Is there anyway to set this up without Nat Hairpinning?

[goodiesohhi]

My router (HH2000) doesn't seem to support nat hairpinning.
I've tried to use something like pihole to add local dns names but that doesn't work. I can access the page but when I attempt to connect it says ICE failed, add a STUN server and see about:webrtc for more details.
I configured a turn server with coturn and still, nothing changes. I really don't know what to do without nat hairpinning.

[m1k1o]

Hello. This is a known limitation, a new feature would be needed to be implemented to support this.

But for now, you should be able to solve it with custom turn server. You can deploy turn server in your LAN with your LAN ip address, and give it to neko. It will try to establish connection through your public IP, where it will fail because of nat hair-pinning issue, and it will fall back to your turn server.

In contrary, this server will not be working for your remote connections, but the direct communication would be.

[darktemplar242]

Pretty sure most of canada can't actually use n.eko because of this issue, i'm in the boat.

[m1k1o]

That would not be optimal to exclude neko users in canada.

As mentioned above, using custom turn server it can be acheived. I will definitley include a fix for this issue in v3 rewrite.

Here is the full docker-compose.yaml with local coturn server:

services:
  neko:
    image: "m1k1o/neko:firefox"
    restart: "unless-stopped"
    shm_size: "2gb"
    ports:
      - "8080:8080"
      - "52000-52100:52000-52100/udp"
    environment:
      NEKO_SCREEN: 1920x1080@30
      NEKO_PASSWORD: neko
      NEKO_PASSWORD_ADMIN: admin
      NEKO_EPR: 52000-52100
      NEKO_ICESERVERS: |
        [{
          "urls": [
            "turn:192.168.1.60:3478"
          ],
          "username":"neko",
          "credential":"neko"
        },
        {
          "urls": [
            "stun:stun.nextcloud.com:3478"
          ]
        }]
  coturn:
    image: 'coturn/coturn:latest'
    network_mode: "host"
    command: |
      -n
      --realm=localhost
      --fingerprint
      --listening-ip=0.0.0.0
      --external-ip=192.168.1.60
      --listening-port=3478
      --min-port=49160
      --max-port=49200
      --log-file=stdout
      --user=neko:neko
      --lt-cred-mech

Please repalce 192.168.1.60 with your LAN IP address, and allow ports 49160-49200/udpand 3478/tcp in your LAN, if you use some kind of firewall. This should help you with the missing nat hairpinning.