openvidu-deployment: Azure - open the whole UDP media range, not only ports 50000 and 60000

The WebRTC_traffic_UDP rule of the Azure network security groups used
destinationPortRanges: ['50000', '60000'], which Azure reads as two single
ports, so WebRTC media over UDP was blocked outside those two ports. The
rule now uses destinationPortRange: '50000-60000' (Community single node,
Pro single node, elastic and HA), and the ARM JSON is rebuilt from Bicep.
The TCP rule is left unchanged.


Assisted-by: claude-code - Anthropic - Claude Opus 5.5
pull/913/head
cruizba 2026-09-29 14:57:02 +02:00
parent 4e46cc6c5c
commit d81adf916e
8 changed files with 12 additions and 36 deletions

View File

@ -975,10 +975,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 180
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "419198139047450428"
"templateHash": "74604335056893073"
}
},
"parameters": {
@ -492,10 +492,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 180,
"direction": "Inbound"

View File

@ -1856,10 +1856,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 140
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "3201746411683084636"
"templateHash": "250085011205479425"
}
},
"parameters": {
@ -1139,10 +1139,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 140,
"direction": "Inbound"

View File

@ -2814,10 +2814,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 140
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "7052886486739186434"
"templateHash": "12964488486587110828"
}
},
"parameters": {
@ -1912,10 +1912,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 140,
"direction": "Inbound"

View File

@ -995,10 +995,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11
sourceAddressPrefix: '*'
sourcePortRange: '*'
destinationAddressPrefix: '*'
destinationPortRanges: [
'50000'
'60000'
]
destinationPortRange: '50000-60000'
access: 'Allow'
priority: 180
direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": {
"name": "bicep",
"version": "0.46.1.21595",
"templateHash": "9754478578006111917"
"templateHash": "15897828754510748124"
}
},
"parameters": {
@ -510,10 +510,7 @@
"sourceAddressPrefix": "*",
"sourcePortRange": "*",
"destinationAddressPrefix": "*",
"destinationPortRanges": [
"50000",
"60000"
],
"destinationPortRange": "50000-60000",
"access": "Allow",
"priority": 180,
"direction": "Inbound"