add note on turn container host mode

2022-02-11 23:08:56 -08:00
parent d6d7bc93e8
commit de84cbc977
1 changed files with 3 additions and 1 deletions
@@ -923,7 +923,9 @@ async function startTurn(existingInfra) {
    const readOnly = !serviceConfig.recoveryMode ? '--read-only' : '';
    const cmd = serviceConfig.recoveryMode ? '/bin/bash -c \'echo "Debug mode. Sleeping" && sleep infinity\'' : '';

-    // this exports 3478/tcp, 5349/tls and 50000-51000/udp. note that this runs on the host network!
+    // this exports 3478/tcp, 5349/tls and 50000-51000/udp. note that this runs on the host network because docker's userland proxy
+    // is spun for every port. we can disable this in some future release with --userland-proxy=false
+    // https://github.com/moby/moby/issues/8356 and https://github.com/moby/moby/issues/14856
    const runCmd = `docker run --restart=always -d --name="turn" \
                --hostname turn \
                --net host \