How to create stun turn server instance using AWS EC2

Question

Actually i wants to use my own stun/Turn server instance and i want to use Amazon EC2 .If anybody has any idea regarding this please share with me the steps to create or any reference link to follow.

Jermyn

So I found a tutorial for doing this. Which parts do you need help with? Do you have any experience with EC2 at all? – Malaspina

@ Jordan : No,Actually i don't have any experience .Can you share this tutorial with me ? – Jermyn

Check out the rfc5766-turn-server project: code.google.com/p/rfc5766-turn-server – Mantoman

Did you ever get this going? – Malaspina

@ Jordan : I have used but i never created this. – Jermyn

Answer 1

do an ssh login to your ec2 instance, then run the below commands for installing and starting the turn server.

simple way:

sudo apt-get install coturn

If you say no, I want the latest cutting edge, you can download source code from their downloads page in install it yourself, example:

sudo -i     # ignore if you already in admin mode
apt-get update && apt-get install libssl-dev libevent-dev libhiredis-dev make -y    # install the dependencies
wget -O turn.tar.gz http://turnserver.open-sys.org/downloads/v4.5.0.3/turnserver-4.5.0.3.tar.gz     # Download the source tar
tar -zxvf turn.tar.gz     # unzip
cd turnserver-*
./configure
make && make install 

sample command for running TURN server:

turnserver -a -o -v -n -u user:root -p 3478 -L INT_IP -r someRealm -X EXT_IP/INT_IP  --no-dtls --no-tls

command description:

• -X - your amazon instance's external IP, internal IP: EXT_IP/INT_IP
• -p - port to be used, default 3478
• -a - Use long-term credentials mechanism
• -o - Run server process as daemon
• -v - 'Moderate' verbose mode.
• -n - no configuration file
• --no-dtls - Do not start DTLS listeners
• --no-tls - Do not start TLS listeners
• -u - user credentials to be used
• -r - default realm to be used, need for TURN REST API

in your WebRTC app, you can use trun server like:

{
    url: 'turn:user@EXT_IP:3478',
    credential: 'root'
}

Hit

@ mido22: I am using windows system.And your all lines are about linux system. – Jermyn

any particular reason for using windows OS in ec2 instance ? – Hit

what's exacly INT_IP? I thought the EC2 instance had only one public ip address (EXT_IP) – Angellaangelle

@GianlucaGhettini nope, two ips, one IP behind NAT, the internal one and one external public ip – Hit

Amazon Linux doesn't use apt, uses yum. After all, coturn isn't in repository. In order to compile source, someone needs to install libevent before; source: github.com/coturn/coturn/wiki/CoturnConfig – Carencarena

in ./configure command i got error like----- ginstall: not found install is /usr/bin/install pkill is /usr/bin/pkill sqlite3: not found sqlite: not found Use TMP dir /var/tmp Compiler: unknown ERROR: cannot use compiler unknown properly – Sessions

In case anyone else gets stuck on this in the future: make sure that your EC2 instance has allowed inbound UDP. From the EC2 management console, go to Network & Security -> Security Groups -> Choose the group you're using for your instance -> Click edit in the inbound tab -> Allow traffic as needed. – Hali

@AnubhavSrivastava what type of error would you get if you don't allow UDP? And what exactly are the option that I have to add in the inbound? – Guajardo

not all heroes wear capes, thx so much @Hit it works like a charm – Plumose

@AnubhavSrivastava you deserves a cookie too :) – Plumose

I followed the steps mentioned in the answer and found it's working in one of my EC2 instance but the same thing is not working at my other instance. I checked my inbound rules and found both are same. Here I should mention that to remove coturn and reinstall it I gave the following command first: sudo apt-get purge --auto-remove coturn Now whatever I do I can see its failing at webrtc.github.io/samples/src/content/peerconnection/trickle-ice – Giavani

I found the problem by checking my /var/log/syslog file. It was for the UFW firewall. After deactivating it it's working fine. – Giavani

is internal IP same as private IP and external IP the public IP? – Caresse

@Caresse yes. – Hit

@MushfiqurRahman I did test my turn server using trickle-ice page but it takes time to appear the 'Done'. So ICE Negotiation fails when I use it in my project. Any idea? – Kandi

@AnubhavSrivastava you definitely deserves a cookie :) – Dichromaticism

Answer 2

One method to install a turnserver on Amazon EC2 would be to choose Debian and to install the coturn package, which is the successor of the RFC5766-server.

The configuration file at /etc/turnserver.conf includes EC2 specific instructions. The information provided within this file is very exhaustive in general and should answer the majority of configuration questions.

Once configured, the coturn server can be stopped an started however you would any other service.

Massorete