1974452 - Problem connecting to the TURN server behind a proxy

Status: RESOLVED INCOMPLETE

(Core :: WebRTC, defect)

Description

[Samuel Bélondrade [:sbelondr]]

Attachment: log-firefox.html

Steps to reproduce:

On the host, I installed turnserver with the following configuration:

listening-port=3478
tls-listening-port=5349
listening-ip=0.0.0.0
relay-ip=0.0.0.0
realm=exemple.com
user=web:password
lt-cred-mech
fingerprint
#use-auth-secret
cert=/etc/ssl/turn/turn-cert.pem
pkey=/etc/ssl/turn/turn-key.pem
log-file=/var/log/turnserver.log
verbose
relay-threads=5
no-multicast-peers

sudo turnserver -c ./turnserver.conf -v -r exemple.com

In a VM, I installed mitmproxy and routed Firefox through this proxy.
I used this project to run the tests : https://github.com/webrtc/samples/tree/gh-pages/src/content/peerconnection/trickle-ice

TURN URI: turns:exemple.com:5349?transport=tcp
TURN username : web
TURN password : password

Actual results:

When I try to connect to a TURN server over TCP, behind a proxy, it doesn’t work.
With an older version of Firefox (115) or with the current version of Chromium, it works correctly.
Chromium or Firefox 115:
0.211 relay 3764658602 udp 192.168.1.51 63932 0 | 31 | 255 turns:exemple.com:5349?transport=tcp tls
0.214 relay 3764658602 udp 192.168.1.51 63833 0 | 31 | 255 turns:exemple.com:5349?transport=tcp tls
0.235 Done

In the Firefox 137:
12.864 Done

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Toolkit::Password Manager' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

Hi sbelondr, thanks for filing a bug!

With an older version of Firefox (115) or with the current version of Chromium, it works correctly.

This is good news, as far as helping to track down the cause. Would you mind installing and running our https://mozilla.github.io/mozregression/install.html tool ? — This should help pinpoint the exact patch that caused the regression.

Comment 3

[:hellosct1]

Hi,

We apologize for the delay
Here is the result obtained with the tool

15:50.18 INFO: Narrowed nightly regression window from [2024-06-12, 2024-06-14] (2 days) to [2024-06-13, 2024-06-14] (1 days) (~0 steps left)
15:50.18 INFO: Got as far as we can go bisecting nightlies...
15:50.18 INFO: Last good revision: 3448fa7d36a96fffc3aab8d9faf3ac844c2671ee (2024-06-13)
15:50.18 INFO: First bad revision: 97bce31758a53936d3a729ae713d0aead3a53137 (2024-06-14)
15:50.18 INFO: Pushlog:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=3448fa7d36a96fffc3aab8d9faf3ac844c2671ee&tochange=97bce31758a53936d3a729ae713d0aead3a53137

best regard

Comment 4

[Byron Campen [:bwc]]

Which protocol are you configuring Firefox to use (TCP or TLS) with mitmproxy?

Comment 5

[:hellosct1]

Hi

We use

TLS 1.2 en TCP

thanks

Comment 6

[Byron Campen [:bwc]]

So, that bug fixed an issue where we were doing TCP to the TURNS server instead of TLS, when connecting through a proxy. So it would seem that using TCP works fine through a proxy for you, but TLS does not. Have you checked whether the TURNS server you're using works without a proxy?

Comment 7

[:hellosct1]

hi
we'll do the test

Comment 8

[BugBot [:suhaib / :marco/ :calixte]]

Redirect a needinfo that is pending on an inactive user to the triage owner.
:mjf, since the bug has recent activity, could you have a look please?

For more information, please visit BugBot documentation.

Comment 9

[Jan-Ivar Bruaroey [:jib] (needinfo? me)]

Hi hellosct1, were you able to test whether your TURNS server you're using works without a proxy per comment 7?

Comment 10

[BugBot [:suhaib / :marco/ :calixte]]

Redirect a needinfo that is pending on an inactive user to the triage owner.
:mjf, since the bug doesn't have a severity set, could you please set the severity or close the bug?

For more information, please visit BugBot documentation.

Comment 11

[Michael Froman [:mjf]]

Feel free to reopen if/when the question from comment 6 is answered.