Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NAT1TO1 and Stunner Turn Server #387

Open
Circenn5130 opened this issue Apr 14, 2024 · 0 comments
Open

NAT1TO1 and Stunner Turn Server #387

Circenn5130 opened this issue Apr 14, 2024 · 0 comments

Comments

@Circenn5130
Copy link

I've setup a turn server in K8s via Stunner's documentation. and while it works well outside my WAN, on LAN interfaces I'm seeing traffic on the firewall routing to both the stun server and Neko's UDP ports on the pod's IP address due to the following ref, in addition to a delay in connectivity and performance.

- name: NEKO_NAT1TO1
  valueFrom:
    fieldRef:
      fieldPath: status.podIP

Which seems to be attributed to the documentation.
image

When I was just using UDP ports on the cluster load balancer for Neko I was able to NAT these ports appropriately for WAN and LAN, but with the turn server in place, the Neko UDP service is on a ClusterIP and I'm really not sure how I'm supposed to configure NAT1to1 so connections aren't referenced to cluster IPs outside the cluster.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant