Summary
ONVU Learning relies on WebRTC (Web Real-Time Communication) to establish connections between the cameras, clients and the ONVU Platform
The Network Test Tool allows you to check that this is working and a guide is here.
Symptoms of a WebRTC issue could be any of the following
- Issues connecting to cameras in the View Video section of ONVU Learning
- stun:stun.kinesisvideo.eu-west-2.amazonaws.com:443 test fails in the Network Test Tool
- You see a "white dot"
on the WebRTC indicator in View Video
WebRTC Network and Security Requirements
Network Summary
WebRTC establishes real-time peer-to-peer (P2P) media and data connections between clients.
All connections are initiated outbound by the client. WebRTC uses a combination of:
- Signalling (HTTPS) for session setup
-
STUN (UDP 443) for public IP discovery
Port and Protocol Requirements
The following ports are required for WebRTC to work correctly. No inbound ports are required.
| Purpose | Protocol | Port(s) | Direction | Destination | Notes |
|---|---|---|---|---|---|
| Signalling | HTTPS (TLS) | 443 | Outbound | kinesisvideo.eu-west-2.amazonaws.com | Used for session setup and ICE candidate exchange |
| STUN | UDP | 443 | Outbound | stun:stun.kinesisvideo.eu-west-2.amazonaws.com | Discovers public IP/port mapping. Stun protocol needs to be allowed. |
| Video | UDP | 1024–65535 | Outbound | Peer to Peer connection | WebRTC video |
Proxy and TLS Inspection Policy
| Traffic Type | Proxy Support | TLS Inspection | Notes |
|---|---|---|---|
| STUN/TURN (UDP) | ❌ Not supported | N/A |
Must bypass proxy; UDP cannot be proxied. Camera also uses a SSL certificate |
| TURN over TLS (TCP 443) | ❌ Not supported | ❌ Must bypass TLS inspection | DTLS fingerprint validation will fail if intercepted |
Recommendation:
Bypass all proxy and TLS inspection for kinesisvideo.eu-west-2.amazonaws.com
Browser and Extension Considerations
| Area | Requirement | Notes |
|---|---|---|
| Browser support | Google Chrome, Microsoft Edge | Must support WebRTC and DTLS 1.2+. This is supported by the latest versions of these browsers. |
| Extensions | Disable WebRTC-modifying or privacy extensions | They may block ICE/STUN candidates or IP exposure |
IP Addresses
ONVU Learning is hosted on Amazon Web Services (AWS) which uses dynamic IP addresses. This means that it is not possible to provide a stable list of IP addresses used for the WebRTC service.