coturn¶
Status: Current | Last reviewed: 2026-05-28
TURN/STUN server. Required for any browser surface (surface-app, verizon-demo-app) where the user is behind symmetric NAT.
Image¶
coturn/coturn:4.6.2-alpine.
Ports¶
| Port | Purpose |
|---|---|
| 3478/UDP, 3478/TCP | STUN + TURN |
| 5349/TCP | TURN over TLS |
| 49152–65535/UDP | Relay range |
What it does¶
- Replies to STUN binding requests so a browser can learn its public reflexive address.
- Acts as a TURN relay when peer-to-peer ICE fails.
Vanguard¶
Started by docker-compose.media.yml as tsf-local-coturn.
Production¶
Helm chart at charts/coturn. hostNetwork: true.
In LiveKit-based deploys, coturn is replaced by LiveKit's built-in TURN. See the LiveKit migration memory note.