GÉANT: Delivering Global Real-Time Video Communication Services

Transcription

1 GÉANT: Delivering Global Real-Time Video Communication Services Peter Szegedi GÉANT Amsterdam HEAnet Conference 2015 Cork, Ireland Networks Services People

2 Outline Why WebRTC could potentially be disruptive for R&E How GÉANT is engaged in WebRTC GÉANT federated STUN/TURN service GÉANT federated WebRTC infrastructure GÉANT federated directory and service verification Networks Services People 2

3 Use cases for WebRTC in HEI Enable rich, high quality, RTC applications to be developed for the browser, mobile platforms, and IoT devices, and allow them all to communicate via a common set of protocols. WebRTC is an API definition drafted by the World Wide Web Consortium (W3C) that supports browser-tobrowser applications for voice calling, video chat, and P2P file sharing without the need of either internal or external plugins. WebApp integartion is the key: a) Real-time communication b) In-context communication Networks Services People 3

4 Rendez-vous at RENATER Based on Jitsi Meet Brings RTC to your browser Integrates with document and desktop sharing, Prezi, chat and others... Let s flip the class... Networks Services People 4

5 In-context communication Networks Services People 5

6 Fun and less fun... Networks Services People 6

7 Mock-up idea for R&E File-based sync&share service with real-time communication component owncloud software has got some penetration into our community Enable WebRTC into the owncloud web client Share the file or folder of learning materials and discuss with your students Share your research results and analyse them with your colleagues Networks Services People 7

8 To make it happen you need a piece of infrastructure! Networks Services People 8

9 STUN/TURN service Telecom R&D: Steps for building and deploying WebRTC solution WebRTC is peer-to-peer but... STUN (Session Traversal Utilities for NAT) is a standardized set of methods and a network protocol to allow an end host to discover its public IP address if it is located behind a NAT. TURN (Traversal Using Relays around NAT) is a protocol that assists in traversal of network address translators (NAT) or firewalls for multimedia applications. Networks Services People 9

10 GÉANT federated STUN/TURN service STUN/TURN Server potential users SIP User Agents VoIP Telepresence / VideoConference Long Term Credential auth mechanism XMPP/Jabber/Jingle/COLIBRI Clients. Long Term Credential auth mechanism Web Applications (WebRTC) Time limited Long Term Credential (REST API) OAuth token/assertion auth Benefits for the community Better firewall traversal experience for end-users Smooth IPv6 transition for end-users IETF standard based firewall traversal instead of tunnels Reliable distributed STUN service for GÉANT community services For reflexive address detection Reliable distributed TURN service for GÉANT community services For media relaying Networks Services People 10

11 Jitsi infrastructure SIP XMPP XMPP freeswitch JIGASI RTP Jitsi Meet JICOFO Videobridge IDP shibboleth Videobridge JIRECON ACCESS LAYER APPLICATION LAYER MEDIA LAYER Jipopro RTP Jitis Meet is the application. Jitsi Video ridge is a WebRTC compatible Selective Forwarding Unit (SFU) that allows for multiparty video communication Jiti COnference FOcus (JICOFO) is mandatory component of Jitsi Meet conferencing system. It is responsible for managing media sessions between each of the participants and the videobridge ice4j.org is an ICE implementation which is used to provide NAT traversal capabilities, and assists IPv4 to IPv6 transition Networks Services People 11

12 Multi-NREN deployment INTERNET DIRECT ACCESS TO INTERNET: SECURITY MANAGEMENT SITE BY SITE Jitsi Meet GEANT Public addresses JICOFO GEANT Video-bridge Video-bridge Jitsi Meet JICOFO Video-bridge Video-bridge Video-bridge Video-bridge Videobridge RENATER Videobridge NIIF Video-bridge Video-bridge RENDEZ-VOUS Out-of-band management/ network-mangement VPN Conf manager Logs Reporting VPN: Private addresses REST ACCESS Monitoring/discovery Containers Orchestration Create a multi-nren, robust and scalable Jitsi infrastructure for facilitating first-hand experience with WebRTC technology and application piloting. GÉANT WebRTC Infrastructure Networks Services People 12

13 Application network over secure MD-VPN... Open API for application developers Access to the infra back-end Get a snippet for your webapp Integrate applications Networks Services People 13

14 GÉANT educonf federated directory educonf directory for video conferencing rooms, crafted together with the monitoring service Integration of directories 2-stage policy adjustment: local and central XML export engines: easiest way to export by remote parties multiple other export engines (possible: FTP, SFTP, API, JSON,...) central administration Networks Services People 14

15 GÉANT federated directory for WebRTC support Skype/MS, Facebook, Google, Apple, Telcos, etc... all have a directory Everyone wants to OWN the directory They have NO interest in sharing their directories They have no interest in federation / interoperability between directories Rendez-vous is federated and edugain-enabled but requires an e- mail address to identify admin user. Some IdPs do not release address... Networks Services People 15

16 Summary Simple, reliable, one-click, plugin-free WebRTC service for R&E (~50M) to fall back to In-context application integration with WebRTC via open API Support infrastructure bits and pieces Federated STUN/TURN service Multi-NREN Jitsi infrastructure Federated directory and service verification Come and talk to TF-WebRTC task force of GÉANT! Networks Services People 16

17 Thank you and any questions Networks Services People Networks Services People 17