121 Commits (00a4a970d5cb0b5e2bbc8fc4aeb3d8f7c0d12e73)

Author	SHA1	Message	Date
Pavel Punsky	59921981bb	Implement configurable buffer sizes (#1780) ... # Description Replace the hardcoded buffer sizes inside coturn to make them configurable for different use cases (low bitrate use cases can save memory and high bitrate use case can avoid congestion) - based on #1089 Add this feature in both sides (listener and relay connections). # Tests For now it is only the automated CI tests. Confirmed with debugger that buffer sizes are set according to the arguments.	2 months ago
Pavel Punsky	14f84fa48c	[BREAKING] Deprecate response-origin-only-with-rfc5780 (#1690) ... Make this true - response-origin-only will only be enabled with rfc5780 option enabled	10 months ago
Pavel Punsky	4cc076d424	[BREAKING] Invert no-stun-backward-compatibility to be default on (#1689) ... Deprecate `--no-stun-backward-compatibility` and set it to true by default Add new option `--stun-backward-compatibility`, off by default Update example/recommended configuration files This is a breaking change as passing `--no-stun-backward-compatibility` will be rejected as invalid argument	10 months ago
Pavel Punsky	368355a06f	Invert RFC5780 option to default off (#1688) ... Invert `--no-rfc5780` option to be true by default Make it `--rfc5780` to enable it Update example/recommended configuration files Passing `--no-rfc5780` will have no effect as this is the default behavior now	10 months ago
Pavel Punsky	94fcfadce1	[BREAKING] Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic (#1598) ... As part of looking at #1588 , I figured that sending `SOFTWARE` attribute is also part of a problem as it increases messages sent out by coturn and thus increasing amplification factor. For 4.6.2, the additional size is 24 bytes (4 bytes attribute header, and 20 bytes for "Coturn-4.6.2 'Gorst'") If we are to use an example from #1588, "A 62 byte request will be met with Coturn’s 401 Unauthorized response which is 150 bytes, a factor of ~2.42." - without SOFTWARE the response will be 126 bytes which reduces amplification factor to ~2. As I observed with multiple providers using coturn - some of the are sending it. Meaning, they do not set `--no-software-attribute` - most probably due to lack of clarity about this setting. I believe sending SOFTWARE_ATTRIBUTE should be off by default which is hinted in the RFC (https://datatracker.ietf.org/doc/html/rfc8489#section-16.1.2) Detailed changes: - Extract setting the attribute into a function to avoid code duplication - This option is now not reloadable - The option is now called `software_attribute` because inverse logic creates multiple double-not in the code which makes it harder to read. - `no-software_attribute` is still functional but marked as deprecated in documentation Test Plan: - Run local tests with different cli arguments (new and deprecated) and confirm SOFTWARE attribute is off by default, and added when arguments say so	1 year ago
Nikolayshcx	eb3af26867	Add support for raw public keys (Rfc 7250) (#1458) ... Resolving #1456 --------- Co-authored-by: nmegdanov <nikolay.megdanov@softavail.com>	2 years ago
czephyr	19744a4a39	added warnings for prometheus apt unavailability (#1184) ... added some warnings that the prometheus implementation is unavailable when installing through apt coturn/coturn#1133	3 years ago
Pavel Punsky	85c11b69e3	Move and split documentation files (#1096) ... This is not a long term documentation works - this is a temp proposal to modernize existing documentation - Create docs folder - Move existing documentation files into docs - Split one massive INSTALL files into smaller files (no text editing was done except small markdown header formatting) - Rename files to be markdowns for nicer rendering - Bad md rendering is expected in many places	3 years ago
Molly Miller	902cb99849	Add configuration option for TLS 1.3 ciphersuites (#1118) ... There are two different API's in OpenSSL for configuring TLS ciphers, one for TLS 1.2 and below, and another for TLS 1.3. coturn only calls the TLS 1.2 API when handling the `--cipher-list` configuration option, which means that it's not possible to use non-default ciphersuites with TLS 1.3 connections. This PR calls appropriate OpenSSL API to allow TLS 1.3 ciphersuites to be configured.	3 years ago
Molly Miller	bc1678cc52	Regenerate manual pages from README files (#1117) ... This PR fixes some typos and formatting, and regenerates the manual pages from the README files. These changes were originally included in #1105, however I've split them out into a separate PR as requested.	3 years ago
Pavel Punsky	22e51044cd	Generate AUTHORS as Markdown, update references (#1102) ... Refs #1049	3 years ago
Pavel Punsky	4bab2adba4	Use a single SSL context object (#989) ... openssl allows multiple TLS version support through a single SSL_CTX object. This PR replaces 4 per-version SSL_CTX objects with a single object (DTLS is not yet changed). SSL context initialization code for openssl with modern API (>=1.1.0) uses `TLS_server_method` and `SSL_CTX_set_min_proto_version` instead of enabling specific TLS version. Byproduct of this is TLSv1_3 support when used with openssl-1.1.1 and above TLS 1.2 and TLS 1.3 cannot be disabled (as before) Test plan: - run_tests.sh script now runs turnserver with SSL certificate (which enables TLS support) - run_tests.sh now has one more basic test that uses TLS protocol Co-authored-by: Pavel Punsky <pavel.punsky@epicgames.com>	3 years ago
Molly Miller	6fd08bac3b	Invert logic for handling username metrics labels.	4 years ago
Molly Miller	299fcea34c	Make username labeling in metrics configurable.	4 years ago
Benjamin Porter	45e8217dbe	Fix typo aa -> a	4 years ago
Lionel Nicolas	19495b2d1d	Add ability to configure prometheus listener port	4 years ago
Lionel Nicolas	c42cd844de	Fix typo and formatting in --prometheus documentation	4 years ago
Mészáros Mihály	708b83ea78	RESPONSE_ORIGIN attribute only if rfc5780 is on	5 years ago
Mészáros Mihály	54ef051844	Disable stun backward compatibility	5 years ago
Mészáros Mihály	eda11698f0	Add option no-rfc5780 ... To avoid any amplifiaction STUN binding attacks.	5 years ago
Mészáros Mihály	2204778ce1	Replace keep-address-family with allocation-default-address-family	5 years ago
Ruben Barkow-Kuder	5bb25dbfaf	Update README.turnserver	5 years ago
Mészáros Mihály	104ab83f09	Automatically notify systemd if compiled	5 years ago
Mészáros Mihály	c6347d4c84	Fix typo	5 years ago
Ruben Barkow-Kuder	fa86379538	Readme.turnserver: how to run server as a daemon	5 years ago
Mészáros Mihály	ef7916842d	Add systemd notification support	5 years ago
Mészáros Mihály	14f1630ec6	Fix stale-nonce documentation Resolves #604	5 years ago
Mészáros Mihály	27b261eb58	Disable binding logging to avoid DoS attack ... * Add new option log-binding	5 years ago
Mészáros Mihály	1300021c6f	Correct acme-redirect man and readme	5 years ago
Mészáros Mihály	08bb62ea88	Update README to fix #658	5 years ago
Mészáros Mihály	b0fb4a9a0a	Rename new timestamp options, and fix these cli handling	5 years ago
Mészáros Mihály	9a0d9d8c5d	Replace new-timestamp_format=>new-timestamp-format	5 years ago
Mészáros Mihály	50f789ab5a	Add new timestamp options to the README and man	5 years ago
Samuel	315341d204	Fix misleading option in doc ... While that prometheus exporter was initially enabled by default, it looks like there's been a change of plan, resulting in some inconsistencies in the doc. The `--no-prometheus` option was replaced by a `--prometheus` one -- according to https://github.com/wolmi/coturn/blob/master/src/apps/relay/mainrelay.c#L540	6 years ago
Mészáros Mihály	388d939ed9	Change prometheus exporter port to 9641	6 years ago
Mészáros Mihály	2acb952670	tidy after PR #517	6 years ago
Miquel Ortega	6680bf17ba	Added prometheus to README	6 years ago
Greg Fodor	9102773ef0	Remove unnecessary characters in README.turnserver	6 years ago
Greg Fodor	7c1573ddb9	Update manpages and README	6 years ago
Mészáros Mihály	fb8dc8a736	Change DH key size default from 1066 to 2066	6 years ago
Paul Menzel	fa3f2797c2	README.*: Strip trailing spaces	6 years ago
Danilo Bargen	520e172b22	Rename "prod" config option to "no-software-attribute" ... As discussed in https://github.com/coturn/coturn/pull/478, if the parameter only controls whether or not to send the software attribute and not other production-relevant configurations, it should be named accordingly. The old --prod configuration option still works, but is now deprecated and undocumented.	6 years ago
Bertold Van den Bergh	ace903fd07	Add support for loadbalanced TCP connections (haproxy protocol v2)	6 years ago
chanduthedev	c317a19334	Some more typo's fixed	6 years ago
chanduthedev	0259b9115c	Type corrected. ... Replace sinse with 'since' and sever with 'server'.	6 years ago
Mészáros Mihály	856c3c9ff6	Fix typos and other regressions	7 years ago
Mészáros Mihály	d550dd200c	replace email address	8 years ago
Mészáros Mihály	23cfaa1253	add --web-admin-listen-on-workers	8 years ago
Mészáros Mihály	419468476b	Add Web-Admin to README	8 years ago
Mészáros Mihály	0f11578982	Add warning to config & readme/man ... Add warning about that allow-loopback-peer and empty cli-password is not allowed together.	8 years ago