openvidu/openvidu-deployment
cruizba 794a48f447 openvidu-deployment: HA AWS - optional dedicated TURN Load Balancer for private Media Nodes
Add the optional TurnDomainName and TurnCertificateARN parameters to the Pro HA
CloudFormation template. When both are set:

- a second internet-facing Network Load Balancer (in LoadBalancerSubnets, or the
  Media Node subnets) with a TLS 443 listener forwarding to the Media Nodes TURN
  port 5349, registered through the Media Node Auto Scaling Group;
- the Master Nodes install with --turn-domain-name, so the Media Nodes announce
  that domain as TURN server;
- since the Master Node Caddy then serves HTTPS on 7880 instead of multiplexing
  TURN and HTTPS on 443, the main 443 listener targets a new 7880 target group
  (the same layout as the 3.5.0 template).

This lets the Media Nodes run in private subnets without relaying media through
the Master Nodes. With the parameters empty (default) nothing changes. Validated
on 3.8.0 in AWS: v2 API through the main Load Balancer, TURN/TLS relay through
the TURN domain to private Media Nodes, and recording.


Assisted-by: claude-code - Anthropic - Claude Opus 5.5 1m
2026-09-25 13:26:58 +02:00
..
community chore: update third-party versions (#911) 2026-09-25 13:18:02 +02:00
pro openvidu-deployment: HA AWS - optional dedicated TURN Load Balancer for private Media Nodes 2026-09-25 13:26:58 +02:00
update.sh chore: update third-party versions (#911) 2026-09-25 13:18:02 +02:00