openvidu-deployment: Azure - open the whole UDP media range, not only ports 50000 and 60000

The WebRTC_traffic_UDP rule of the Azure network security groups used
destinationPortRanges: ['50000', '60000'], which Azure reads as two single
ports, so WebRTC media over UDP was blocked outside those two ports. The
rule now uses destinationPortRange: '50000-60000' (Community single node,
Pro single node, elastic and HA), and the ARM JSON is rebuilt from Bicep.
The TCP rule is left unchanged.


Assisted-by: claude-code - Anthropic - Claude Opus 5.5
pull/913/head
cruizba 2026-09-29 14:57:02 +02:00
parent 4e46cc6c5c
commit d81adf916e
8 changed files with 12 additions and 36 deletions

View File

@ -975,10 +975,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11
sourceAddressPrefix: '*' sourceAddressPrefix: '*'
sourcePortRange: '*' sourcePortRange: '*'
destinationAddressPrefix: '*' destinationAddressPrefix: '*'
destinationPortRanges: [ destinationPortRange: '50000-60000'
'50000'
'60000'
]
access: 'Allow' access: 'Allow'
priority: 180 priority: 180
direction: 'Inbound' direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": { "_generator": {
"name": "bicep", "name": "bicep",
"version": "0.46.1.21595", "version": "0.46.1.21595",
"templateHash": "419198139047450428" "templateHash": "74604335056893073"
} }
}, },
"parameters": { "parameters": {
@ -492,10 +492,7 @@
"sourceAddressPrefix": "*", "sourceAddressPrefix": "*",
"sourcePortRange": "*", "sourcePortRange": "*",
"destinationAddressPrefix": "*", "destinationAddressPrefix": "*",
"destinationPortRanges": [ "destinationPortRange": "50000-60000",
"50000",
"60000"
],
"access": "Allow", "access": "Allow",
"priority": 180, "priority": 180,
"direction": "Inbound" "direction": "Inbound"

View File

@ -1856,10 +1856,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*' sourceAddressPrefix: '*'
sourcePortRange: '*' sourcePortRange: '*'
destinationAddressPrefix: '*' destinationAddressPrefix: '*'
destinationPortRanges: [ destinationPortRange: '50000-60000'
'50000'
'60000'
]
access: 'Allow' access: 'Allow'
priority: 140 priority: 140
direction: 'Inbound' direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": { "_generator": {
"name": "bicep", "name": "bicep",
"version": "0.46.1.21595", "version": "0.46.1.21595",
"templateHash": "3201746411683084636" "templateHash": "250085011205479425"
} }
}, },
"parameters": { "parameters": {
@ -1139,10 +1139,7 @@
"sourceAddressPrefix": "*", "sourceAddressPrefix": "*",
"sourcePortRange": "*", "sourcePortRange": "*",
"destinationAddressPrefix": "*", "destinationAddressPrefix": "*",
"destinationPortRanges": [ "destinationPortRange": "50000-60000",
"50000",
"60000"
],
"access": "Allow", "access": "Allow",
"priority": 140, "priority": 140,
"direction": "Inbound" "direction": "Inbound"

View File

@ -2814,10 +2814,7 @@ resource openviduMediaNodeNSG 'Microsoft.Network/networkSecurityGroups@2023-11-0
sourceAddressPrefix: '*' sourceAddressPrefix: '*'
sourcePortRange: '*' sourcePortRange: '*'
destinationAddressPrefix: '*' destinationAddressPrefix: '*'
destinationPortRanges: [ destinationPortRange: '50000-60000'
'50000'
'60000'
]
access: 'Allow' access: 'Allow'
priority: 140 priority: 140
direction: 'Inbound' direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": { "_generator": {
"name": "bicep", "name": "bicep",
"version": "0.46.1.21595", "version": "0.46.1.21595",
"templateHash": "7052886486739186434" "templateHash": "12964488486587110828"
} }
}, },
"parameters": { "parameters": {
@ -1912,10 +1912,7 @@
"sourceAddressPrefix": "*", "sourceAddressPrefix": "*",
"sourcePortRange": "*", "sourcePortRange": "*",
"destinationAddressPrefix": "*", "destinationAddressPrefix": "*",
"destinationPortRanges": [ "destinationPortRange": "50000-60000",
"50000",
"60000"
],
"access": "Allow", "access": "Allow",
"priority": 140, "priority": 140,
"direction": "Inbound" "direction": "Inbound"

View File

@ -995,10 +995,7 @@ resource webServerSecurityGroup 'Microsoft.Network/networkSecurityGroups@2023-11
sourceAddressPrefix: '*' sourceAddressPrefix: '*'
sourcePortRange: '*' sourcePortRange: '*'
destinationAddressPrefix: '*' destinationAddressPrefix: '*'
destinationPortRanges: [ destinationPortRange: '50000-60000'
'50000'
'60000'
]
access: 'Allow' access: 'Allow'
priority: 180 priority: 180
direction: 'Inbound' direction: 'Inbound'

View File

@ -5,7 +5,7 @@
"_generator": { "_generator": {
"name": "bicep", "name": "bicep",
"version": "0.46.1.21595", "version": "0.46.1.21595",
"templateHash": "9754478578006111917" "templateHash": "15897828754510748124"
} }
}, },
"parameters": { "parameters": {
@ -510,10 +510,7 @@
"sourceAddressPrefix": "*", "sourceAddressPrefix": "*",
"sourcePortRange": "*", "sourcePortRange": "*",
"destinationAddressPrefix": "*", "destinationAddressPrefix": "*",
"destinationPortRanges": [ "destinationPortRange": "50000-60000",
"50000",
"60000"
],
"access": "Allow", "access": "Allow",
"priority": 180, "priority": 180,
"direction": "Inbound" "direction": "Inbound"