F5 load balancer in front of an OpenVidu CE

How to implement?
1

Hello,
is it possible to place an F5 load balancer in front of an OpenVidu CE machine installed on-premises in a DMZ, forwarding all traffic on the following ports?

  • 443 TCP: for the OpenVidu server and application (HTTPS)
  • 40000–57000 TCP/UDP: used by Kurento Media Server to establish media connections
  • 57001–65535 TCP/UDP: used by the TURN server to establish relayed media connections

Or does the OpenVidu server necessarily need to have direct access to the Internet?
In other words, is it possible to place an F5 in front and forward the required traffic without direct Internet access?

Thank you.

2

Hello @Benedetto_Diamante. In v2 technically you can expose port 443 TCP and 3478 UDP and the media should be forwarded by the Coturn server in 3478 to the Media Nodes.

OpenVidu 3.2.0 CE will have the possibility to configure an External Proxy easier. In fact, with 3.2.0 you can even expose 443 only, configure two domains, and all the traffic will go through the Load Balancer, but it affects a bit the quality and resource usage.

3

@Benedetto_Diamante You can now follow these guides: Deploy and configure with an external proxy - openVidu