SSL wrong version error

[D3ST1N3D]

I have been trying to use WebRTC over a cluster origin-edge setup. The setup is currently very simple with a single edge and origin instance. I am using the demo player and webrtc input pages provided in the documentation for testing.
The problem that i am facing is that i have set domains for the origin and edge public ip addresses (ome-origin.example.com and ome-edge.example.com respectively).

I am able to provide a stream to the following link 'wss://ome-origin.example.com:3334/newapp/stream?direction=send&transport=tcp' using the webrtc input tab over the demo player website. Once the stream is started i am also able to click on test player button and play the stream over the origin instance itself.
When i try to change to using the edge instance url for the player instead of the origin i am unable to watch the stream.

On the edge side i get the following log:

[2023-03-27 15:16:13.615] I [SPRtcSig-t3334:179046] Signalling | rtc_signalling_server.cpp:315 | New client is connected: <ClientSocket: 0x7ff0a7c01010, #4, Connected, TCP, Nonblocking, 31.223.106.10:58730> [2023-03-27 15:16:13.672] I [SPRtcSig-t3334:179046] Publisher | publisher.cpp:187 | Try to pull stream from local origin map: [#default#newapp/stream] [2023-03-27 15:16:13.673] I [SPRtcSig-t3334:179046] Orchestrator | orchestrator.cpp:692 | Trying to pull stream [#default#newapp/stream] from provider using origin map: PullProvider [2023-03-27 15:16:15.195] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:646 | [#default#newapp/stream] An error occurred while receiving packet: [Socket] Receive timed out: Resource temporarily unavailable (11) [2023-03-27 15:16:15.195] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:621 | #default#newapp/stream(105) - Could not receive packet : err(0) [2023-03-27 15:16:16.731] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:646 | [#default#newapp/stream] An error occurred while receiving packet: [Socket] Receive timed out: Resource temporarily unavailable (11) [2023-03-27 15:16:16.731] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:621 | #default#newapp/stream(105) - Could not receive packet : err(0) [2023-03-27 15:16:18.267] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:646 | [#default#newapp/stream] An error occurred while receiving packet: [Socket] Receive timed out: Resource temporarily unavailable (11) [2023-03-27 15:16:18.267] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:621 | #default#newapp/stream(105) - Could not receive packet : err(0) [2023-03-27 15:16:18.267] I [SPRtcSig-t3334:179046] Provider | stream.cpp:63 | #default#newapp/stream(105) has been stopped playing stream [2023-03-27 15:16:18.267] E [SPRtcSig-t3334:179046] Provider | provider.cpp:153 | OVTProvider Application could not create [stream] stream. [2023-03-27 15:16:18.267] E [SPRtcSig-t3334:179046] Orchestrator | orchestrator.cpp:755 | Could not pull stream [#default#newapp/stream] from provider: PullProvider [2023-03-27 15:16:18.268] I [SPRtcSig-t3334:179046] Publisher | publisher.cpp:191 | Try to pull stream from origin map store: [#default#newapp/stream] [2023-03-27 15:16:18.268] E [SPRtcSig-t3334:179046] WebRTC Publisher | webrtc_publisher.cpp:355 | Cannot find stream (#default#newapp/stream) [2023-03-27 15:16:18.268] E [SPRtcSig-t3334:179046] Signalling | rtc_signalling_server.cpp:406 | Cannot find stream [#default#newapp/stream] [2023-03-27 15:16:18.341] I [SPRtcSig-t3334:179046] Signalling | rtc_signalling_server.cpp:449 | Client is disconnected: HttpConnection(0x7ff0a7c01610) : WebSocket <ClientSocket: 0x7ff0a7c01010, #4, Connected, TCP, Nonblocking, 31.223.106.10:58730> TLS(Enabled) (#default#newapp / stream, ufrag: local: (N/A), remote: (N/A)) [2023-03-27 15:16:20.471] I [SPRtcSig-t3334:179046] Signalling | rtc_signalling_server.cpp:315 | New client is connected: <ClientSocket: 0x7ff0a7c01410, #4, Connected, TCP, Nonblocking, 31.223.106.10:58757> [2023-03-27 15:16:20.533] I [SPRtcSig-t3334:179046] Publisher | publisher.cpp:187 | Try to pull stream from local origin map: [#default#newapp/stream] [2023-03-27 15:16:20.533] I [SPRtcSig-t3334:179046] Orchestrator | orchestrator.cpp:692 | Trying to pull stream [#default#newapp/stream] from provider using origin map: PullProvider [2023-03-27 15:16:22.043] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:646 | [#default#newapp/stream] An error occurred while receiving packet: [Socket] Receive timed out: Resource temporarily unavailable (11) [2023-03-27 15:16:22.043] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:621 | #default#newapp/stream(106) - Could not receive packet : err(0) [2023-03-27 15:16:23.547] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:646 | [#default#newapp/stream] An error occurred while receiving packet: [Socket] Receive timed out: Resource temporarily unavailable (11) [2023-03-27 15:16:23.547] E [SPRtcSig-t3334:179046] OvtStream | ovt_stream.cpp:621 | #default#newapp/stream(106) - Could not receive packet : err(0)

On the origin side the log shows the following:
Rtx(false) Ulpfec(false) JitterBuffer(false) PlayoutDelay(false min:0 max: 0) [2023-03-27 15:16:09.870] I [OutboundWorker:183028] Publisher | stream.cpp:204 | WebRTC Publisher Application application has started [stream(2359820299)] stream (MSID : 0) [2023-03-27 15:16:09.870] I [OutboundWorker:183028] LLHLS Publisher | llhls_stream.cpp:93 | LLHlsStream(#default#newapp/stream) - Ignore unsupported codec(OPUS) [2023-03-27 15:16:09.870] I [OutboundWorker:183028] LLHLS Publisher | llhls_stream.cpp:93 | LLHlsStream(#default#newapp/stream) - Ignore unsupported codec(OPUS) [2023-03-27 15:16:09.870] I [OutboundWorker:183028] LLHLS Publisher | llhls_stream.cpp:188 | LLHlsStream has been created : stream/2359820299 OriginMode(false) Chunk Duration(0.50) Segment Duration(6) Segment Count(10) [2023-03-27 15:16:09.870] I [OutboundWorker:183028] Publisher | stream.cpp:204 | LLHLS Publisher Application application has started [stream(2359820299)] stream (MSID : 0) [2023-03-27 15:16:09.871] I [OutboundWorker:183028] Publisher | stream.cpp:204 | OVTPublisher Application application has started [stream(2359820299)] stream (MSID : 0) [2023-03-27 15:16:13.676] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:15.204] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:16.740] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:20.535] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:22.045] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:23.550] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:27.327] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:28.829] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:30.334] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427) [2023-03-27 15:16:34.101] E [SPRtcSig-t3334:183003] OpenSSL | tls.cpp:193 | An error occurred while accept SSL connection: [OpenSSL] error:0A00010B:SSL routines::wrong version number (167772427)

So i am atleast sure that the traffic is being routed from the edge on to the origin server for the client but the wrong version number error has my head spinning. I checked the service start logs to check if there was an error in the ssl certificate files that i have set on the edge and origin and they are all valid.

I am attaching an example of the edge and server xml configuration files that i am using.

Could anyone help me figure out what is keeping a client from connecting to the stream over the edge instance.

cluster_Instance_xml_configurations.zip

[getroot]

Origins only supports OVT or RTSP. There is no need to communicate with WebRTC between origin and edge. You can use ovt scheme and ovt url.

<origin>
<Location>/newapp</Location>
<Pass>
<Scheme>webrtc</Scheme>
<Urls>
<Url>ome-origin.example.com:3334/newapp</Url>
</Urls>
</Pass>
</Origin>

[D3ST1N3D]

Thank you very much
i had previously tried that but i was making the mistake of passing the normal ovt 9000 port in the player url aswell which was resulting in an error.

Changing the edge configuration's origin section to point to the OVT 9000 port of the origin instance and using the webrtc tls port in the player url allowed me to start viewing the stream without any issues.

I also wanted to ask if there is a template for cluster style deployment for AWS or other cloud platforms. I have the instances currently working without a load balancer. Is there a tutorial or instructions on how to setup the load balancer in a cloud cluster setup (not docker).

Also i am going to try multiple instances for edge and origin with the new redis connector OriginMap. Is there a boiler plate for a way to test if the cluster is working properly and is able to communicate across multiple instances?

[getroot]

I prefer not to use Load Balancer. To me, it feels too complicated, especially the RTMP protocol or WebRTC protocol requires a lot of consideration when going through LB.

I prefer to register all origin servers in origins.xxx.com domain, register all edge servers in edges.xxx.com domain, and cluster using OriginMapStore. To scale, you just need to register an additional instance IP on origins.xxx.com or edges.xxx.com.

There is currently no documentations of this in this open source project. I would be very happy if someone contributed.

[naanlizard]

I started a discussion to try and figure out some of this, though a slightly different use case. Perhaps we can work together

#1153