From d81adf916ec4e9190970c9f8793b81db4754e28c Mon Sep 17 00:00:00 2001 From: cruizba Date: Tue, 29 Sep 2026 14:57:02 +0200 Subject: [PATCH] openvidu-deployment: Azure - open the whole UDP media range, not only ports 50000 and 60000 The WebRTC_traffic_UDP rule of the Azure network security groups used destinationPortRanges: ['50000', '60000'], which Azure reads as two single ports, so WebRTC media over UDP was blocked outside those two ports. The rule now uses destinationPortRange: '50000-60000' (Community single node, Pro single node, elastic and HA), and the ARM JSON is rebuilt from Bicep. The TCP rule is left unchanged. Assisted-by: claude-code - Anthropic - Claude Opus 5.5 --- .../singlenode/azure/cf-openvidu-singlenode.bicep | 5 +---- .../community/singlenode/azure/cf-openvidu-singlenode.json | 7 ++----- .../pro/elastic/azure/cf-openvidu-elastic.bicep | 5 +---- .../pro/elastic/azure/cf-openvidu-elastic.json | 7 ++----- openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep | 5 +---- openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json | 7 ++----- .../pro/singlenode/azure/cf-openvidu-singlenode.bicep | 5 +---- .../pro/singlenode/azure/cf-openvidu-singlenode.json | 7 ++----- 8 files changed, 12 insertions(+), 36 deletions(-) diff --git a/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.bicep b/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.bicep index 7146856dd..272c812ea 100644 --- a/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.bicep +++ b/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.bicep @@ -975,10 +975,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11 sourceAddressPrefix: '*' sourcePortRange: '*' destinationAddressPrefix: '*' - destinationPortRanges: [ - '50000' - '60000' - ] + destinationPortRange: '50000-60000' access: 'Allow' priority: 180 direction: 'Inbound' diff --git a/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.json b/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.json index 440229bd6..1fc614443 100644 --- a/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.json +++ b/openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.json @@ -5,7 +5,7 @@ "_generator": { "name": "bicep", "version": "0.46.1.21595", - "templateHash": "419198139047450428" + "templateHash": "74604335056893073" } }, "parameters": { @@ -492,10 +492,7 @@ "sourceAddressPrefix": "*", "sourcePortRange": "*", "destinationAddressPrefix": "*", - "destinationPortRanges": [ - "50000", - "60000" - ], + "destinationPortRange": "50000-60000", "access": "Allow", "priority": 180, "direction": "Inbound" diff --git a/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.bicep b/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.bicep index 85f370e69..38a79b97f 100644 --- a/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.bicep +++ b/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.bicep @@ -1856,10 +1856,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0 sourceAddressPrefix: '*' sourcePortRange: '*' destinationAddressPrefix: '*' - destinationPortRanges: [ - '50000' - '60000' - ] + destinationPortRange: '50000-60000' access: 'Allow' priority: 140 direction: 'Inbound' diff --git a/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.json b/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.json index 340c1be23..63be97115 100644 --- a/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.json +++ b/openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.json @@ -5,7 +5,7 @@ "_generator": { "name": "bicep", "version": "0.46.1.21595", - "templateHash": "3201746411683084636" + "templateHash": "250085011205479425" } }, "parameters": { @@ -1139,10 +1139,7 @@ "sourceAddressPrefix": "*", "sourcePortRange": "*", "destinationAddressPrefix": "*", - "destinationPortRanges": [ - "50000", - "60000" - ], + "destinationPortRange": "50000-60000", "access": "Allow", "priority": 140, "direction": "Inbound" diff --git a/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep b/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep index fcb70d994..fe2389826 100644 --- a/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep +++ b/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep @@ -2814,10 +2814,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0 sourceAddressPrefix: '*' sourcePortRange: '*' destinationAddressPrefix: '*' - destinationPortRanges: [ - '50000' - '60000' - ] + destinationPortRange: '50000-60000' access: 'Allow' priority: 140 direction: 'Inbound' diff --git a/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json b/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json index 1df2a7212..ab8b99784 100644 --- a/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json +++ b/openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json @@ -5,7 +5,7 @@ "_generator": { "name": "bicep", "version": "0.46.1.21595", - "templateHash": "7052886486739186434" + "templateHash": "12964488486587110828" } }, "parameters": { @@ -1912,10 +1912,7 @@ "sourceAddressPrefix": "*", "sourcePortRange": "*", "destinationAddressPrefix": "*", - "destinationPortRanges": [ - "50000", - "60000" - ], + "destinationPortRange": "50000-60000", "access": "Allow", "priority": 140, "direction": "Inbound" diff --git a/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.bicep b/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.bicep index 186a0d527..2ee6c2daf 100644 --- a/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.bicep +++ b/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.bicep @@ -995,10 +995,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11 sourceAddressPrefix: '*' sourcePortRange: '*' destinationAddressPrefix: '*' - destinationPortRanges: [ - '50000' - '60000' - ] + destinationPortRange: '50000-60000' access: 'Allow' priority: 180 direction: 'Inbound' diff --git a/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.json b/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.json index 82cda8c85..a19ccb601 100644 --- a/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.json +++ b/openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.json @@ -5,7 +5,7 @@ "_generator": { "name": "bicep", "version": "0.46.1.21595", - "templateHash": "9754478578006111917" + "templateHash": "15897828754510748124" } }, "parameters": { @@ -510,10 +510,7 @@ "sourceAddressPrefix": "*", "sourcePortRange": "*", "destinationAddressPrefix": "*", - "destinationPortRanges": [ - "50000", - "60000" - ], + "destinationPortRange": "50000-60000", "access": "Allow", "priority": 180, "direction": "Inbound"