ambiser
/
openvidu
mirror of https://github.com/OpenVidu/openvidu.git
8
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

openvidu-deployment: - HA - Open port 5349 in media nodes for master nodes if Turn Domain is not configured

master
cruizba 2025-06-13 22:02:13 +02:00
parent 335fd8e3c3
commit e66e5a23e1
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
openvidu-deployment/pro/ha/aws/cf-openvidu-ha.yaml
View File

@ -416,6 +416,7 @@ Metadata:
Conditions: Conditions:
TurnTLSIsEnabled: !Or [!Not [!Equals [!Ref TurnDomainName, ""]], !Not [!Equals [!Ref TurnCertificateARN, ""]]] TurnTLSIsEnabled: !Or [!Not [!Equals [!Ref TurnDomainName, ""]], !Not [!Equals [!Ref TurnCertificateARN, ""]]]
TurnTLSIsNotEnabled: !Or [!Equals [!Ref TurnDomainName, ""], !Equals [!Ref TurnCertificateARN, ""]]
CreateRecordingsBucket: !Equals [!Ref S3AppDataBucketName, ""] CreateRecordingsBucket: !Equals [!Ref S3AppDataBucketName, ""]
CreateClusterDataBucket: !Equals [!Ref S3ClusterDataBucketName, ""] CreateClusterDataBucket: !Equals [!Ref S3ClusterDataBucketName, ""]
@ -2104,6 +2105,7 @@ Resources:
OpenViduLoadBalancerTurnTLSToMediaNodeIngressSG: OpenViduLoadBalancerTurnTLSToMediaNodeIngressSG:
Type: AWS::EC2::SecurityGroupIngress Type: AWS::EC2::SecurityGroupIngress
Condition: TurnTLSIsEnabled
Properties: Properties:
GroupId: !Ref OpenViduMediaNodeSG GroupId: !Ref OpenViduMediaNodeSG
IpProtocol: tcp IpProtocol: tcp
@ -2111,6 +2113,16 @@ Resources:
ToPort: 5349 ToPort: 5349
SourceSecurityGroupId: !Ref OpenViduTurnTLSLoadBalancerSG SourceSecurityGroupId: !Ref OpenViduTurnTLSLoadBalancerSG
OpenViduLoadBalancerTurnTLSMasterNodeToMediaNodeIngressSG:
Type: AWS::EC2::SecurityGroupIngress
Condition: "TurnTLSIsNotEnabled"
Properties:
GroupId: !Ref OpenViduMediaNodeSG
IpProtocol: tcp
FromPort: 5349
ToPort: 5349
SourceSecurityGroupId: !Ref OpenViduMasterNodeSG
OpenViduLoadBalancerTurnTLSToMediaNodeHealthCheckSG: OpenViduLoadBalancerTurnTLSToMediaNodeHealthCheckSG:
Type: AWS::EC2::SecurityGroupIngress Type: AWS::EC2::SecurityGroupIngress
Condition: TurnTLSIsEnabled Condition: TurnTLSIsEnabled