Ongoing attack on Coturn servers

[Eirikr70]

Hello, There is an ongoing attack on Coturn servers at OVHCloud and Hetzner.
Correct me if I'm wrong but as far as I understand ejabberd integrates a Coturn server. I would like to understand if ejabberd presents weaknesses in relation to this attack, in what way one can harden their setup and if a Docker install is more secure.
Thanks.

[licaon-kter]

ejabberd includes a STUN/TURN server, yes:

• https://docs.ejabberd.im/admin/configuration/listen/#ejabberd_stun
• https://docs.ejabberd.im/admin/configuration/modules/#mod_stun_disco

coturn is a separate project from different devs: https://github.com/coturn/coturn

it's recommended to use random STUN and TURN ports, not the defaults, as the server will communicate to the user client the right port.