Give JVB additional IP

Let's try giving Jitsi Videobridge an extra IP address for making media connections on port 443, as free-ing port 443 with #17 (closed) and #19 (closed) were not successful.

Alternatives are discussed here https://community.jitsi.org/t/videobridge-behind-nginx-proxy-443-4443-because-4443-port-is-closed/14913/2

In /etc/jitsi/videobridge/sip-communicator.properties

likely nothing has to be set, even not org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS as it searches on all interfaces

See https://github.com/jitsi/jitsi-videobridge/blob/master/doc/tcp.md

all harvester ice4j options: https://github.com/jitsi/ice4j/blob/master/doc/configuration.md#mapping-harvesters

Adding IP into separate file in /etc/network/interfaces.d/ and do a service networking restart which copies all into the interfaces file

https://linuxconfig.org/how-to-setup-a-static-ip-address-on-debian-linux

https://www.tagadab.com/knowledgebase/configuring-additional-ip-address-linux-server

We got 51.38.117.249

Following this tutorial https://docs.ovh.com/gb/en/vps/network-ipaliasing-vps/ and added to /etc/network/interfaces.d/50-cloud-init.cfg

auto ens3:0
iface ens3:0 inet static
address 51.38.117.249
netmask 255.255.255.255

ifup ens3:0

Filtering by interface does not work, only by addresses, see http://lists.jitsi.org/pipermail/dev/2015-February/023441.html

added to /etc/jitsi/videobridge/sip-communicator.properties

org.ice4j.ice.harvest.ALLOWED_ADDRESSES=51.38.117.249

and voilá:

org.jitsi.videobridge.IceUdpTransportManager.log() Initialized TCP harvester on port 443, using SSLTCP:true org.ice4j.ice.harvest.SinglePortUdpHarvester.() Initialized SinglePortUdpHarvester with address 51.38.117.249:10000/u dp JVB 2019-03-25 23:56:16.092 INFO: [27] org.ice4j.ice.harvest.AbstractTcpListener.addLocalAddresses() Not using link-local address /fe80:0:0:0:f816:3eff:fe6c:23fe% ens3 for TCP candidates. JVB 2019-03-25 23:56:16.093 INFO: [27] org.ice4j.ice.harvest.AbstractTcpListener.addLocalAddresses() Not using /54.37.204.4 for TCP candidates, because it is not in the allowed list.

closed

changed the description

mentioned in issue #17 (closed)

mentioned in issue #19 (closed)

mentioned in issue #25 (closed)

to do: IPv6 #32 (closed)