Welcome to the Open WebRTC Toolkit Server User Guide. This guide describes how to install and configure the Open WebRTC Toolkit Server for multi-party conferences and so on. This guide also explains how to install and launch the Peer Server for peer-to-peer communications.
Open WebRTC Toolkit Server provides an efficient WebRTC-based video conference service that scales a single WebRTC stream out to many endpoints. The following list briefly explains the purpose of each section in this guide:
- Section 1. Introduction and conventions used in this guide.
- Section 2. Installing and configuring the OWT server.
- Section 3. Brief guide of OWT server manangement console.
- Section 4. Installing the OWT sample application server.
- Section 5. Installing and launching the Peer Server.
Installation requirements and dependencies for the OWT server, sample application server, and peer server are described in their associated sections.
##1.2 Terminology {#Conferencesection1_2} This manual uses the following acronyms and terms:
| Abbreviation | Full Name |
|---|---|
| ADT | Android Developer Toolkit |
| API | Application Programming Interface |
| GPU | Graphics Processing Unit |
| IDE | Integrated Development Environment |
| JS | JavaScript programming language |
| MCU | Multipoint Control Unit |
| MSML | Media Server Markup Language |
| P2P | Peer-to-Peer |
| QoS | Quality of Service |
| ReST | Representational State Transfer |
| RTC | Real-Time Communication |
| RTCP | RTP Control Protocol |
| RTSP | Real Time Streaming Protocol |
| RTMP | Real Time Messaging Protocol |
| RTP | Real Time Transport Protocol |
| SDK | Software Development Kit |
| SDP | Session Description Protocol |
| SIP | Session Initiation Protocol |
| XMPP | Extensible Messaging and Presence Protocol |
| WebRTC | Web Real-Time Communication |
##1.3 For more information {#Conferencesection1_3} For more information, visit the following Web pages:
- Intel HTML Developer Zone: https://software.intel.com/en-us/html5/tools
- Intel® Collaboration Suite for WebRTC
- Intel® Visual Compute Accelerator
- The Internet Engineering Task Force (IETF®) Working Group
- W3C WebRTC Working Group: http://www.w3.org/2011/04/webrtc/
- WebRTC Open Project: http://www.webrtc.org
This section describes the system requirements for installing the OWT server, and the compatibility with its client.
Note: Installation requirements for the peer server are described in section 5 of this guide.
Table 2-1 describes the system requirements for installing the OWT server. Table 2-2 gives an overview of OWT server compatibility with the client.
Table 2-1. Server requirements
| Application name | OS version |
|---|---|
| OWT server | CentOS* 7.6, Ubuntu 18.04 LTS |
The GPU-acceleration can only be enabled on kernel 4.14 or later (4.19 or later is recommended).
If you want to set up video conference service with H.264 codec support powered by non GPU-accelerated OWT server, OpenH264 library is required. See Deploy Cisco OpenH264* Library section for more details.
If you want to set up video conference service with SVT-HEVC Encoder on Ubuntu 18.04 LTS. See Deploy SVT-HEVC Encoder Library section for more details.
If you want to set up video conference service powered by GPU-accelerated OWT server through Intel® Media SDK, please follow the below instructions to install server side SDK where the video-agents run.
If you are working on the following platforms with the integrated graphics, please install Intel® Media SDK. The current release is fully tested on MediaSDK 2018 Q4(https://github.com/Intel-Media-SDK/MediaSDK/releases/tag/intel-mediasdk-18.4.0).
- Intel® Xeon® E3-1200 v4 Family with C226 chipset
- Intel® Xeon® E3-1200 and E3-1500 v5 Family with C236 chipset
- 5th Generation Intel® CoreTM
- 6th Generation Intel® CoreTM
- 7th Generation Intel® CoreTM
For download or installation instructions, please visit https://github.com/Intel-Media-SDK/MediaSDK.
The external stream output and mp4 format recording rely on AAC encoder libfdk_aac support in ffmpeg library, please see Compile and deploy ffmpeg with libfdk_aac section for detailed instructions.
Table 2-2. Client compatibility
| Application Name | Google Chrome* 78 | Mozilla Firefox* 70 | Microsoft Edge* 44.18362.387.0 | Safari* 13.0 | Open WebRTC Toolkit Client SDK for Android | Open WebRTC Toolkit Client SDK for iOS | Open WebRTC Toolkit Client SDK for Windows |
|---|---|---|---|---|---|---|---|
| OWT Client | YES | YES | YES | YES | YES | YES | YES |
| Management Console | YES | YES | YES | YES | N/A | N/A | N/A |
This section describes the dependencies and steps for installing the OWT server.
Table 2-3. OWT Server Dependencies
| Name | Version | Remarks |
|---|---|---|
| Node.js | 8.15.0 | Website: http://nodejs.org/ |
| Node modules | Specified | N/A |
| MongoDB | 2.6.10 | Website: http://mongodb.org |
| System libraries | Latest | N/A |
All dependencies, except system libraries, are provided or can be automatically installed with the release package.
All essential system libraries are installed when you install the OWT server package using the Ubuntu or CentOS's package management system.
Regarding Node.js*, make sure it's installed in your system prior to installing the OWT server. We recommend version 8.15.0. Refer to http://nodejs.org/ for the details and installation.
Before installing the OWT server, make sure your login account has sys-admin privileges; i.e. the ability to execute sudo.
If you run OWT server on CentOS, configure the system firewall well to make sure all ports required by OWT server components are open.
On the server machine, directly unarchive the package file.
tar xf CS_WebRTC_Conference_Server_MCU.v<Version>.CentOS.tgz
For Ubuntu version OWT server, do as following:
tar xf CS_WebRTC_Conference_Server_MCU.v<Version>.Ubuntu.tgz
The default H.264 library installed is a pseudo one without any media logic. To enable H.264 support in non GPU-accelerated OWT server system, you must deploy the Cisco OpenH264 library. Choose yes to download and enable Cisco Open H264 library during video-agent dependency installation at Release-/[video_agent/analytics_agent]/install_deps.sh.
Or you can also use install_openh264.sh or uninstall_openh264.sh scripts under Release-/video_agent folder to enable or disable Cisco OpenH264 library later.
The default ffmpeg library used by OWT server has no libfdk_aac support. If you want to enable libfdk_aac for external stream output or mp4 format recording, please compile and deploy ffmpeg yourself with following steps:
Note: The libfdk_aac is designated as "non-free", please make sure you have got proper authority before using it.
-
Go to Release-/audio_agent folder, compile ffmpeg with libfdk_aac with below command:
compile_ffmpeg_with_libfdkaac.sh
Note: This compiling script will install all dependencies for ffmpeg with libfdk_aac. If those dependencies are not expected on deployment machines, please run the script on other proper machine.
- Copy all output libraries under ffmpeg_libfdkaac_lib folder to Release-/audio_agent/lib to replace the existing ones.
The default SVT-HEVC Encoder library installed is a pseudo one without any media logic. If you want to enable SVT-HEVC Encoder, please compile and deploy the library yourself with following steps:
-
Go to Release-/video_agent folder, compile SVT-HEVC Encoder library with below command:
compile_svtHevcEncoder.sh -
Copy the built library(libSvtHevcEnc.so.1) to Release-/video_agent/lib to replace the existing one.
The default certificate (certificate.pfx) for the OWT server is located in the Release-//cert folder. When using HTTPS and/or secure socket.io connection, you should use your own certificate for each server. First, you should edit management_api/management_api.toml, webrtc_agent/agent.toml, portal/portal.toml, management_console/management_console.toml to provide the path of each certificate for each server, under the key keystorePath. See Table 2-4 for details.
We use PFX formatted certificates in OWT server. See https://nodejs.org/api/tls.html for how to generate a self-signed certificate by openssl utility. We recommend using 2048-bit private key for the certificates. But if you meet DTLS SSL connection error in webrtc-agent, please use 1024-bit instead of 2048-bit private key because of a known network MTU issue.
After editing the configuration file, you should run ./initcert.js inside each component to input your passphrases for the certificates, which would then store them in an encrypted file. Be aware that you should have node binary in your shell's $PATH to run the JS script.
Table 2-4. OWT server certificates configuration
| configuration file | |
|---|---|
| management-api HTTPS | management_api/management_api.toml |
| portal secured Socket.io | portal/portal.toml |
| DTLS-SRTP | webrtc_agent/agent.toml |
| management-console HTTPS | management_console/management_console.toml |
For OWT sample application's certificate configuration, please follow the instruction file 'README.md' located at Release-/apps/current_app/.
To launch the OWT server on one machine, follow steps below:
-
Initialize the OWT package for the first time execution.
For general OWT Server installation, use following command:
bin/init-all.sh [--deps]If you want to enable GPU-acceleration through Intel Media Server Studio, use following command:
bin/init-all.sh [--deps] --hardwareNote: If you have already installed the required system libraries, then --deps is not required. If you have installed early version of OWT server, the stored data will not be compatible with 4.1 version. Pay attention to the warning and choose option to update your OWT data in mongodb.
-
Run the following commands to start the OWT server:
cd Release-<Version>/ bin/start-all.shNote: If you want to run start-all in a combined command like "ssh remote-host OWT-server-installed-path/bin/start-all", the environment $DISPLAY needs to be explicitly specified as "export DISPLAY=:0.0".
-
To verify whether the server has started successfully, launch your browser and connect to the OWT server at https://XXXXX:3004. Replace XXXXX with the IP address or machine name of your OWT server.
Note: The procedures in this guide use the default room in the sample.
Run the following commands to stop the OWT server:
cd Release-<Version>/
bin/stop-all.sh
Table 2-5. Distributed OWT server components
| Component Name | Deployment Number | Responsibility |
|---|---|---|
| management-api | 1 or many | The entrance of OWT service, keeping the configurations of all rooms, generating and verifying the tokens. Application can implement load balancing strategy across multiple management-api instances |
| cluster-manager | 1 or many | The manager of all active workers in the cluster, checking their lives, scheduling workers with the specified purposes according to the configured policies. If one has been elected as master, it will provide service; others will be standby |
| portal | 1 or many | The signaling server, handling service requests from Socket.IO clients |
| conference-agent | 1 or many | This agent handles room controller logics |
| webrtc-agent | 1 or many | This agent spawning webrtc accessing nodes which establish peer-connections with webrtc clients, receive media streams from and send media streams to webrtc clients |
| streaming-agent | 0 or many | This agent spawning streaming accessing nodes which pull external streams from sources and push streams to rtmp/rtsp destinations |
| recording-agent | 0 or many | This agent spawning recording nodes which record the specified audio/video streams to permanent storage facilities |
| audio-agent | 1 or many | This agent spawning audio processing nodes which perform audio transcoding and mixing |
| video-agent | 1 or many | This agent spawning video processing nodes which perform video transcoding and mixing |
| analytics-agent | 0 or many | This agent spawning media analyzing nodes which perform media analytics |
| sip-agent | 0 or many | This agent spawning sip processing nodes which handle sip connections |
| sip-portal | 0 or 1 | The portal for initializing rooms' sip settings and scheduling sip agents to serve for them |
| app | 0 or 1 | The sample web application for reference, users should use their own application server |
| management-console | 0 or 1 | The console for conference management |
Follow the steps below to set up a OWT server cluster:
-
Make sure you have installed the OWT server package on each machine before launching the cluster which has been described in section Install the OWT server package.
-
Choose machines to initialize MongoDB and RabbitMQ servers.
For MongoDB, do as following:
cd Release-<Version>/ bin/init-mongodb.sh [--deps]For RabbitMQ, do as following:
cd Release-<Version>/ bin/init-rabbitmq.sh [--deps]Note: You can change the shell scripts to initialize them according to your own requirement. Or choose any other existing MongoDB or RabbitMQ service, like those with cluster support. Make sure MongoDB and RabbitMQ services are started prior to all OWT server cluster nodes.
If non-default user of rabbitmq-server or mongodb-server is used, do as following in each module:
initauth.js -
Choose machines to run management-api instances. These machines must be visible to clients(such as browsers and mobile apps).
-
Edit the configuration items of management-api in Release-/management_api/management_api.toml.
- Make sure the [mongo.dataBaseURL] points to the MongoDB instance.
- Make sure the [rabbit.port] and [rabbit.host] point to the RabbitMQ server.
-
Initialize and run management-api instance on each machine with following steps.
-
Initialize OWT server manager management-api for the first time execution:
cd Release-/ management_api/init.sh
Note: If you have installed early version of OWT server, the stored data will not be compatible with 4.0 version. Pay attention to the warning and choose option to update your OWT server data in mongodb.
-
Run OWT server manager management-api and the sample application with following commands:
cd Release-/ bin/daemon.sh start management-api
-
-
Choose any management-api instance machine to run the sample application server for quick OWT service validation.
cd Release-<Version>/ bin/daemon.sh start appNote: You can also deploy the sample application server on separated machine, follow instructions at Release-/apps/current_app/README.md
-
Choose machines to run cluster-managers. These machines do not need to be visible to clients, but should be visible to management-api and all workers.
-
Edit the configurations of cluster-manager in Release-/cluster_manager/cluster_manager.toml.
- Make sure the [rabbit.port] and [rabbit.host] point to the RabbitMQ server.
-
Run the cluster-manager on each machine with following commands:
cd Release-<Version>/ bin/daemon.sh start cluster-manager -
Choose worker machines to run portals. These machines must be visible to clients.
-
Edit the configuration items of portal in Release-/portal/portal.toml.
- Make sure the [mongo.dataBaseURL] points to the MongoDB instance.
- Make sure the [rabbit.port] and [rabbit.host] point to the RabbitMQ server.
- Make sure the [portal.ip_address] or [portal.networkInterface] points to the correct network interface which the clients’ signaling and control messages are expected to connect through.
- Make sure the [portal.force_tls_v12] is true if you want to force TLS version not less than 1.2.
-
Run the portal on each machine with following commands:
cd Release-<Version>/ bin/daemon.sh start portal -
Choose a worker machine to run conference-agent and/or webrtc-agent and/or streaming-agent and/or recording-agent and/or audio-agent and/or video-agent and/or sip-agent. This machine must be visible to other agent machines. If webrtc-agent or sip-agent is running on it, it must be visible to clients.
- If you want to use Intel® Visual Compute Accelerator (VCA) to run video agents, please follow section Configure VCA nodes to enable nodes of Intel VCA as a visible separated machine.
-
Edit the configuration items in Release-/{audio, video, conference, webrtc, streaming, recording, sip}_agent/agent.toml.
- Make sure the [rabbit.port] and [rabbit.host] point to the RabbitMQ server.
- Make sure the [cluster.ip_address] or [cluster.network_interface] points to the correct network interface through which the media streams will flow to other cluster nodes.
Special for conference-agent, edit conference_agent/agent.toml
- Make sure the [mongo.dataBaseURL] points to the MongoDB instance.
-
Initialize and run agent worker.
-
Initialize agent workers for the first time execution if necessary
For each agent, follow these steps:
cd Release-<Version>/ [video_agent/audio_agent/webrtc_agent/recording_agent/streaming_agent/sip_agent/analytics_agent]/install_deps.shIf you want to enable GPU-acceleration for video-agent through Media Server Studio, follow these steps:
cd Release-<Version>/ video_agent/install_deps.sh --hardware video_agent/init.sh --hardware -
Run the following commands to launch agent worker:
cd Release-/ bin/daemon.sh start [conference-agent/webrtc-agent/streaming-agent/audio-agent/video-agent/analytics-agent/recording-agent/sip-agent]
-
-
Repeat step 13 to 15 to launch as many OWT server agent worker machines as you need.
-
Choose one worker machine to run sip-portal if sip-agent workers are deployed:
cd Release-<Version>/ bin/daemon.sh start sip-portal -
Choose one worker machine to run management-console if you need to create/update/delete services and rooms on web page.:
cd Release-<Version>/ bin/daemon.sh start management-console
To setup VCA nodes as separate machines, two approaches are provided. One is the network bridging provided by VCA software stack. The other is IP forwarding rules setting through iptables.
VCA built-in software stack provides network bridging support. Follow section 4.4.1 - Configuring nodes for bridged mode operation in VCA_SoftwareUserGuide.pdf. In this approach, all network traffic will go through one Ethernet interface.
If you want to map each VCA node to different Ethernet interface, IP forwarding can be one alternative to achieve this goal. Follow these steps:
-
Make sure one VCA card is correctly installed and VCA nodes successfully boot up.
-
Make sure the host machine has enough ethernet interface for VCA nodes. Eg: host IP is "10.239.44.100" and 3 ethernet interfaces for 3 nodes of 1 VCA card, and the IP of ethernet Interfaces are "10.239.44.1", "10.239.44.2", "10.239.44.3".
-
Make sure your ip routing tables(please get it with "route -n") on host machine are like below :
Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.239.44.241 0.0.0.0 UG 100 0 0 enp132s0f0 10.239.27.228 10.239.44.241 255.255.255.255 UGH 100 0 0 enp132s0f0 10.239.44.0 0.0.0.0 255.255.255.0 U 0 0 0 enp132s0f0 172.31.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 172.31.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2 172.31.3.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1Note: 10.239.27.228 is DNS server. enp132s0f0 is used for host machine and IP is "10.239.44.100".
-
Please use "ifconfig" on host machine of VCA card to list IP of VCA nodes, you will get the VCA node IPs like "172.31.1.254", "172.31.2.254", "172.31.3.254".
-
Configure IP soft routing policy to set VCA Node to seperated machine.
-
5.1 Enable ip forward and clear iptables on host machine with the following commands:
echo "1" > /proc/sys/net/ipv4/ip_forward iptables -t nat -P PREROUTING ACCEPT iptables -t nat -P POSTROUTING ACCEPT iptables -t nat -P OUTPUT ACCEPT -
5.2 Enable nat policy on host for 3 VCA nodes:
iptables -t nat -A PREROUTING -d 10.239.44.1 -j DNAT --to-destination 172.31.1.1 iptables -t nat -A POSTROUTING -s 172.31.1.1 -j SNAT --to-source 10.239.44.1 iptables -A OUTPUT -d 10.239.44.1 -j DNAT --to-destination 172.31.1.1 iptables -t nat -A PREROUTING -d 10.239.44.2 -j DNAT --to-destination 172.31.2.1 iptables -t nat -A POSTROUTING -s 172.31.2.1 -j SNAT --to-source 10.239.44.2 iptables -A OUTPUT -d 10.239.44.2 -j DNAT --to-destination 172.31.2.1 iptables -t nat -A PREROUTING -d 10.239.44.3 -j DNAT --to-destination 172.31.3.1 iptables -t nat -A POSTROUTING -s 172.31.3.1 -j SNAT --to-source 10.239.44.3 iptables -A OUTPUT -d 10.239.44.3 -j DNAT --to-destination 172.31.3.1 -
5.3 SSH to 3 seperated machines of VCA node:
ssh root@10.239.44.1 ssh root@10.239.44.2 ssh root@10.239.44.3 -
5.4 Disable firewall for VCA nodes after ssh login to it:
systemctl stop firewalld systemctl disable firewalld
-
To stop the OWT server cluster, follow these steps:
-
Run the following commands on each management-api node to stop management-api instances:
cd Release-<Version>/ bin/daemon.sh stop management-apiIf sample application server also runs with specific management-api instance, run the following command to stop it.
bin/daemon.sh stop app -
Run the following commands on cluster manager machine to stop the cluster manager:
cd Release-<Version>/ bin/daemon.sh stop cluster-manager -
Run the following commands on worker machines to stop cluster workers:
cd Release-<Version>/ bin/daemon.sh stop [portal/conference-agent/webrtc-agent/streaming-agent/audio-agent/video-agent/recording-agent/analytics-agent/sip-agent/sip-portal] -
Run the following commands on management-console machine to stop the management-console:
cd Release-<Version>/ bin/daemon.sh stop management-console
Open WebRTC Toolkit server provides built-in fault tolerance / resilience support for its key components, as Table 2-6 shows.
Table 2-6. OWT Server cluster components’ fault tolerance / resilience
| Component Name | Server Reaction | Client Awareness |
|---|---|---|
| management-api | Multiple management-api instances provide stateless services at the same time. If application implements node failure detection and rescheduling strategy, when one node fails, other nodes should take over when the further requests are assigned to any of them. | Management-API RESTful request fail |
| cluster-manager | Auto elect another cluster-manager node as master and provide service. | Transparent |
| portal | All signaling connections on this portal will be disconnected, all actions through this portal will be dropped. Client needs to re-login the session. | server-disconnected event |
| conference-agent/node | All sessions impacted will be destroyed and all their participants will be forced disconnected and all actions will be dropped. Client needs to re-login the session. | server-disconnected event |
| webrtc-agent/node | All webrtc stream actions assign to this node will be dropped. Client needs to redo these actions. | stream-failed event |
| streaming-agent/node | All external stream actions assign to this node will be dropped. Client needs to redo these actions. | stream-failed event |
| recording-agent/node | All recording stream actions assign to this node will be dropped. Client needs to redo these actions. | stream-failed event |
| audio-agent/node | Auto schedule new audio-agent/node resource to recover the session context. | Transparent |
| video-agent/node | Auto schedule new video-agent/node resource to recover the session context. | Transparent |
| analytics-agent/node | All analytics stream actions assign to this node will be dropped. Client needs to redo these actions. | stream-failed event |
| sip-agent/node | All sip participants it carries should be dropped by session nodes. | SIP BYE signaling event |
Open WebRTC Toolkit server provides the following settings in configuration files to configure the network interfaces for public access.
Table 2-7. Configuration Items for Public Access
| Configuration Item | Location | Usage |
|---|---|---|
| webrtc.network_interfaces | webrtc_agent/agent.toml | The network interfaces of webrtc-agent that clients in public network can connect to |
| webrtc.minport | webrtc_agent/agent.toml | The webrtc port range lowerbound for clients to connect through UDP |
| webrtc.maxport | webrtc_agent/agent.toml | The webrtc port range upperbound for clients to connect through UDP |
| management-api.port | management_api/management_api.toml | The port of management-api should be accessible in public network through TCP |
| portal.hostname, portal.ip_address | portal/portal.toml | The hostname and IP address of portal for public access; hostname first if it is not empty. |
| portal.port | portal/portal.toml | The port of portal for public access through TCP |
Intel Corporation does not host any conference cluster/service. Instead, the entire suite is provided so you can build your own video conference system and host your own server cluster.
Customers must be familiar with industry standards and best practices for deploying server clusters. Intel Corporation assumes no responsibility for loss caused from potential improper deployment and mismanagement.
The following instructions are provided only as recommendations regarding security best practices and by no means are they fully complete:
- For the key pair access on OWT server, make sure only people with high enough privilege can have the clearance.
- Regular system state audits or system change auto-detection. For example, OWT server system changes notification mechanism by third-party tool.
- Establish policy of file based operation history for the tracking purpose.
- Establish policy disallowing saving credentials for remote system access on OWT server.
- Use a policy for account revocation when appropriate and regular password expire.
- Use only per user account credentials, not account groups on OWT server.
- Automated virus scans using approved software on OWT server.
- Establish policy designed to ensure only allowed use of the server for external connections.
- OWT server should install only approved software and required components, and verify default features status. For example, only enable what are needed.
- Use a firewall and close any ports not specifically used on OWT server.
- Run a vulnerability scan regularly for checking software updates against trusted databases, and monitor publically communicated findings and patch OWT system immediately.
- Configure appropriate connection attempt timeouts and automated IP filtering, in order to do the rejection of unauthenticated requests.
- If all possible, use or develop an automated health monitoring component of server service availability on OWT server.
- Use a log analyzer solution to help detect attack attempts.
- During server development, avoid processing of unexpected headers or query string variables, and only read those defined for the API and limit overall message size.
- Avoid excessive error specificity and verbose details that reveal how the OWT server works.
- During server and client development, suggest running some kind of security development lifecycle/process and conduct internal and external security testing and static code analysis with tools by trusted roles.
- If all possible, backup all the log data to a dedicated log server with protection.
- Deploy OWT cluster(Managers + Workers) inside Demilitarized Zone(DMZ) area, utilize external firewall A to protect them against possible attacks, e.g. DoS attack; Deploy Mongo DB and RabbitMQ behind DMZ, configure internal firewall B to make sure only cluster machines can connect to RabbitMQ server and access to MongoDB data resources.
Figure 2-1. Security Recommendations Picture
-
Sudden low volume when connecting Chrome on Windows to OWT server
Resolution:
Both the Chrome browser and Windows system itself can reduce the volume during a connection to the OWT server. To resolve this issue, disable the following Communications feature found in the Sound Settings using the Windows Control Panel.
Figure 2-2. Sound Settings
-
Failed to start OWT server, and receive the following error message: "child_process.js:948; throw errnoException(process._errno, 'spawn'); Error: spawn EMFILE"
Resolution:
Use the proper Node.js version as outlined in the Dependencies section.
-
Failed to start OWT server, and receive the following error message: "Creating superservice in localhost/management-apidb SuperService ID: Sat Feb 7 19:10:32.456 TypeError: Cannot read property '_id' of null SuperService KEY: Sat Feb 7 19:10:32.479 TypeError: Cannot read property 'key' of null"
Resolution:
Use the proper MongoDB version as outlined in the Dependencies section.
-
Run into network port conflicts on OWT server, and probably some error message like "net::ERR_CONNECTION_TIMED_OUT" or "ERROR: server connection failed: connection_error"
Resolution:
In the OWT server, the following default ports have been assigned for server usage: 5672 (configurable), 8080 (configurable), 3000 (configurable), 3300 (configurable). Make sure they are always available for OWT server. Also, in order to configure the two configurable ports above to a value smaller than the 1024 limitation, use the following command to enable it:
sudo setcap cap_net_bind_service=+ep $(which node)If you are still not able to bypass the 1024 port limitation, remember to put the OWT server library path into /etc/ld.so.conf.d.
The OWT Server Management Console is the frontend console to manage the OWT server. It is built with OWT's server-side APIs and it provides the management interface to OWT administrators.
Once you have launched OWT servers, you can then access the console via a browser at https://XXXX:3300/console/ by default. You will be asked for your the service-id and service-key in order to access the service.
After inputting your service-id and service-key in the dialog prompt, choose 'remember me' and click 'save changes' to save your session. If you want to switch to another service, click the ‘profile' button on the upper-right corner to get in this dialog prompt and do the similar procedure again. If you want to log out the management console, click the red ‘clear cookie' button in the dialog prompt.
If you have not launched OWT servers, you should launch the management-api server before accessing the management console:
cd Release-<Version>/
bin/daemon.sh start management-api
bin/daemon.sh start management-console
The source code of the management console is in Release-/management_console/public/.
Only super service user can access service management, in the 'overview' tab to create or delete services. The service is the instance that owns rooms and has the ability to manage them.
Note: Super service cannot be deleted, it can be configured in management_api/management_api.toml.
Any service user can do room management inside the service, including creating, deleting or modifying rooms.
To modify rooms, a user can edit room configuration for its own preference. The the details of each configuration item for room are listed in the following table:
Table 3-1. Room Configuration
| Item | Description |
|---|---|
| name | The name of the room (name is not equal to the ID, room's ID cannot be changed once created) |
| inputLimit | The input limitation for the room, means how many publication can a room allow |
| participantLimit | The max participant number of the room |
| roles | The role definition list for the room, for the description of list element see the role.* |
| role.role | The name for a certain role |
| role.(operation).(mediaType) | The capability to publish/subscribe audio/video stream for a certain role |
| views | The view list for the room, each view represents a combination of mix stream settings. To disable mixing, set this to empty list |
| view.label | The label for a certain view, two view labels in one room cannot be duplicated |
| view.audio.format | The default audio format of the view selected from 'mediaOut.audio' configuration |
| view.audio.vad | The 'activeInput' event will be emitted if this option is true, note that if a client publish more than one audio stream, this may not work well |
| view.video.format | The default video format of the view selected from 'mediaOut.format.video' configuration |
| view.video.parameters.resolution | The default video resolution of the view |
| view.video.parameters.framerate | The default video framerate of the view |
| view.video.parameters.bitrate | The default video bitrate of the view, if it's not specified, the mix engine will generate a default one, see Table 3-3 for more details |
| view.video.parameters.keyFrameInterval | The default video key frame interval of the view |
| view.video.maxInput | This indicates the maximum number of video inputs for the video layout definition, input that exceed the value will not be shown in mixed stream |
| view.video.motionFactor | The video motion factor is used to affact the default bitrate of the video stream |
| view.video.bgColor | The RGB representation for background color of the mixed video stream |
| view.keepActiveInputPrimary | The active input will always be shown in the 'primary' region when this option is set to true with 'vad' also enabled |
| view.layout | The layout of mixed video stream |
| view.layout.fitPolicy | The fit policy for input that does not perfectly match the width/height ratio |
| view.layout.templates | The layout template for the mixed video stream, a user can choose a base layout template and customize its own preferred ones, which would be combined as a whole for rendering mixed video |
| view.layout.templates.base | The template base for video layout |
| view.layout.templates.custom | The customized video layout uppon the base, see the Section 3.5.1 |
| mediaIn | The audio/video format that the room can accept, see the Table 3-2 for supported format |
| mediaOut | The audio/video format and parameters that the room can generate through media processing, see the Table 3-2 for supported formats |
| transcoding | The transcoding switch on audio, video format and parameters |
| sip | The SIP setting for the room |
| notifying | The notifying policy for the room |
Table 3-2 Supported Media Formats
| Name | Type |
|---|---|
| opus | audio |
| isac_16000 | audio |
| isac_32000 | audio |
| g722_16000_1 | audio |
| pcma | audio |
| pcmu | audio |
| aac | audio |
| ac3 | audio |
| nellymoser | audio |
| ilbc | audio |
| h264 | video |
| h265 | video |
| vp8 | video |
| vp9 | video |
Note: When video format is "h264", for decoding, either software or hardware version OWT server supports all profiles. For encoding, software version OWT server with openh264 supports constrained-baseline profile and hardware version supports profiles including constrained-baseline, baseline, main, high.
Table 3-3 Default bitrate for typical resolutions (30fps)
| Resolution | Default bitrate(kbps) |
|---|---|
| 352x288 (cif) | 442 |
| 176x144 (qcif) | 132 |
| 320x240 (sif) | 400 |
| 640x480 (vga) | 800 |
| 800x600 (svga) | 1137 |
| 1024x768 (xga) | 1736 |
| 480x320 (hvga) | 533 |
| 1280x720 (hd720p) | 2000 |
| 1920x1080 (hd1080p) | 4000 |
| 3840x2160 (uhd_4k) | 16000 |
The actual default bitrate will be affacted by resolution, framerate, motion factor, see the Table 3-3 to get overall data. If framerate or resolution is specified in the subscription without bitrate, default bitrate is used and the view bitrate setting won't work.
Note: If base layout is set to 'void', user must input customized layout for the room, otherwise the video layout would be treated as invalid. Read 3.5.1 for details of customized layout. maxInput indicates the maximum number of video frame inputs for the video layout definition.
The OWT server supports the mixed video layout configuration which is similar as RFC5707 Media Server Markup Language (MSML). A valid customized video layout should be an array of video layout definition. The following example shows the details:
Figure 3-1. Example Layout
// Video layout for the case of 1 input or 6 inputs
[
{
"region": [
{
"id": "1",
"shape": "rectangle",
"area": {
"left": "0",
"top": "0",
"width": "1",
"height": "1"
}
}
]
},
{
"region": [
{
"id": "1",
"shape": "rectangle",
"area": {
"left": "0",
"top": "0",
"width": "2/3",
"height": "2/3"
}
},
{
"id": "2",
"shape": "rectangle",
"area": {
"left": "2/3",
"top": "0",
"width": "1/3",
"height": "1/3"
}
},
{
"id": "3",
"shape": "rectangle",
"area": {
"left": "2/3",
"top": "1/3",
"width": "1/3",
"height": "1/3"
}
},
{
"id": "4",
"shape": "rectangle",
"area": {
"left": "2/3",
"top": "2/3",
"width": "1/3",
"height": "1/3"
}
},
{
"id": "5",
"shape": "rectangle",
"area": {
"left": "1/3",
"top": "2/3",
"width": "1/3",
"height": "1/3"
}
},
{
"id": "6",
"shape": "rectangle",
"area": {
"left": "0",
"top": "2/3",
"width": "1/3",
"height": "1/3"
}
}
]
}
]
Each "region" defines video panes that are used to display participant video streams.
Regions are rendered on top of the root mixed stream. "id" is the identifier for each video layout region.
The size of a region is specified relative to the size of the root mixed stream using the "width" and "height" attributes.
Regions are located on the root window based on the value of the position attributes "top" and "left". These attributes define the position of the top left corner of the region as an offset from the top left corner of the root mixed stream, which is a percent of the vertical or horizontal dimension of the root mixed stream.
The OWT server supports connection from SIP clients. Before setting up SIP connectivity for rooms, make sure SIP server (like Kamailio) and related SIP user accounts are available. The SIP settings can be enabled through SDK or management console. On the console page, find the room that needs interaction with SIP clients and click the related "Room Detail" field. Then find the SIP setting fields in sub-section "sip".
The meaning of each field is listed below:
sipServer: The SIP server's hostname or IP address.
username: The user name registered in the above SIP server.
password: The user's password.
After the SIP settings have been done, click the "Apply" button at the right side of the Room row to let it take effect. If the "Update Room Success" message shows up and the SIP related information is correct, then SIP clients should be able to join this room via the registered SIP server.
All workers including portals, conference-agents, webrtc-agents, streaming-agents, recording-agents, audio-agents, video-agents, sip-agents in the cluster are scheduled by the cluster-manager with respect to the configured scheduling strategies in cluster_manager/cluster_manager.toml. For example, the configuration item "portal = last-used" means the scheduling policy of workers with purposes of "portal" is set to "last-used". The following built-in scheduling strategies are provided:
- last-used: If more than 1 worker with the specified purpose is alive and available, the last used one will be scheduled.
- least-used: If more than 1 worker with the specified purpose is alive and available, the one with the least work-load will be scheduled.
- most-used: If more than 1 worker with the specified purpose is alive and available, the one with the heavist work-load will be scheduled.
- round-robin: If more than 1 worker with the specified purpose is alive and available, they will be scheduled one by one circularly.
- randomly-pick: If more than 1 worker with the specified purpose is alive and available, they will be scheduled randomly.
For portal and webrtc-agent workers, the "isp" and "region" preferences can be specified in portal and webrtc-agent configurations. Pass the preferred "isp" and "region" when creating a token, then cluster-manager will only schedule the corresponding worker nodes to the client requests that match "isp" and "region" preferences. The portal and webrtc-agent will serve all the isp and region if corresponding configuration items under "capacity" are set to empty lists. If no preferences are specified for clients when creating token, then only those portal and webrtc-agent with empty isp and region setting will serve them.
Only super service user can access runtime configuration. Current management console implementation just provides the OWT server cluster runtime configuration viewer.
The OWT sample application server is a Web application demo that shows how to host audio/video conference services powered by the Open WebRTC Toolkit. The sample application server is based on OWT runtime components. Refer to Section 2 of this guide, for system requirements and launch/stop instructions.
The source code of the sample application is in Release-/apps/current_app/.
This section explains how to start a conference and then connect to a conference using different qualifiers, such as a specific video resolution.
These general steps show how to start a conference:
- Start up the OWT server components.
- Launch your Google Chrome* browser from the client machine.
- Connect to the OWT sample application server at: https://XXXXX:3004. Replace XXXXX with the IP address or machine name of the OWT sample application server.
Note: Latest Chrome browser versions from v47 force https access on WebRTC applications. You will get SSL warning page with default certificates, replace them with your own trusted ones.
- Start your conference with this default room created by the sample application server.
You can connect to a particular conference room. To do this, simply specify your room ID via a query string in your URL: room. For example, connect to the OWT sample application server XXXXX with the following URL:
https://XXXXX:3004/?room=some_particular_room_id
This will direct the conference connection to the room with the ID some_particular_room_id.
Since OWT conference room can now produce both forward streams and mixed stream at the same time, including the screen sharing stream, the client is able to subscribe specified stream(s) by a query string in your URL: forward. The default value for the key word is false.
For example, to subscribe forward stream instead of mixed stream from OWT server, connect to the OWT sample application server XXXXX with the following URL:
https://XXXXX:3004/?forward=true
The OWT conference supports external stream input from devices that support RTSP protocol, like IP Camera. For example, connect to the OWT sample application server XXXXX with the following URL:
https://XXXXX:3004/?url=rtsp_stream_url
The peer server is the default signaling server of the Open-WebRTC-Toolkit. The peer server provides the ability to exchange WebRTC signaling messages over Socket.IO between different clients.
Figure 5-1. Peer Server Framework
The installation requirements for the peer server are listed in Table 5-1 and 5-2.
Table 5-1. Installation requirements
| Component name | OS version |
|---|---|
| Peer server | Ubuntu 18.04 LTS, CentOS* 7.6/7.4 |
Note: The peer server has been fully tested on Ubuntu14.04 LTS,64-bit. Table 5-2. Peer Server Dependencies Name | Version | Remarks -----|----|---- Node.js | 8.15.0 | Website: http://nodejs.org/ Node modules | Specified | N/A
Regarding Node.js*, make sure it's installed in your system prior to installing the Peer Server. We recommend version 8.15.0. Refer to http://nodejs.org/ for installation details.
On the server machine, unpack the peer server release package, and install node modules
tar –zxvf CS_WebRTC_Conference_Server_Peer.v<Version>.tgz
cd PeerServer-Release-<Version>
npm install
The default http port is 8095, and the default secured port is 8096. Those default values can be modified in the file config.json.
If you want to use a secured socket.io connection, you should use your own certificate for the service. A default certificate is stored in cert with two files: cert.pem and key.pem. Replace these files with your own certificate and key files.
Run the following commands to launch the peer server:
cd PeerServer-Release-<Version>
node peerserver.js
Run the kill command directly from the terminal to stop the peer server.
OWT server provides media analytics functionality via REST API. The media analytics plugins allows you performing analytics on any stream in OWT server, generating new streams and/or emitting events during analytics. The proposed usage scenario for real-time media analytics includes but is not limited to movement/object detection in surveillance and remote health care, customer/audience analyzing in retail and remote education, etc.
For usage of media analytics REST API, refer to the REST API document.
A few sample plugins are shipped with OWT server. After you build and install OWT server, the source of those analytics plugins will be placed under analytics_agent/plugins/ directory.
Before you build those plugins, you need to install Intel Distribution of OpenVINO 2018 R5 from https://software.intel.com/en-us/openvino-toolkit/. After installation, make sure you go to /opt/intel/computer_vision_sdk/install_dependencies/ directory, and run: sudo -E ./install_NEO_OCL_driver.sh
Intel Distribution of OpenVINO 2018 R5 will require Intel Core 6th to 8th Generation with Intel HD graphics or Iris(Pro) graphics for inferencing on GPU with OpenCL as the backend. The supported OSes are Ubuntu 16.04 and higher, or CentOS 7.4 or higher. Make sure your hardware/software configuration is correct before building and deploying the sample plugins.
To build the plugins, simply go to analytics_agent/plugins/sample directory, and run: ./build_samples.sh
Copy all files under build/intel64/Release/lib/ to analytics_agent/lib/ directory, or to the libpath as specified in agent.toml in analytics_agent.
The Server provides 4 plugins as source code which can be built by your own. To verify them, make sure you run source /opt/intel/computer_vision_sdk/bin/setupvars.sh before starting up OWT server.
Identified by GUID b849f44bee074b08bf3e627f3fc927c7. This plugin provides the capability of finding faces in current analyzed stream and annotates it with a rectangle boarder on the face.
Identified by GUID 3f932ff2a80341faa0a73ebb3bcfb85d. This plugin provides the capability of identifying people's name in current stream and annotates them with a rectangle on the face, and also list the name and the confidence of the recognition result. To add new people for recognition, here are the steps:
- Take at least 3 pictures of one person and place them under the raw_photos directory with sub-directory name that identifies that person's name(no space in the directory name). The raw_photos should be under the same directory with the pre-process tool.
- Run the pre-process tool to process the raw photos (which is also built when you build the samples). Append the path of libcpu_extension.so you built to LD_LIBRARY_PATH before you run the tool. Put the output vectors.txt under analytics_agent direcotry of OWT server.
Identified by GUID 10c213f3d55249718d3bd44712488502. This plugin provides the capability of recognizing the gestures in the stream and annotates the gestures accordingly.
Identified by GUID dc51138a8284436f873418a21ba8cfa7. This plugin simply modifies part of the stream to demonstrate the working process of plugins.
OWT server allows you creating your own media analytics plugins and deploy them to OWT server. Refer to the analytics_agent/plugins/include/plugin.h for more detailed API interface that each media analytics plugin needs to implement.
Your plugin class implementation must inherit from rvaPlugin interface as defined in analytics_agent/plugins/include/plugin.h. Besides the plugin class implementation, it is required to include the DECLARE_PLUGIN(ClassName) macro to export your plugin implementation.
To deploy a plugin to OWT Server, you will need to generate a new GUID for your plugin. After that, copy your plugin .so files to analytics_agent/lib, or to the libpath as specified by agent.toml of analtyics agent. Also you need to add an entry into the plugin.cfg file under analytics_agent with the GUID you generated, for example: [c842f499aa093c27cf1e328f2fc987c7] description = 'my own plugin' pluginversion = 1 apiversion =400 name = 'libsomeplugin.so' # full name of the plugin library libpath = 'pluginlibs/' # relative to analytics_agent directory configpath = 'pluginlibs/' # relative to analytics agent directory messaging = true # set to false if your plugin does not send notification inputfourcc = 'I420' # must be I420 for current version outputfourcc = 'I420' # set to "" if your plugin will not republish analyzed stream to OWT server.
Restart analytics agent and your plugin will be added to OWT server.