
Author

Tam-Ov commented Aug 1, 2024

They using squid.
In squid allowed all traffic to udp 10000. 443 goes through squid. 10000 port goes through the computer’s gateway, not through squid. Need to additionally open 10000 port in firewall of a third-party organization

@saghul
Copy link
Member

saghul commented Aug 1, 2024

Yes squid is an HTTP proxy, so they need to allow traffic to UDP port 10000 on the outbound.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants