For A/V media to be relayed between two (NAT'd) federated partners edge servers over UDP 3478 "Tunnel Mode", must the NAT be configured so that the source port not be changed on an inbound packet.

In Converse:

If the NAT changes the source port of an inbound packet, will it break/prevent UDP "Tunnel Mode"? (thus forcing media connectivity by other connectivity points)

Edge Server  Sends  (source) x.x.x.x:3478 (dest) x.x.x.x:3478  ---->  NAT Device ----> (source) x.x.x.x:6000 (dest) x.x.x.x:3478 ---> Received at Destination Edge Server.

Hi MGMNVA,

I dont think this can work.

On the other hand, if the remote Edge server sends the traffic to your Edge server, how the traffic reaches and communicates with your Edge Server ?

Remote Edge Server  Sends  (source) x.x.x.x:3478 (dest) x.x.x.x:3478  ---------> Your NAT Device (Firewall) ---------> ?? Where the traffic will be forwarded to ?

Best regards,

Eric

Thanks for your reply.

My edge gets the packet on UDP 3478. But the source port is changed by the LB. So my edge gets something that looks like:

Source (other edge)             Dest. (my edge)

x.x.x.x:5000        -->           x.x.x.x:3478

Instead of:

Source (other edge)             Dest. (my edge)

x.x.x.x:3478       -->           x.x.x.x:3478

In the topology you define the public IP address for the A/V edge service this shouldn't be an issue.