error 1002 could not make a websocket connection bigbluebutton

[privatejava]

Hi,
I tried installation like in the Wiki page. I even tested the VNC which works well but I am kind of confused why is it showing this error while I try to connect my mic. By checking the request it is trying to hit wss://<mydomain>/ws I check the bbb-conf --status and it shows like this.

BigBlueButton Server 2.4.9 (326)
                    Kernel version: 5.4.0-1093-aws
                      Distribution: Ubuntu 18.04.6 LTS (64-bit)
                            Memory: 16203 MB
                         CPU cores: 4

/etc/bigbluebutton/bbb-web.properties (override for bbb-web)
/usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties (bbb-web)
       bigbluebutton.web.serverURL: https://<mydomain>.com
                defaultGuestPolicy: ALWAYS_ACCEPT
                 svgImagesRequired: true
              defaultMeetingLayout: SMART_LAYOUT

/etc/nginx/sites-available/bigbluebutton (nginx)
                       server_name: <mydomain>.com
                              port: 80, [::]:80
                              port: 443 ssl

/opt/freeswitch/etc/freeswitch/vars.xml (FreeSWITCH)
                       local_ip_v4: 
                   external_rtp_ip: stun:stun.l.google.com:19302
                   external_sip_ip: stun:stun.l.google.com:19302

/opt/freeswitch/conf/sip_profiles/ipv6.xml (FreeSWITCH)
                        ext-rtp-ip: 
                        ext-sip-ip: 
                        ws-binding: 127.0.0.1:5070
                       wss-binding: 127.0.0.1:7447

/opt/freeswitch/conf/sip_profiles/private.xml (FreeSWITCH)
                        ext-rtp-ip: $${local_ip_v4}
                        ext-sip-ip: $${local_ip_v4}
                        ws-binding: 127.0.0.1:5068
                       wss-binding: 127.0.0.1:7445

/opt/freeswitch/conf/sip_profiles/public.xml (FreeSWITCH)
                        ext-rtp-ip: $${external_rtp_ip}
                        ext-sip-ip: $${external_sip_ip}
                        ws-binding: 127.0.0.1:5066
                       wss-binding: 127.0.0.1:7443

UDP port ranges

                        FreeSWITCH: 16384-24576
                           kurento: 24577-32768
                    bbb-webrtc-sfu: 24577-32768

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)
                     playback_host: [domain>
                 playback_protocol: https
                            ffmpeg: 4.2.7-0ubuntu0.1bbb1~18.04

/usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml (Kurento SFU)
/etc/bigbluebutton/bbb-webrtc-sfu/production.yml (Kurento SFU - override)
             mediasoup.webrtc.*.ip: 0.0.0.0 
    mediasoup.webrtc.*.announcedIp: 172.31.26.224 
           mediasoup.plainRtp.*.ip: 0.0.0.0 
  mediasoup.plainRtp.*.announcedIp: 172.31.26.224 
                        kurento.ip: 13.213.128.206
                       kurento.url: ws://127.0.0.1:8888/kurento
                    kurento.sip_ip: 127.0.0.1
               recordScreenSharing: true
                     recordWebcams: true
                  codec_video_main: VP8
               codec_video_content: VP8

/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml (HTML5 client)
/etc/bigbluebutton/bbb-html5.yml (HTML5 client config override)
                             build: HTML5_CLIENT_VERSION
                        kurentoUrl: wss://<mydomain>.com/bbb-webrtc-sfu
                  enableListenOnly: true
                    sipjsHackViaWs: true

/usr/share/bbb-web/WEB-INF/classes/spring/turn-stun-servers.xml (STUN Server)
                              stun: stun.l.google.com:19302


# Potential problems described below

# Warning: The setting of  for local_ip_v4 in
#
#    /opt/freeswitch/etc/freeswitch/vars.xml
#
# does not match the local IP address (172.31.43.2).
# (This is OK if you've manually changed the values)


#
# Warning: Failed to verify STUN server at stun.l.google.com 19302 with command
#
#    stunclient --mode full --localport 30000 stun.l.google.com 19302

When I looked into the nginx config of sip2.conf it is pointing /ws to 5066,5068,5070 ports of FREESWITCH i guess.

location /ws {
        if ($private_address = 0) {
                proxy_pass http://127.0.0.1:5066;
        }
        if ($private_address = 1) {
                proxy_pass http://127.0.0.1:5068;
        }
        if ($private_address = 2) {
                proxy_pass http://127.0.0.1:5070;
        }

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_read_timeout 120s;
        proxy_send_timeout 120s;
        client_body_timeout 120s;
        send_timeout 120s;

        auth_request /bigbluebutton/connection/checkAuthorization;
        auth_request_set $auth_status $upstream_status;
}

I even allowed all Traffic inbound/output for both TCP/UDP from anywhere(0.0.0.0/0) .

I could not figure out correctly what went wrong. Any help would be appreciated.

Thanks

[BrentBaccala]

Narayan -

Thanks for your feedback. Audio has been an ongoing problem with the system that is gradually being improved. These are my thoughts on your problem:

First, the blank line for local_ip_v4 is suspicious. The packaging scripts for bbb-freeswitch-core should have set that to 172.31.43.2. You can try setting it manually and restarting the conferencing system with sudo bbb-conf --restart.

The script was supposed to detect the local IP address using the following code:

if LANG=c ifconfig | grep -q 'venet0:0'; then
  # IP detection for OpenVZ environment
  IP=$(ifconfig | grep -v '127.0.0.1' | grep -E "[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*" | tail -1 | cut -d: -f2 | awk '{ print $1}')
else
  # use IP address of interface used for primary default route
  IP=$(ifconfig $(route | grep ^default | head -1 | sed "s/.* //") | awk '/inet /{ print $2}' | cut -d: -f2)
fi

You might want to try running that to see what it computes for the IP variable. If it isn't 172.31.43.2 that that's the cause of the problem. We've got some newer code to do that:

if [ -e "/sys/class/net/venet0:0" ]; then
    # IP detection for OpenVZ environment
    _dev="venet0:0"
else
    _dev=$(awk '$2 == 00000000 { print $1 }' /proc/net/route | head -1)
fi
_ips=$(LANG=C ip -4 -br address show dev "$_dev" | awk '{ $1=$2=""; print $0 }')
_ips=${_ips/127.0.0.1\/8/}
read -r IP _ <<< "$_ips"
IP=${IP/\/*} # strip subnet provided by ip address
if [ -z "$IP" ]; then
  read -r IP _ <<< "$(hostname -I)"
fi

This will be used in a future release. Please let me know if one of both of these code blocks isn't finding the IP address correctly.

Next, what is your server environment? Looks like NAT, is it a common cloud provider? Or are you running on your own hardware?

Finally, how are you trying to connect? In particular, are you coming from a private IP address on the same network as the server, or are you connecting in through the server's NAT gateway?

Everything else looks fine. Sorry you're having problems.