Hi, yeah, since openmeetings 5 is for internal use only, I didn't fiddle with the ports. Openmeetings 5 is not behind a firewall, the server and all clients are all within the internal network.
I have a dedicated openmeetings4-server for the use with external users. In this scenario, I used our professional firewall to "change the ports". Well, openmeetings4 still runs with 5443, but every packet that is addressed to openmeetings:443 is forwarded by our firewall to openmeetings4-server and 5443. So the firewall does the job of switching the ports. For internal use, I never messed with the ports. Openmeetings4 (the one for internal use only) never seemed to have problems with 5080. What I don't get is: Why is openmeetings 4 so good in handling bad internetconnections (speed) and openmeetings 5 isn't? Openmeetings 5 ist not to blame for the bad connections; the bad connections are caused by the corona-situation (more vpn-users at the same time, than the firewall can manage). In your mail, do you say you switched ports and it got better? Or is this just an idea of what might cause problems? Best regards, Alex -----Ursprüngliche Nachricht----- Von: kaffeesurrogat <kaffeesurro...@posteo.de> Gesendet: Freitag, 20. November 2020 16:13 An: user@openmeetings.apache.org Betreff: Re: optimize performance Dear Alex, which one is the port openmeetings is listing on ? Still 5443 ? I've posted a message with the subject "Behind a companies firewall, changing ports and udp packages to tcp ?" changing from 5443 to standard https ..... Just had a few occasions to test this sitting at my companies desk, but this might be a problem too. Would be awsome if you can try this too and verify Have fun, kaffeesurrogat On 19/11/2020 17:01, Maxim Solodovnik wrote: > > > On Thu, 19 Nov 2020 at 22:05, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> wrote: > > Hello Maxim, > > > > I have coturn installed, so I have a TURN server, right? > > I followed the instructions from the manual „Installation SSL > certificates and Coturn for OpenMeetings 5.0.1 on Ubuntu 20.04.pdf“. > > > > I start OpenMeetings with these commands: > > sudo /etc/init.d/mysql start > > sudo systemctl start docker.service > > sudo /etc/init.d/coturn start > > sudo docker start kms > > sudo /etc/init.d/tomcat3 start > > > > So, I guess I have TURN server running and working, right? > > > Most probably yes > Your error "and after a few seconds, they get this „media server got > disconnected for user xy“-message." > shows multimedia connection between KMS and browser was unable to be > established > > Since you have KMS in docker > you can try to run it with `--network host` option instead of 8888 > port forwarding I would start with log examination > > - clean logs > - test successful login with 1 user "from work" (preserve logs) > - clean logs > - test successful login with 1 user "from home" (preserve logs) > > compare logs > > Also chrome://webrtc-internals can be used to see "the real picture", > bad thing about it: I can only check if connection is alive (not an > expert ... :(( ) > > > > > Our connection might be bad, because our central firewall has to > handle too many vpn-connections at the same time. > > This might be the cause for the bad connections. > > > > It’s just that OpenMeetings 4 can handle that and OpenMeetings 5 > can’t. > > At least the way it is configured right now. > > So I’m trying to find a way to make OpenMeetings 5 handle bad > connections in a better way. > > > > Best regards, > > Alex > > > > > > *Von:*Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com>> > *Gesendet:* Mittwoch, 18. November 2020 10:04 > *An:* Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > *Betreff:* Re: optimize performance > > > > Hello Alex, > > > > On Tue, 17 Nov 2020 at 23:35, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> wrote: > > Hi Maxim, > > > > „working from home“ means lesser network speed (slower upload > usually). „In office“ means 100 Mbit/s upload and download > between the sites (different cities) and gigabit in our > main-site (where I work). > > So, yes, working from home sometimes means a crappy connection. > > But – that’s the thing – OpenMeetings 4 and other > videoconference-systems seem to handle that way better. > > As I wrote: OpenMeetings 4 is useable. > > OpenMeetings 5 lets people (from home) join the meeting and > after a few seconds, they get this „media server got > disconnected for user xy“-message. > > > > You need TURN server :))) > > I guess all your "home users" have wifi routers and "grey" IP > addresses, so TURN should help to establish MM connection > > > > It’s not possible to use. > > > > We try to do what we can to improve the connection, maybe > there’s something we can do (could be the ssl-vpn-connection). > > But concerning OpenMeetings 5, I would really like it, if it > worked equally stable as OpenMeetings 4. > > > > > > What’s „demo-next“? > > > > Best regards, > > Alex > > > > > > *Von:*Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com>> > *Gesendet:* Dienstag, 17. November 2020 16:48 > *An:* Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > *Betreff:* Re: optimize performance > > > > Hello Alex, > > > > On Tue, 17 Nov 2020 at 21:29, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> wrote: > > Hi Maxim, > > > > we're still havin huge problems with people working from > home. OpenMeetings 4 is useable, OpenMeetings 5 isn't - > like, not at all. > > As soon as everyone is in office, OpenMeetings 5 is great, > super quality and much simpler to use (no crappy flash). > > > > What are the symptoms? > > What is the difference between "in office" and "from home"? > (are they try to use 3G at home?) > > > > Is it the same with demo-next? > > > > > > I asked people to perform network-test, and the results > show 1 Mb/s upload or even less. > > But since OpenMeetings 4 works, I'm not sure if the test > is correct. > > Also people tell me, their spouses use videoconferencing > (not an the same time, but with a different system) and > they don't have these problems. > > > > > > Since Flash will be end-of-life in 2021, I will not be > able to offer OpenMeetings 4 anymore. > > But OpenMeetings 5 just doesn't work from home-office. > > > > > > > > In case you have more suggestions, I would be really thankful. > > > > > > > > > > > > Here's our scenario: > > Ubuntu 20.04.1 LTS > > > > I would use 18.04 and native (non-dockerized KMS) > > (but I'm not sure why it depends on your user's location ...) > > > > Virtual Machine (VMware Version 11, 8 CPU cores, 8 GB RAM, > 60 GB HDD <-- I can upgrade those values without any > problems) > > > > I usually recommend 16GB RAM, but again the main issue why it > depends on attendees location > > > > One OpenMeetings-Server, not accessible from external PCs, > so no need to get the central firewall right (users are > either in the office or use vpn; so everybody is coming > from internal network) > > Clients use Firefox 78.4.1 ESR > > OpenMeetings 5 > > Version 5.0.1 > > Revision 3628ad7 > > Builddate 2020-09-19T04:50:54Z > > Installed using "Installation OpenMeetings 5.0.1 on Ubuntu > 20.04 lts.pdf" and "Installation SSL certificates and > Coturn for OpenMeetings 5.0.1 on Ubuntu 20.04.pdf", > > but with a domain certificate (instead of let's encrypt), > so skipping 1-5 from the second installation guide. > > Also skipping part 8 from the second manual, since > OpenMeetings is not behind a firewall (just used > internally) anf ufw is not installed/activated. > > LDAP configured and working > > > ldap_userdn_format=sAMAccountName=%s,OU=Users,DC=myfirm,DC=local > > ldap_provisionning=AUTOCREATE > > ldap_deref_mode=always > > ldap_use_admin_to_get_attrs=true > > ldap_sync_password_to_om=true > > ldap_group_mode=NONE > > ldap_group_query=(&(memberUid=%s)(objectClass=posixGroup)) > > ldap_user_attr_login=sAMAccountName > > ldap_user_attr_lastname=sn > > ldap_user_attr_firstname=givenName > > ldap_user_attr_mail=mail > > ldap_user_attr_street=streetAddress > > ldap_user_attr_additionalname=description > > ldap_user_attr_fax=facsimileTelephoneNumber > > ldap_user_attr_zip=postalCode > > ldap_user_attr_country=c > > ldap_user_attr_town=l > > ldap_user_attr_phone=telephoneNumber > > # optional attribute for user picture > > ldap_user_attr_picture=info > > # ldap_user_attr_picture=thumbnailPhoto > > ldap_group_attr=memberOf > > ldap_user_picture_uri=profile.png > > ldap_use_lower_case=false > > > ldap_import_query=(&(objectCategory=person)(wWWHomePage=*)) > > Logs for LDAP activated > > sudo vi > > /opt/open501/webapps/openmeetings/WEB-INF/classes/logback-config.xml > > <logger name="org.apache.directory" level="DEBUG" /> > > · I just deactivated that > > More memory > > cd /opt > > cd open501/ > > sudo vi openmeetings.service > > # Environment CATALINA_OPTS=" à-Xms2g -Xmx4g > > Change default resolution > > sudo vi > > /opt/open501/webapps/openmeetings/WEB-INF/classes/org/apache/openmeeti > ngs/web/room/VideoSettings.html > > <option value="6" data-width="320" data-height="240" > selected="selected">320x240 [HVGA 4:3 (~56 > KByte/sec)]</option> > > Some Icons > > Changed some logos/icons in > /opt/open501/webapps/openmeetings/css/images and > /opt/open501/webapps/openmeetings/public/ > > Configuration/Administration > > document.dpi 150 > > document.quality 90 > > screensharing.default.fps 10 > > max.upload.size 104857600 > > mp4.audio.rate 22050 > > mp4.audio.bitrate 32k > > cam.fps 10 > > mic.rate 22 > > mic.echo.cancellation on > > mic.noise.suppression on > > ulimit > > # edit the following file > > user@ubuntu:~$ sudo vim /etc/security/limits.conf > > # add following lines to it > > * soft nproc 65535 > > * hard nproc 65535 > > * soft nofile 65535 > > * hard nofile 65535 > > root soft nproc 65535 > > root hard nproc 65535 > > root soft nofile 65535 > > root hard nofile 65535 > > # edit the following file > > user@ubuntu:~$ sudo vim /etc/pam.d/common-session > > # add this line to it > > session required pam_limits.so > > # logout and login and try the following command > > user@ubuntu:~$ ulimit -n > > 65535 > > reboot > > > > Best regards, > > Alex > > > > -----Ursprüngliche Nachricht----- > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com>> > Gesendet: Dienstag, 17. November 2020 09:52 > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > Betreff: Re: optimize performance > > > > I would expect: the stability will be improved :) > > > > On Tue, 17 Nov 2020 at 15:39, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > > > Hi Maxim, > > > > > > > > alright, no „fs.file-max“, but all the rest. Did it. Let’s > see, i fit positively affects the performance. > > > > > > > > Best regards, > > > > Alex > > > > > > > > > > > > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com> <mailto:solomax...@gmail.com > <mailto:solomax...@gmail.com>> > > > Gesendet: Montag, 16. November 2020 16:02 > > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org> > <mailto:user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > > > Betreff: Re: optimize performance > > > > > > > > > > > > > > > > On Mon, 16 Nov 2020 at 21:00, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > Hello Maxim. > > > > > > > > I did this here in order to permanently set the value to > 65535: > > > > > https://medium.com/@muhammadtriwibowo/set-permanently-ulimit-n-open-files-in-ubuntu-4d61064429a > > <https://medium.com/@muhammadtriwibowo/set-permanently-ulimit-n-open-f > iles-in-ubuntu-4d61064429a> > > > > > > > > After a reboot, the server displays the increased value > after I enter the command: > > > > su nobody --shell /bin/bash --command "ulimit -n" > > > > è 65535 > > > > > > > > > > > > Here’s the description of how to increase the values, > according to the website mentioned above: > > > > > > > > # To increase the available limit to say 65535 > > user@ubuntu:~$ sudo vim /etc/sysctl.conf > > > > # add the following line to it > > fs.file-max = 65535 > > > > > > > > # run this to refresh with new config > > user@ubuntu:~$ sudo sysctl -p > > > > > > > > > > > > I wouldn't do the changes above > > > > Ubuntu 20.04 has > > > > fs.file-max = 9223372036854775807 > > > > by default > > > > no need to decrease :)) > > > > > > > > below commands are correct > > > > this is the way I'm also using :)) > > > > > > > > # edit the following file > > user@ubuntu:~$ sudo vim /etc/security/limits.conf > > > > # add following lines to it > > * soft nproc 65535 > > * hard nproc 65535 > > * soft nofile 65535 > > * hard nofile 65535 > > root soft nproc 65535 > > root hard nproc 65535 > > root soft nofile 65535 > > root hard nofile 65535 > > > > # edit the following file > > user@ubuntu:~$ sudo vim /etc/pam.d/common-session > > > > # add this line to it > > session required pam_limits.so > > > > # logout and login and try the following command > > user@ubuntu:~$ ulimit -n > > 65535 > > > > > > > > > > > > > > > > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com> <mailto:solomax...@gmail.com > <mailto:solomax...@gmail.com>> > > > Gesendet: Donnerstag, 12. November 2020 16:35 > > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org> > <mailto:user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > > > Betreff: Re: optimize performance > > > > > > > > It displays current value > > > > > > > > > > > > from mobile (sorry for typos ;) > > > > > > > > > > On Thu, Nov 12, 2020, 22:16 Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > Hi, > > > > > > > > uhm, ok, so it seems like my command didn’t really change > anything but just displayed the default-value? > > > > > > > > Best regards, > > > > Alex > > > > > > > > > > > > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com> <mailto:solomax...@gmail.com > <mailto:solomax...@gmail.com>> > > > Gesendet: Donnerstag, 12. November 2020 13:50 > > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org> > <mailto:user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > > > Betreff: Re: optimize performance > > > > > > > > 1024 is the default > > > > and it seems to be not enough for 1 room with 5 users .... > > > > > > > > On Thu, 12 Nov 2020 at 19:16, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > Hi, > > > > > > > > ok, got it. Ubuntu Server cannot use „root“, unless you > activate it by setting a password. > > > > So I typed sudo root passwd and set a password. > > > > Still, su nobody --shell /bin/bash --command "ulimit -n" > was asking for a password, and it wasn’t root nor the > password of my linux-user. > > > > So I typed su and my new root-password. That worked. > > > > After that, I could use the command su nobody --shell > /bin/bash --command "ulimit -n". > > > > I got the response 1024, I hope that means all is well. > > > > > > > > Never used „su“ before, always used „sudo“, so I just > learned something new. > > > > > > > > Best regards, let’s see if „ulimit“ changes the behaviour. > > > > > > > > Alex > > > > > > > > > > > > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com> <mailto:solomax...@gmail.com > <mailto:solomax...@gmail.com>> > > > Gesendet: Donnerstag, 12. November 2020 10:08 > > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org> > <mailto:user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > > > Betreff: Re: optimize performance > > > > > > > > > > > > > > > > On Thu, 12 Nov 2020 at 16:05, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > Hello Maxim, > > > > > > > > sorry to bother again, but i wanted to check out this > „ulimit“-option, since it looks promising to me. > > > > Unfortunately I don’t seem to get it; I always get „su: > Authentication failure“ after the command: su nobody > --shell /bin/bash --command "ulimit -n" > > > > > > > > `su` is a way to run command as different user > > > > it works as `sudo` > > > > to use it you need to authenticate yourself i.e. enter > your current Linux password > > > > > > > > > > > > I am using username/password from the configuration file > (sudo nano > > /opt/open501/webapps/openmeetings/WEB-INF/classes/applicationContext.xml; > turnUser:userpassword) – copy & paste, so there can’t be a > typo. > > > > > > > > Now, I am kind of stumped here. > > > > > > > > It should be username/password from the > applicationContext.xml, right? > > > > > > > > this is the user/password for TURN, I doubt you can use it > > > > > > > > > > > > Best regards, > > > > Alex > > > > > > > > > > > > > > > > Von: Maxim Solodovnik <solomax...@gmail.com > <mailto:solomax...@gmail.com> <mailto:solomax...@gmail.com > <mailto:solomax...@gmail.com>> > > > Gesendet: Donnerstag, 12. November 2020 03:43 > > An: Openmeetings user-list <user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org> > <mailto:user@openmeetings.apache.org > <mailto:user@openmeetings.apache.org>> > > > Betreff: Re: optimize performance > > > > > > > > Hello Alex, > > > > > > > > On Wed, 11 Nov 2020 at 19:57, Ninnig, Alexander > <alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de> > <mailto:alexander.nin...@rechnungshof.rlp.de > <mailto:alexander.nin...@rechnungshof.rlp.de>> > wrote: > > > > Hello, > > > > again, I have to say, that I really like OpenMeetings 5. > When using OM5 inhouse, everything works really well. The > webcam-picture is extremely sharp and fluent. > > > > Problem is: because of Covid19, a lot of our employees are > working from their home and they don't have the best > internet-bandwith (and sometimes, they don't know it and > blame the system). > > Using OM5 with people who are working from home seems to > be a little bit more unstable, than OM4. > > Somehow I guess, that OM5 transmits more data than OM4. > > So when using OM5, people get constantly disconnected from > the media server. > > > > > > > > Please ensure ulimit for the user who run OM/KMS/TURN on > server > > > > since "everything is a file" it should be possible to open > lot's of files > > > > > > > > here is an example command > > > > `su nobody --shell /bin/bash --command "ulimit -n"` > > > > > > > > > > Except for the webcam-videosize: is there anything more I > can do to decrease the transmitted data? > > Can I reduce the framerate? > > > > > > > > you can try cam.fps (Admin->Config > https://openmeetings.apache.org/GeneralConfiguration.html > > <https://openmeetings.apache.org/GeneralConfiguration.html>) > > > > > > > > Can I activate some sort of higher compression? > > > > > > > > unfortunately browser will "auto-deside" all these > parameters and we can only _try_to_change_anything_ > > > > > > > > > > Best regards, > > Alex > > > > > > > > > > > > > > -- > > > > Best regards, > > Maxim > > > > > > > > > > > > > > -- > > > > Best regards, > > Maxim > > > > > > > > > > > > > > -- > > > > Best regards, > > Maxim > > > > > > > > > > > > > > -- > > > > Best regards, > > Maxim > > > > > > > > -- > > > > Best regards, > > Maxim > > > > > > > -- > > Best regards, > Maxim > > > > > -- > > Best regards, > Maxim > > > > -- > Best regards, > Maxim
