openvidu-deployment: Azure opens the whole WebRTC TCP range

The TCP rule listed only ports 50000 and 60000; it now covers 50000-60000, as UDP does. Checked live on Azure elastic.
chore/update-openvidu-actions-1.0.25
Piwccle 2026-10-28 11:59:09 +01:00
parent 9da689eabc
commit 32c3d7a027
7 changed files with 12 additions and 27 deletions

View File

@ -138,6 +138,9 @@ in the [openvidu-oracle](https://github.com/OpenVidu/openvidu-oracle) and
A redeploy still cannot set the fixed, minimum or maximum number of Media Nodes below the Media Nodes
running (`UnsupportedCapacity`); the administration documentation describes how to remove them first.
- Professional single node, Elastic and High Availability: the network security group rule for WebRTC over
TCP opened only ports 50000 and 60000 instead of the range between them. It now opens 50000-60000, as the
rule for UDP does.
- Single node and Elastic: the network security group still allowed port 9000 (MinIO) from the Internet.
MinIO does not run in Azure deployments, which store recordings and application data in Azure Blob Storage,
and the other clouds have kept this port closed since 3.9.0. The rule is removed.

View File

@ -2143,10 +2143,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 150
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "5733974944942002101"
"templateHash": "10387525853368254116"
}
},
"parameters": {
@ -1152,10 +1152,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 150,
"direction": "Inbound"

View File

@ -3137,10 +3137,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 150
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "128203215953929559"
"templateHash": "11080605156043027678"
}
},
"parameters": {
@ -1954,10 +1954,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 150,
"direction": "Inbound"

View File

@ -995,10 +995,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 190
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "17066739396447275453"
"templateHash": "3939132145262526969"
}
},
"parameters": {
@ -510,10 +510,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 190,
"direction": "Inbound"