HA coTURN stack setup or ACS in Azure

Question

HA coTURN stack setup or ACS in Azure

Alex 515

Hello,

I have an Azure LB with 2 backend VMs configured with coTURN service, but ran into an issue because 2 clients of the WebRTC application is not connecting to the same backend for relaying the messages as the traffic gets load balanced. Is it possible to configure something like active/passive backends with Azure LB? Or any other solutions available to mitigate this?
Does Azure Communication Services support STUN and TURN? If yes, could you please guide me how to configure/use this feature, instead of managing the service on our own?

Thank you for your time and assistance.

Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2024-01-10T06:36:40.9666667+00:00

@Alex , Just checking in to see if you had got a chance to see the previous responses. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.

2 answers

Your answer

Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2024-01-10T06:36:40.9666667+00:00

@Alex , Just checking in to see if you had got a chance to see the previous responses. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.

Answer 1

Alex 515

Fellow Azure buddies, an update to this query.

ACS TURN feature is retiring - https://azure.microsoft.com/en-us/updates/retirement-notice-azure-communication-services-network-traversal-turn-public-preview-is-retiring/

Thanks to ajkuma and msrini for the assistance.

However, I am still looking for some workaround for #1. Would be of great help if anyone could provide your insights on the same.

Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2024-01-02T19:19:45.0533333+00:00

Thanks for the follow-up and update.

I have also added additional tags to receive insights (on #1) from the targetted audience/SMEs. // @msrini-MSFT
KapilAnanth 49,866 Reputation points Moderator

2024-01-08T06:01:49.76+00:00
@Alex ,

Greetings.

Wrt, "Is it possible to configure something like active/passive backends with Azure LB? Or any other solutions available to mitigate this?"

This is possible, but not directly by the Load Balancer

Instead, the backends should fail the health probes themselves and mark themselves unavailable. (become Passive)

This way, LB would only forward the traffic to the Active backend.

The above can be achieved by using a different port for health probe traffic or using HTTP/HTTPS probes to send a non-success HTTP response.

See : HA architectures overview

This setup supports both active/active and active/standby configurations. However, for active/standby configurations the NVA instances need to offer a TCP/UDP port or HTTP endpoint that doesn't respond to the Load Balancer health probes unless the instance is in the active role.

For your scenario, you can also consider : Session persistence.

Use a Client IP (2-tuple) algorithm so that successive requests from the same client IP address are handled by the same backend instance,

Hope this helps.

Cheers,

Kapil
Alex 515 Reputation points

2024-01-10T12:59:44.7066667+00:00

Thanks Kapil, let me experiment this configuration.
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2024-01-11T19:55:18.3433333+00:00

Alex, thanks for the follow-up and update. Sure, kindly let us know. //KapilAnanth-MSFT

Answer 2

msrini-MSFT 9,301 Microsoft Employee

Hi, To fix the first problem you can choose the load balancing stickiness to 2 tuple instead of 5tuple from the load balancing rules settings. I am not sure of your questions number 2. Can you share any reference doc as what those features are?

Alex 515 Reputation points

2023-12-19T05:05:17.96+00:00
Hello @msrini-MSFT ,

I believe the problem will not be solved still, because 2 tuple will route the traffic to same backend for the same client IP, but in my case 2 different clients should connect to the same backend.

I referred to this Azure documentation that ACS offers STUN and TURN service, need help how to configure/use that. - https://learn.microsoft.com/en-us/azure/communication-services/concepts/network-traversal
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-12-20T20:02:46.2966667+00:00

Apologies for the delayed response. I'm checking on this and will get back to you soon. I'll leave this open for other community members to share pointers on handling a similar setup/experience.
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-12-21T19:32:44.34+00:00

For ACS specific question, I'm checking on this internally and will get back to you soon. Thanks for your patience. // @msrini-MSFT
Alex 515 Reputation points

2023-12-22T06:12:37.88+00:00

Thank you for the update.
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-12-26T04:59:14.89+00:00

This service is being deprecated, kindly check this Retirement notice: Azure Communication Services Network Traversal (TURN) Public Preview is retiring. Thanks for your feedback.
Alex 515 Reputation points

2024-01-01T04:54:48.16+00:00

Oh, I didn't notice that. Thank you for providing that update.

Share via

HA coTURN stack setup or ACS in Azure

2 answers

Your answer