Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

Cloudron Forum

Apps | Demo | Docs | Install

Cloudron with Nextcloud Talk can't connect calls after v20 upgrade

Scheduled Pinned Locked Moved Support
nextcloud talkturn
23 Posts 5 Posters 952 Views
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • robiR Offline
    robiR Offline
    robi
    wrote on last edited by girish
    #1

    v19 used to work fine, calls connect.
    v20 voice/video calls ring, but just wait to connect forever.

    No other configuration changed, and we still have port 3478 enabled in the ISP router firewall as the NC is on NAT behind it.

    The only error/failure in the logs is this snippet:

    2020-11-26T23:30:37.000Z [Thu Nov 26 23:30:37.764174 2020] [php7:notice] [pid 544] [client 172.18.0.1:43104] {"reqId":"9yitCKVWq90cnsnMuJA7","level":3,"time":"2020-11-26T23:30:37+00:00","remoteAddr":"x.x.x.x","user":"rob","app":"PHP","method":"GET","url":"/ocs/v1.php/cloud/user?format=json","message":"fopen(/dev/stderr): failed to open stream: No such file or directory at /app/code/lib/private/Log/File.php#85","userAgent":"Mozilla/5.0 (iOS) Nextcloud-Talk v10.1.0","version":"20.0.1.1"}
    

    Hence not sure if this has to do with any port changes on the NC side or changes in call routing?

    • We have tested with a fresh install, no change, no call.
    • We have tested with a fresh clone, no change, no call.
    • We installed Kopano, no change, no calls connect.
    • We have tested with another Cloudron NC:T (VPS, no NAT) and the same user from the same NAT network, and we could connect a call.

    Looking at the logs from the other Cloudron NC:T instance, there are no such log snippets or call error logs. (probably because it just worked)

    Kopano install has logs that point to other internal warnings and errors, but nothing useful to help debug this and looks to be using an external TURN service by default:

    2020-11-27T18:21:49.000Z time="2020-11-27T18:21:49Z" level=info msg="using external TURN service: https://turnauth.kopano.com/turnserverauth/"
    

    So this seems either Cloudron TURN server related or new port opening requirement for NC:T for which we don't have any info.

    How do we get this working again?

    Life of sky tech

    girishG 2 Replies Last reply
    0
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #2

    @robi Thanks for the extensive testing! Can you also test with a fresh install of NC 19? You can do this by clicking NC on the app store and then change the package version in the URL bar as 4.6.5 (it will say 4.8.1 now). That will help us isolate it to most likely something network related.

    robiR 1 Reply Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #3

    Thanks to LDAP we didn't have to redo user accounts, but no luck connecting with v19 now either.

    Odd.

    Nothing interesting in the app logs again.

    Life of sky tech

    1 Reply Last reply
    0
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #4

    @robi said in Cloudron with Nextcloud Talk can't connect calls after v20 upgrade:

    We have tested with another Cloudron NC:T (VPS, no NAT) and the same user from the same NAT network, and we could connect a call.

    This seems then something TURN and NAT related. I think non firefox, you can go to about:webrtc to see what is happenning

    robiR 2 Replies Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #5

    @girish this just leads to a search or invalid URL error.

    tried in chrome based browsers
    about:webrtc
    chrome:webrtc
    vivaldi:webrtc

    nothing.

    Tried in FF, and that brings up the WebRTC internals page.

    Life of sky tech

    1 Reply Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #6

    @girish you have an email with logs.

    Life of sky tech

    girishG 2 Replies Last reply
    0
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #7

    @robi thanks, @nebulon and I decided to make a test call tomorrow on our instance to see if this is a general problem or something to do you with your install/network.

    1 Reply Last reply
    1
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #8

    @robi Johannes and I tried a whole bunch of calls. Calls fail now and then. But if we refresh browser connect/discoonect, it connects eventually. I could connect reliably in chrome but not in firefox. If I start a call in firefox, then johannes can never join it. It fails with "WebRTC: ICE failed, see about:webrtc for more details" for me in the console.

    Not sure, what the final outcome of all this is. It's basically, "your mileage may vary". Maybe should be reported upstream?

    robiR 2 Replies Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #9

    @girish Thanks for testing.

    It's disappointing that what once worked so well and is the basis of the self-hosted install is now unusable.

    Furthermore, there don't appear to be sufficient logs figure out what could possible be adjusted. What about the TURN server logs? TCP/UDP ports?

    Even stranger is that depending on who initiates the connection, an audio stream manages to connect, but only in one direction.

    Since VPS Cloudrons work well, I'm leaning towards the router port forwarding, but which ports will make a difference??

    Life of sky tech

    1 Reply Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #10

    @girish Do you have a better idea of what to report upstream vs 'now it doesn't work' ?

    Life of sky tech

    nebulonN girishG 2 Replies Last reply
    0
  • nebulonN Offline
    nebulonN Offline
    nebulon Staff
    replied to robi on last edited by
    #11

    @robi it more looks like some state handling issue in Nextcloud talk and not so much an issue in the TURN server or port setup, if it works sometimes and sometimes not.

    I guess for your setup to gain some more insight would be to check if you are able to make calls at all even if only sometimes and also test kopano meet to check if this is even similar to what we have seen.

    Generally when reporting something here upstream it will surely help to send a dump of the browser console logs alongside, Nextcloud talk outputs a lot of debugging info, I assume this is there for a reason...

    1 Reply Last reply
    0
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #12

    @robi I don't know what to exactly "report". (TBH, If I did, I would have reported it upstream myself 🙂 ). I didn't investigate much but I couldn't figure how to get meaningful logs for the nextcloud devs.

    robiR 1 Reply Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #13

    @girish it seems to be a difference between single port usage and multi port usage via TURN server. The former used to work fine but may have been deprecated?

    My gut instinct was telling me it's also port related.

    Doing some more testing we enabled UDP ports in the 50,000 range and began to have better call connection results.

    Final tweak was realizing that one of the clients had a mobile VPN enabled which only dropped incoming audio connections but not outgoing. 🤦 :

    So if you can validate your testing with @nebulon that adding the UDP ports to the NAT Firewall lets you connect, that would give enough data for an upstream report.

    Life of sky tech

    girishG 1 Reply Last reply
    0
  • girishG Offline
    girishG Offline
    girish Staff
    replied to robi on last edited by
    #14

    @robi said in Cloudron with Nextcloud Talk can't connect calls after v20 upgrade:

    So if you can validate your testing with @nebulon that adding the UDP ports to the NAT Firewall lets you connect, that would give enough data for an upstream report.

    FWIW, we tested with a Cloudron on a VPS, so there is cloud/NAT firewall. Indeed, if you have a NAT firewall those ports have to be opened up. I will add it to https://docs.cloudron.io/security/#cloud-firewall

    robiR 1 Reply Last reply
    1
  • robiR Offline
    robiR Offline
    robi
    replied to girish on last edited by
    #15

    @girish right, yet this all used to work fine with a single port until the latest changes. Not sure if that was planned or a regression.

    Life of sky tech

    jdaviescoatesJ 1 Reply Last reply
    0
  • jdaviescoatesJ Offline
    jdaviescoatesJ Offline
    jdaviescoates
    replied to robi on last edited by
    #16

    ...and I'm not sure if this issue effects me/ everyone or not? Is there someone extra we now all have to do to get Nextcloud Talk working after a v20 upgrade?

    I use Cloudron with Gandi & Hetzner

    robiR 1 Reply Last reply
    0
  • robiR Offline
    robiR Offline
    robi
    replied to jdaviescoates on last edited by
    #17

    @jdaviescoates only if you're behind a NATing firewall.

    VPS Cloudrons are not affected.
    Home and Office Cloudrons would be and need to have the appropriate port forwarding set up if expecting calls with other users outside the local network to connect.

    Life of sky tech

    1 Reply Last reply
    1
  • ? Offline
    ? Offline
    A Former User
    wrote on last edited by A Former User
    #18

    I'd like to revive this. Looks like its still an issue for me. For context I have even tried making my server the DMZ on my router to rule out DNS issues. Here are my ports I've forwarded. It just loads for me and anyone I try and invite.

    Screen Shot 2020-12-16 at 8.36.13 PM.png

    Any ideas? @girish @robi

    EDIT: Just tried local connections and it works... O_O

    1 Reply Last reply
    1
  • ? Offline
    ? Offline
    A Former User
    wrote on last edited by A Former User
    #19

    So one issue I noticed is that when I use my Adguard DNS to talk to someone with nextcloud talk it works. When I use the default DNS server I have issues. Odd...

    EDIT: I have some TURN logs I sent in via a support ticket btw

    EDIT 2: Nevermind the adguard trick only works on my phone... unsure whats going on.

    EDIT 3: Nevermind again. Seems like this issue is happening for me in the browser??? works fine afaik on the iOS/Android app.

    1 Reply Last reply
    0
  • ? Offline
    ? Offline
    A Former User
    wrote on last edited by A Former User
    #20

    Incredibly confusing and frustrating. I guess I'll look at it more in the morning...

    girishG 1 Reply Last reply
    0

  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Login

  • Don't have an account? Register

  • Login or register to search.