You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/administrator-manual/advanced/wss_transport.md
+20-22Lines changed: 20 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,58 +8,56 @@ sidebar_position: 7
8
8
NethVoice on NethServer 8 supports WebSocket Secure (WSS) transport for extensions. Each NethVoice instance exposes a specific WSS port dedicated to WebSocket connections.
9
9
10
10
:::warning Network Constraint
11
-
This configuration relies on direct connectivity and **does not function behind NAT**. Ensure NethVoice has direct network visibility to the client endpoints.
11
+
This configuration relies on direct connectivity and **does not work behind NAT**. Ensure that NethVoice has direct network visibility to the client endpoints.
12
12
:::
13
13
14
14
## Service Configuration {#service-configuration}
15
15
16
-
The WSS port assigned to the specific NethVoice instance is defined dynamically.
16
+
The WSS port assigned to the specific NethVoice instance is dynamically defined.
17
17
18
18
***Variable:**`ASTERISK_WSS_PORT`
19
-
***Location:**Inside the module environment variables.
19
+
***Location:**Within the module's environment variables.
20
20
21
21
Clients connecting to NethVoice via WebRTC or other WebSocket-based protocols must target this specific port.
22
22
23
23
## Extension Setup {#extension-setup}
24
24
25
-
To utilize WSS, the extension must be configured within the **Advanced Interface** (FreePBX).
26
-
25
+
To use WSS, the extension must be configured within the **Advanced Interface** (FreePBX).
27
26
28
27
### Prerequisites {#prerequisites}
29
28
30
-
1.Create a new **Custom Extension** or edit an existing one.
31
-
2.Access the **Advanced Interface**.
29
+
1. Create a new **Custom Device** or modify an existing one.
30
+
2. Access the **Advanced Interface**.
32
31
33
32
### Transport Settings {#transport-settings}
34
33
35
-
Modify the extension `Advanced` settings with the following parameters to enable secure WebSocket transport:
34
+
Modify the `Advanced` settings of the extension with the following parameters to enable secure WebSocket transport:
36
35
37
-
1.**Outbound Proxy:** Remove proxy configurations for this specific extension.
38
-
2.**Transport:** Set to `0.0.0.0-wss`.
39
-
3.**Enable AVPF:** Set to `Yes`.
40
-
4.**Enable ICE Support:** Set to `Yes`.
41
-
5.**Enable rtcp Mux:** Set to `Yes`.
42
-
6.**Media Encryption:** Set to `DTLS`.
43
-
7.**Enable WebRTC Defaults:** Enable this setting to apply standard WebRTC optimizations.
36
+
1.**Outbound Proxy:** Remove proxy configurations for this specific extension.
37
+
2.**Transport:** Set to `0.0.0.0-wss`.
38
+
3.**Enable AVPF:** Set to `Yes`.
39
+
4.**Enable ICE Support:** Set to `Yes`.
40
+
5.**Enable rtcp Mux:** Set to `Yes`.
41
+
6.**Media Encryption:** Set to `DTLS`.
42
+
7.**Enable WebRTC Defaults:** Enable this setting to apply standard WebRTC optimizations.
44
43
45
44
## Client Configuration {#client-configuration}
46
45
47
-
Configure your client with the following settings. Ensure your client device has network access to the NethVoice instance.
46
+
Configure your client with the following settings. Ensure that the client device has network access to the NethVoice instance.
48
47
49
48
| Parameter | Value / Instruction |
50
49
| :--- | :--- |
51
50
|**SIP Server / Domain**| The FQDN of your NethVoice instance. |
|**Port**| The value of `ASTERISK_WSS_PORT` (check the module's environment variables). |
54
+
|**Path**|`/ws` (Default WebSocket path for Asterisk). |
56
55
|**Username / Extension**| The extension number (e.g., `1001`). |
57
-
|**Password / Secret**| The extension secret defined in FreePBX. |
56
+
|**Password / Secret**| The extension's secret defined in FreePBX. |
58
57
|**Media Encryption**|**DTLS** (Mandatory for WebRTC/WSS). |
59
58
|**AVPF**| Enabled / Yes. |
60
59
|**ICE Support**| Enabled / Yes. |
61
60
62
61
:::warning SSL Certificate Trust
63
-
WSS requires a valid SSL certificate. If you are using a self-signed certificate, the client device (or browser) **must explicitly trust the certificate Authority (CA)** before the connection can be established.
64
-
:::
65
-
62
+
WSS requires a valid SSL certificate. If using a self-signed certificate, the client device (or browser) **must explicitly trust the Certificate Authority (CA)** before the connection can be established.
NethVoice su NethServer 8 supporta il trasporto WebSocket Secure (WSS) per gli interni. Ogni istanza di NethVoice espone una porta WSS specifica dedicata alle connessioni WebSocket.
9
+
10
+
:::warning Vincolo di Rete
11
+
Questa configurazione si basa sulla connettività diretta e **non funziona dietro NAT**. Assicurarsi che NethVoice abbia visibilità di rete diretta verso gli endpoint client.
12
+
:::
13
+
14
+
## Configurazione del Servizio {#configurazione-del-servizio}
15
+
16
+
La porta WSS assegnata alla specifica istanza di NethVoice è definita dinamicamente.
17
+
18
+
***Variabile:**`ASTERISK_WSS_PORT`
19
+
***Posizione:** All'interno delle variabili d'ambiente del modulo.
20
+
21
+
I client che si connettono a NethVoice via WebRTC o altri protocolli basati su WebSocket devono puntare a questa porta specifica.
|**Port**| Il valore di `ASTERISK_WSS_PORT` (controllare le variabili d'ambiente del modulo). |
54
+
|**Path**|`/ws` (Percorso WebSocket predefinito di Asterisk). |
55
+
|**Username / Extension**| Il numero dell'interno (es. `1001`). |
56
+
|**Password / Secret**| Il segreto dell'interno definito in FreePBX. |
57
+
|**Media Encryption**|**DTLS** (Obbligatorio per WebRTC/WSS). |
58
+
|**AVPF**| Abilitato / Yes. |
59
+
|**ICE Support**| Abilitato / Yes. |
60
+
61
+
:::warning Fiducia nel Certificato SSL
62
+
WSS richiede un certificato SSL valido. Se si utilizza un certificato autofirmato, il dispositivo client (o il browser) **deve esplicitamente considerare attendibile l'Autorità di Certificazione (CA)** prima che la connessione possa essere stabilita.
0 commit comments