1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
[]
#
# Port range, the maximum range is 49152 - 65535.
#
= "49152..65535"
#
#
# Maximum number of threads the TURN server can use.
#
= 12
#
#
# turn server realm
#
# specify the domain where the server is located. for a single node,
# this configuration is fixed, but each node can be configured as a
# different domain. this is a good idea to divide the nodes by namespace.
#
= "localhost"
#
#
# turn server listen interfaces
#
# The address and port to which the UDP Server is bound. Multiple
# addresses can be bound at the same time. The binding address supports
# ipv4 and ipv6.
#
[[]]
= "udp"
= "127.0.0.1:3478"
#
#
# external address
#
# specify the node external address and port. for the case of
# exposing the service to the outside, you need to manually
# specify the server external IP address and service listening
# port.
#
= "127.0.0.1:3478"
#
#
# Idle timeout
#
# If no packet is received within the specified number of
# seconds, the connection will be closed to prevent resources
# from being occupied for a long time.
#
= 20
#
#
# Maximum Transmission Unit (MTU) size for network packets.
#
= 1500
#
#
# ssl configuration
#
# [server.interfaces.ssl]
# private-key = "/etc/turn-rs/tls/private.key"
# certificate-chain = "/etc/turn-rs/tls/certificate.crt"
#
#
# Additional interface examples (commented):
#
# [[server.interfaces]]
# transport = "tcp"
# listen = "127.0.0.1:3478"
# external = "127.0.0.1:3478"
#
# [[server.interfaces]]
# transport = "udp"
# listen = "[::1]:3478"
# external = "[::1]:3478"
#
#
#
# rpc server listen
#
# This option specifies the grpc server binding address used to control
# the turn server.
#
# [api]
# listen = "127.0.0.1:3000"
#
#
# Set a timeout on for all request handlers.
#
# timeout = 5
#
#
# ssl configuration
#
# [api.ssl]
# private-key = "/etc/turn-rs/tls/private.key"
# certificate-chain = "/etc/turn-rs/tls/certificate.crt"
#
#
#
# [prometheus]
#
# prometheus server listen
#
# This option specifies the prometheus server binding address used to expose
# the metrics.
#
# listen = "127.0.0.1:9090"
#
#
# ssl configuration
#
# [prometheus.ssl]
# private-key = "/etc/turn-rs/tls/private.key"
# certificate-chain = "/etc/turn-rs/tls/certificate.crt"
#
#
#
# [hooks]
#
# hooks server endpoint
#
# The endpoint of the hooks server
#
# endpoint = "http://127.0.0.1:3000"
#
#
# Maximum number of channels for the hooks server.
#
# max-channel-size = 1024
#
#
# ssl configuration
#
# [hooks.ssl]
# private-key = "/etc/turn-rs/tls/private.key"
# certificate-chain = "/etc/turn-rs/tls/certificate.crt"
#
#
#
# log level
# An enum representing the available verbosity levels of the logger.
[]
= "info"
#
# log to stdout
#
# This option can be used to log to stdout.
#
= true
#
# log to file directory
#
# This option can be used to log to a file directory.
#
# file-directory = "/var/log/turn-server"
#
#
[]
#
# Enable hooks authentication.
#
# This option can be used to enable the hooks authentication.
#
= false
#
#
# Static authentication key value (string) that applies only to the TURN REST API.
# If set, the turn server will not request external services via the GRPC
# Hooks API to obtain the key.
#
# static-auth-secret = ""
#
#
# static user password
#
# This option can be used to specify the static identity authentication
# information used by the turn server for verification.
#
# Note: this is a high-priority authentication method, the server
# will try to use static authentication first, and then use external
# control service authentication.
#
[]
= "test"
= "test"