/tags/webrtc/Recent content in Webrtc on Layer5 DocumentationHugoen/cloud/guides/self-hosted/planning/peer-to-peer-communication/Mon, 01 Jan 0001 00:00:00 +0000/cloud/guides/self-hosted/planning/peer-to-peer-communication/<p>Plan these network paths before you deploy. Most are ordinary HTTPS traffic through your ingress. Real-time co-editing is the exception: it connects browsers directly to each other, and the deployment only introduces them.</p> <h2 id="required-network-paths" class="heading-link"> Required network paths <a href="#required-network-paths" class="heading-anchor" aria-label="Permalink to this heading">🔗</a> </h2> <table> <thead> <tr> <th>From</th> <th>To</th> <th>Protocol</th> <th>Purpose</th> </tr> </thead> <tbody> <tr> <td>Browsers, Meshery Servers, API clients</td> <td>Ingress, public hostname</td> <td>HTTPS</td> <td>UI, API, sign-in (<code>/kratos</code>), and OAuth2 (<code>/hydra</code>)</td> </tr> <tr> <td>Browsers</td> <td>Ingress, <code>/collaboration</code></td> <td>WebSocket over HTTPS</td> <td>Co-editing signaling</td> </tr> <tr> <td>Layer5 Cloud server</td> <td>Kratos and Hydra services</td> <td>HTTP, in cluster</td> <td>Account and token operations. Default ports: Kratos public 9010 and admin 9011, Hydra public 4444 and admin 4445</td> </tr> <tr> <td>Kratos</td> <td>Layer5 Cloud server</td> <td>HTTP, in cluster</td> <td>Registration hooks, and identity mail when the HTTP courier is selected</td> </tr> <tr> <td>Layer5 Cloud server, Kratos, Hydra</td> <td>PostgreSQL</td> <td>TCP 5432</td> <td>Databases <code>meshery</code>, <code>kratos</code>, <code>hydra</code></td> </tr> <tr> <td>Layer5 Cloud server</td> <td>SMTP relay</td> <td>SMTP on 25, 465, 587, or 2525</td> <td>Mail. The relay must resolve to a public address</td> </tr> <tr> <td>Layer5 Cloud server</td> <td>Webhook receivers</td> <td>HTTPS</td> <td>Optional webhooks</td> </tr> <tr> <td>Layer5 Cloud server</td> <td>OpenTelemetry collector</td> <td>OTLP gRPC</td> <td>Optional traces</td> </tr> <tr> <td>Browsers</td> <td>Public STUN and TURN hosts</td> <td>UDP and TCP</td> <td>Direct connections between co-editing browsers</td> </tr> </tbody> </table> <p>The ingress must support WebSocket upgrades. A controller or load balancer that closes idle connections shorter than the signaling keep-alive (below) disconnects users from their co-editing session.</p>