Coturn穿透服务器搭建

yum -y install libevent-devel openssl-devel

git clone https://github.com/coturn/coturn
cd coturn 
./configure  --prefix=/usr/local/coturn
make install

which turnserver

安装目录位于/usr/local/coturn
cd /usr/local/coturn/etc/
cp turnserver.conf.default turnserver.conf

openssl req -x509 -newkey rsa:2048 -keyout ./turn_server_pkey.pem -out ./etc/turn_server_cert.pem -days 99999 -nodes 

vim /usr/local/coturn/etc/turnserver.conf
relay-device=eth0   # 与前nmcli查到的网卡名称一致
listening-ip=192.168.1.10    # 内网IP
listening-port=3478
tls-listening-port=5349
relay-ip=172.18.77.60
external-ip=xxx.xxx.xxx.xxx    # 公网IP
relay-threads=50
lt-cred-mech
cert=./turn_server_cert.pem
pkey=./turn_server_pkey.pem
pidfile=”/var/run/turnserver.pid”
min-port=49152
max-port=65535
user=users:123.com    # 用户名密码，创建IceServer时用
cli-password=123.com

 turnserver -o -a -f -user=users:123.com -r Beijing

firewall-cmd --zone=public --add-port=3478/udp --permanent
firewall-cmd --zone=public --add-port=3478/tcp --permanent
重新载入
firewall-cmd --reload
重启防火墙
systemctl restart firewalld
或者
systemctl stop firewalld

# stun:xxx.xxx.xxx.xxx:3478
# users
# 123.com