How to stop "TURN" service

[p44]

How I can stop TURN service?

It seems that someone is trying to attach to that listening ports and using a lot of resources.

I'm not using any voip at all.

Thank's

[nebulon]

@p44 generally there is no way to permanently stop a service at the moment. You can manually docker stop turn via SSH however it will be eventually restarted again by the platform on for example an update.

The coturn server as such is protected by an auth secret anyways. Also note that it may be used for anything webrtc related, not just voip. One example is p2p file sharing, like the filepizza app provides.

[p44]

@nebulon Thank's nebulon, but I want to stop it because someone toke as target and service run out of memory. I don't have any application using it so I think it is better to stop.

Do you plan to add feature to stop manually, even at reboot?

[nebulon]

@p44 agreed it looks like at least some throttling or rate-limiting is required.

So far there is no logic yet to start services on-demand based on the apps installed.

[girish]

You can docker stop turn that will stop the service if you don't use it. But you have to do this on every server reboot.

[d19dotca]

@girish @p44 - Thinking out loud here, I guess the workaround would be to run docker stop turn and then stick that in a cronjob on the server to run on boot, assuming it runs after the turn container is actually running. That way you don't have to remember to do that after every boot.

[p44]

@nebulon @girish @d19dotca Thank's a lot @d19dotca ! For me is a little bit complex append that command in cronjob and I don't know if Cloudron make some integrity test at boot time to try to check if turn is on or off.

Another solution is to use VPS provided firewall to lock that doors... But as @nebulon wrote, one improvement could be add rate-limiting and/or start that services on demand.

Thank's all for your answer