Use TURNS by default

kylecarbs · kylecarbs · commit d6fb8f4f1c91 · 2021-04-22T05:35:15.000Z
diff --git a/internal/cmd/tunnel.go b/internal/cmd/tunnel.go
@@ -110,9 +110,8 @@ type client struct {
 
 func (c *client) start() error {
 	url := fmt.Sprintf("%s%s%s%s%s", c.brokerAddr.String(), "/api/private/envagent/", c.id, "/connect?session_token=", c.token)
-	tcpProxy := fmt.Sprintf("turn:%s:5349?transport=tcp", c.brokerAddr.Host)
+	tcpProxy := fmt.Sprintf("turns:%s:5349?transport=tcp", c.brokerAddr.Host)
 	c.logger.Info(c.ctx, "connecting to broker", slog.F("url", url), slog.F("tcp-proxy", tcpProxy))
-
 	conn, resp, err := websocket.Dial(c.ctx, url, nil)
 	if err != nil && resp == nil {
 		return fmt.Errorf("dial: %w", err)
diff --git a/internal/x/xwebrtc/conn.go b/internal/x/xwebrtc/conn.go
@@ -1,12 +1,17 @@
 package xwebrtc
 
-import "github.com/pion/webrtc/v3"
+import (
+	"time"
+
+	"github.com/pion/webrtc/v3"
+)
 
 // NewPeerConnection creates a new peer connection.
 // It uses the Google stun server by default.
 func NewPeerConnection(servers []webrtc.ICEServer) (*webrtc.PeerConnection, error) {
 	se := webrtc.SettingEngine{}
 	se.DetachDataChannels()
+	se.SetICETimeouts(time.Second*5, time.Second*5, time.Second*2)
 	api := webrtc.NewAPI(webrtc.WithSettingEngine(se))
 
 	return api.NewPeerConnection(webrtc.Configuration{
