Openvidu docker instance refuses all connections

Issues with deployment
1

I installed OpenVidu v2.16.0 according to official docs to docker. All seems OK, but I am not able to connect. All connections are refused. Host OS is MacOS BigSur. Firewall is disabled.

My log files:
openvidu-server_1 |
openvidu-server_1 |
openvidu-server_1 | =======================================
openvidu-server_1 | = LAUNCH OPENVIDU-SERVER =
openvidu-server_1 | =======================================
openvidu-server_1 |
openvidu-server_1 | ______________________________________________
openvidu-server_1 | ____ __ ___ _
openvidu-server_1 | / __ \ \ \ / () | |
openvidu-server_1 | | | | | __ ___ _ \ \ / / _ | | _
openvidu-server_1 | | | | | ’ \ / _ \ ’ \ / / | |/ ` | | | |
openvidu-server_1 | | |__| | |) | / | | \ / | | (| | || |
openvidu-server_1 | _/| ./ __|| ||/ ||_,|_,|
openvidu-server_1 | | |
openvidu-server_1 | || version 2.16.0
openvidu-server_1 | ______________________________________________
openvidu-server_1 |
openvidu-server_1 | [INFO] 2020-12-28 12:43:45,949 [main] io.openvidu.server.OpenViduServer - Starting OpenViduServer on docker-desktop with PID 24 (/openvidu-server.jar started by root in /)
openvidu-server_1 | [INFO] 2020-12-28 12:43:45,975 [main] io.openvidu.server.OpenViduServer - No active profile set, falling back to default profiles: default
openvidu-server_1 | [ERROR] 2020-12-28 12:43:46,861 [main] io.openvidu.server.config.OpenviduConfig - .env file not found at /.env
openvidu-server_1 | [INFO] 2020-12-28 12:43:47,096 [main] io.openvidu.server.OpenViduServer - Started OpenViduServer in 3.307 seconds (JVM running for 5.008)
openvidu-server_1 | [INFO] 2020-12-28 12:43:47,109 [main] io.openvidu.server.OpenViduServer -
openvidu-server_1 |
openvidu-server_1 |
openvidu-server_1 | Configuration properties
openvidu-server_1 | ------------------------
openvidu-server_1 |
openvidu-server_1 | * CERTIFICATE_TYPE=selfsigned
openvidu-server_1 | * DOMAIN_OR_PUBLIC_IP=192.168.11.25
openvidu-server_1 | * HTTPS_PORT=443
openvidu-server_1 | * KMS_URIS=[“ws://localhost:8888/kurento”]
openvidu-server_1 | * OPENVIDU_CDR=false
openvidu-server_1 | * OPENVIDU_CDR_PATH=/opt/openvidu/cdr
openvidu-server_1 | * OPENVIDU_RECORDING=false
openvidu-server_1 | * OPENVIDU_RECORDING_AUTOSTOP_TIMEOUT=120
openvidu-server_1 | * OPENVIDU_RECORDING_COMPOSED_BASICAUTH=true
openvidu-server_1 | * OPENVIDU_RECORDING_COMPOSED_URL=
openvidu-server_1 | * OPENVIDU_RECORDING_CUSTOM_LAYOUT=/opt/openvidu/custom-layout
openvidu-server_1 | * OPENVIDU_RECORDING_DEBUG=false
openvidu-server_1 | * OPENVIDU_RECORDING_NOTIFICATION=publisher_moderator
openvidu-server_1 | * OPENVIDU_RECORDING_PATH=/opt/openvidu/recordings
openvidu-server_1 | * OPENVIDU_RECORDING_PUBLIC_ACCESS=false
openvidu-server_1 | * OPENVIDU_RECORDING_VERSION=2.16.0
openvidu-server_1 | * OPENVIDU_SECRET=MY_SECRET
openvidu-server_1 | * OPENVIDU_SESSIONS_GARBAGE_INTERVAL=900
openvidu-server_1 | * OPENVIDU_SESSIONS_GARBAGE_THRESHOLD=3600
openvidu-server_1 | * OPENVIDU_STREAMS_VIDEO_MAX_RECV_BANDWIDTH=1000
openvidu-server_1 | * OPENVIDU_STREAMS_VIDEO_MAX_SEND_BANDWIDTH=1000
openvidu-server_1 | * OPENVIDU_STREAMS_VIDEO_MIN_RECV_BANDWIDTH=300
openvidu-server_1 | * OPENVIDU_STREAMS_VIDEO_MIN_SEND_BANDWIDTH=300
openvidu-server_1 | * OPENVIDU_WEBHOOK=false
openvidu-server_1 | * OPENVIDU_WEBHOOK_ENDPOINT=
openvidu-server_1 | * OPENVIDU_WEBHOOK_EVENTS=[sessionCreated,sessionDestroyed,participantJoined,participantLeft,webrtcConnectionCreated,webrtcConnectionDestroyed,recordingStatusChanged,filterEventDispatched,mediaNodeStatusChanged]
openvidu-server_1 | * OPENVIDU_WEBHOOK_HEADERS=[]
openvidu-server_1 |
openvidu-server_1 |
openvidu-server_1 |
openvidu-server_1 | [WARN] 2020-12-28 12:43:47,117 [main] io.openvidu.server.OpenViduServer - You have set property server.port (or SERVER_PORT). This will serve OpenVidu Server on your host at port 5443. But property HTTPS_PORT (443) still configures the port that should be used to connect to OpenVidu Server from outside. Bear this in mind when configuring a proxy in front of OpenVidu Server
openvidu-server_1 | [INFO] 2020-12-28 12:43:47,118 [main] io.openvidu.server.OpenViduServer - Using /dev/urandom for secure random generation
openvidu-server_1 | [INFO] 2020-12-28 12:43:47,395 [main] io.openvidu.server.OpenViduServer - Starting OpenViduServer on docker-desktop with PID 24 (/openvidu-server.jar started by root in /)
openvidu-server_1 | [INFO] 2020-12-28 12:43:47,397 [main] io.openvidu.server.OpenViduServer - No active profile set, falling back to default profiles: default
openvidu-server_1 | [ERROR] 2020-12-28 12:43:50,119 [main] io.openvidu.server.config.OpenviduConfig - .env file not found at /.env
openvidu-server_1 | [INFO] 2020-12-28 12:43:50,859 [main] org.springframework.boot.web.embedded.tomcat.TomcatWebServer - Tomcat initialized with port(s): 5443 (http)
openvidu-server_1 | [INFO] 2020-12-28 12:43:50,892 [main] org.apache.coyote.http11.Http11NioProtocol - Initializing ProtocolHandler [“http-nio-0.0.0.0-5443”]
openvidu-server_1 | [INFO] 2020-12-28 12:43:50,895 [main] org.apache.catalina.core.StandardService - Starting service [Tomcat]
openvidu-server_1 | [INFO] 2020-12-28 12:43:50,897 [main] org.apache.catalina.core.StandardEngine - Starting Servlet engine: [Apache Tomcat/9.0.39]
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,109 [main] org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/] - Initializing Spring embedded WebApplicationContext
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,110 [main] org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext - Root WebApplicationContext: initialization completed in 3594 ms
openvidu-server_1 | [WARN] 2020-12-28 12:43:51,616 [main] io.openvidu.server.rest.ApiRestPathRewriteFilter - Support for deprecated REST API paths enabled. Update your REST API clients to use the new paths
openvidu-server_1 | [WARN] 2020-12-28 12:43:51,617 [main] io.openvidu.server.rest.ApiRestPathRewriteFilter - Deprecated path support will be removed in a future release. You can disable old path support to test compatibility with property SUPPORT_DEPRECATED_API=false
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,746 [main] io.openvidu.server.OpenViduServer - OpenVidu CDR service is disabled (may be enable with ‘OPENVIDU_CDR=true’)
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,746 [main] io.openvidu.server.OpenViduServer - OpenVidu Webhook service is disabled (may be enabled with ‘OPENVIDU_WEBHOOK=true’)
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,808 [main] io.openvidu.server.OpenViduServer - OpenVidu Server using one KMS: ws://localhost:8888/kurento
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,886 [JsonRpcClient-hearbeatExec-e1-t0] org.kurento.jsonrpc.client.JsonRpcClientNettyWebSocket - [KurentoClient] Connecting native client
openvidu-server_1 | [INFO] 2020-12-28 12:43:51,888 [JsonRpcClient-hearbeatExec-e1-t0] org.kurento.jsonrpc.client.JsonRpcClientNettyWebSocket - [KurentoClient] Creating new NioEventLoopGroup
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,477 [nioEventLoopGroup-2-1] org.kurento.jsonrpc.client.JsonRpcClientNettyWebSocket - [KurentoClient] Initiating new Netty channel. Will create new handler too!
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,839 [main] io.openvidu.server.recording.service.RecordingManager - OpenVidu recording service is disabled
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,850 [AbstractJsonRpcClientWebSocket-reqResEventExec-e2-t0] io.openvidu.server.kurento.kms.KmsManager - Kurento Client “connected” event for KMS ws://localhost:8888/kurento [org.kurento.client.KurentoClient@86eb31f]
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,925 [main] io.openvidu.server.coturn.CoturnCredentialsService - COTURN IP: 95.85.212.1
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,925 [main] io.openvidu.server.coturn.CoturnCredentialsService - COTURN Redis DB accessible with string “ip=127.0.0.1 dbname=0 password=MY_SECRET connect_timeout=30”
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,925 [main] io.openvidu.server.coturn.CoturnCredentialsService - Cleaning COTURN DB…
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,934 [main] io.openvidu.server.coturn.CoturnCredentialsService - Path of COTURN log files: /var/log/
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,959 [main] io.openvidu.server.coturn.CoturnCredentialsService - COTURN DB is now empty
openvidu-server_1 | [INFO] 2020-12-28 12:43:52,959 [main] io.openvidu.server.coturn.CoturnCredentialsService - Using COTURN credentials service for BASH environment
openvidu-server_1 | [INFO] 2020-12-28 12:43:53,037 [main] io.openvidu.server.core.SessionManager - Garbage collector for non active sessions initialized. Running every 900 seconds and cleaning up non active Sessions more than 3600 seconds old
openvidu-server_1 | [INFO] 2020-12-28 12:43:53,136 [main] org.springframework.scheduling.concurrent.ThreadPoolTaskScheduler - Initializing ExecutorService ‘jsonrpcTaskScheduler’
openvidu-server_1 | [INFO] 2020-12-28 12:43:53,641 [main] org.springframework.scheduling.concurrent.ThreadPoolTaskExecutor - Initializing ExecutorService ‘applicationTaskExecutor’
openvidu-server_1 | [INFO] 2020-12-28 12:43:53,877 [main] org.springframework.boot.autoconfigure.web.servlet.WelcomePageHandlerMapping - Adding welcome page: class path resource [static/index.html]
openvidu-server_1 | [INFO] 2020-12-28 12:43:54,571 [main] org.springframework.security.web.DefaultSecurityFilterChain - Creating filter chain: any request, [org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@1e6a3214, org.springframework.security.web.context.SecurityContextPersistenceFilter@5a45133e, org.springframework.security.web.header.HeaderWriterFilter@3f6f6701, org.springframework.web.filter.CorsFilter@6f03482, org.springframework.security.web.authentication.logout.LogoutFilter@70e9c95d, org.springframework.security.web.authentication.www.BasicAuthenticationFilter@60099951, org.springframework.security.web.savedrequest.RequestCacheAwareFilter@4f80542f, org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@130c12b7, org.springframework.security.web.authentication.AnonymousAuthenticationFilter@368247b9, org.springframework.security.web.session.SessionManagementFilter@942a29c, org.springframework.security.web.access.ExceptionTranslationFilter@2d52216b, org.springframework.security.web.access.intercept.FilterSecurityInterceptor@6574a52c]
openvidu-server_1 | [INFO] 2020-12-28 12:43:54,669 [main] org.apache.coyote.http11.Http11NioProtocol - Starting ProtocolHandler [“http-nio-0.0.0.0-5443”]
openvidu-server_1 | [INFO] 2020-12-28 12:43:54,742 [main] org.springframework.boot.web.embedded.tomcat.TomcatWebServer - Tomcat started on port(s): 5443 (http) with context path ‘’
openvidu-server_1 | [INFO] 2020-12-28 12:43:54,768 [main] io.openvidu.server.OpenViduServer - Started OpenViduServer in 7.599 seconds (JVM running for 12.68)
openvidu-server_1 | [INFO] 2020-12-28 12:43:54,773 [main] io.openvidu.server.OpenViduServer -
openvidu-server_1 |
openvidu-server_1 | ----------------------------------------------------
openvidu-server_1 |
openvidu-server_1 | OpenVidu is ready!
openvidu-server_1 | ---------------------------
openvidu-server_1 |
openvidu-server_1 | * OpenVidu Server URL: https://192.168.11.25/
openvidu-server_1 |
openvidu-server_1 | * OpenVidu Dashboard: https://192.168.11.25/dashboard
openvidu-server_1 |
openvidu-server_1 | ----------------------------------------------------
openvidu-server_1 |

NGINX log

nginx_1 |
nginx_1 | =======================================
nginx_1 | = INPUT VARIABLES =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Config NGINX:
nginx_1 | - Http Port: 80
nginx_1 | - Https Port: 443
nginx_1 | - Worker Connections: 10240
nginx_1 | - Allowed Access in Openvidu Dashboard: all
nginx_1 | - Allowed Access in Openvidu API: all
nginx_1 | - Support deprecated API: true
nginx_1 | - Redirect www to non-www: false
nginx_1 |
nginx_1 | Config Openvidu Application:
nginx_1 | - Domain name: 192.168.11.25
nginx_1 | - Certificated: selfsigned
nginx_1 | - Letsencrypt Email:
nginx_1 | - Openvidu Application: true
nginx_1 | - Openvidu Application Type: CE
nginx_1 |
nginx_1 | =======================================
nginx_1 | = CONFIGURATION NGINX =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Configure 192.168.11.25 domain…
nginx_1 | - New configuration: selfsigned 192.168.11.25
nginx_1 | - Old configuration: selfsigned 192.168.11.25
nginx_1 |
nginx_1 | - Selfsigned certificate already exists, using them…
nginx_1 |
nginx_1 | =======================================
nginx_1 | = ALLOWED ACCESS =
nginx_1 | =======================================
nginx_1 |
nginx_1 | Adding rules…
nginx_1 | - Public IPv4 for rules: 95.85.212.1
nginx_1 |
nginx_1 | Finish Rules:
nginx_1 | Openvidu Dashboard:
nginx_1 | - allow all;
nginx_1 | Openvidu API:
nginx_1 | - allow all;
nginx_1 |
nginx_1 | =======================================
nginx_1 | = START OPENVIDU PROXY =
nginx_1 | =======================================
nginx_1 |
nginx_1 | 2020/12/28 12:43:41 [warn] 78#78: “ssl_stapling” ignored, no OCSP responder URL in the certificate “/etc/letsencrypt/live/192.168.11.25/fullchain.pem”
nginx_1 | nginx: [warn] “ssl_stapling” ignored, no OCSP responder URL in the certificate “/etc/letsencrypt/live/192.168.11.25/fullchain.pem”
nginx_1 | 2020/12/28 12:43:41 [notice] 78#78: signal process started
nginx_1 | ==> /var/log/nginx/access.log <==
nginx_1 | 2020/12/28 12:43:41 [warn] 17#17: “ssl_stapling” ignored, no OCSP responder URL in the certificate “/etc/letsencrypt/live/192.168.11.25/fullchain.pem”

2

As I seen your configuration, it’s have self-signed certificate that’s mean you have to accept certificate first time going openvidu URL.
I suggest use domain URL and it’s ssl certificate
Thanks
Vipin

3

Yes, I know. But this is something else. I have hacked my app to ignore server certificate.
Problem is MacOS.
I installed it on Debian and it works.

4

For MacOS I have to see your server because I don’t know exactly what happened .
Sorry without it I can’t guess
Thank
Regards
Vipin

5

Nevermind. Debian on virtual is ok for me.

Thank you

6

network: host does not work on Mac - this is a huge bummer…

7

OpenVidu is intended to be deployed in Linux environments. MacOS and Windows environments don’t allow host network, I’ve experienced this situation.

@boerescian @kotrs if you’re developing in a Mac, there’s actually an image for developing purposes which should work in Mac docker run -p 4443:4443 --rm -e OPENVIDU_SECRET=MY_SECRET openvidu/openvidu-server-kms:2.16.0. In fact, there are multiple ways to develop OpenVidu apps:

Option 1 (Recommended)
Use the official image for development purposes (recommended)

docker run -p 4443:4443 --rm -e OPENVIDU_SECRET=MY_SECRET openvidu/openvidu-server-kms:2.16.0

Option 2 (Also recomended)
Set up a development environment in your prefered cloud provider and install with official instructions

Option 3
Set up a VM with a functional ubuntu-server with docker and install using official instructions You can use the IP of this VM to develop your app.

Option 4
You can even use our demos.openvidu.io infrastructure for development (NOT PRODUCTION, don’t abuse, we will know it :slight_smile: ).
Credentials:
Username: OPENVIDUAPP
Password: MY_SECRET

Regards,
Carlos