[Users] December 15, 2020 Zeta Alliance Conference Call Summary

[Randy Leiker]

Hello Zeta Alliance Community, 

Here is a summary of this week’s conference call. A few brief reminders: 


    * Conference calls are every Tuesday and open to all using either the FreeConferenceCall.com VoIP app or via a dial-in number: [ https://www.freeconferencecall.com/wall/zetalliance | https://www.freeconferencecall.com/wall/zetalliance ] 
    * Each week’s call agenda can be found at: [ https://docs.google.com/document/d/1uUUDJpwp2CAylU6lxtbEdVcUX_qSbciyes6gLTWw2fY/edit | https://docs.google.com/document/d/1uUUDJpwp2CAylU6lxtbEdVcUX_qSbciyes6gLTWw2fY/edit ] 
    * A copy of each week’s summary is also posted to the Zimbra Forums: 
        * All Prior Months: [ https://forums.zimbra.org/viewforum.php?f=9 | https://forums.zimbra.org/viewforum.php?f=9 ] 
        * November 2020 : [ https://forums.zimbra.org/viewtopic.php?f=9&t=68942 | https://forums.zimbra.org/viewtopic.php?f=9&t=68942 ] 
        * December 2020 : [ https://forums.zimbra.org/viewtopic.php?f=9&t=69008 | https://forums.zimbra.org/viewtopic.php?f=9&t=69008 ] 
    * Constructive feedback on these call summaries is always welcome. 

December 15, 2020 

Configuring a TURN Server for TLS With Zimbra Connect 
Matthew F. asked if anyone on the call had had success configuring a TURN server to use TLS, for use with Zimbra Connect. Randy L. said he has done this in the past with one of his reTURN servers, as partially described in this how-to ( [ https://forums.zimbra.org/viewtopic.php?f=45&t=67960 | https://forums.zimbra.org/viewtopic.php?f=45&t=67960 ] ). Matthew then asked if Randy had been able to configure it for newer protocols such as TLS 1.2 or TLS 1.3. Upon checking the documentation for the reTURN project more closely, Randy found this page ( [ https://www.resiprocate.org/TLS | https://www.resiprocate.org/TLS ] ) that suggests the reTURN project only supports the deprecated SSL v2/3 and TLS v1.0 protocols, with no support yet for TLS 1.1 through 1.3, even though news from the reTURN project ( [ https://www.resiprocate.org/Main_Page#News | https://www.resiprocate.org/Main_Page#News ] ) suggests they have integrated support for OpenSSL 1.1.1. OpenSSL 1.1.1 includes support for up to TLS 1.3. Randy said that in a Zeta Alliance call earlier in the year, Cine (Zextras), had recommended not using TLS on a TURN server with Zimbra Connect due to performance concerns identified earlier by Zextras during testing. Randy added that Matthew might want to confirm this on his own, perhaps with another TURN server distribution that supports TLS 1.2/1.3, however the new Zextras Team Video Server ( [ https://docs.zextras.com/zextras-suite-documentation/latest/videoserver.html | https://docs.zextras.com/zextras-suite-documentation/latest/videoserver.html ] ) eliminates the need to deploy a separate STUN/TURN server for use with Zimbra Connect. But, a brief scan of the Team View Server documentation does not indicate if it also offers TLS support or not. 

Unexpected TCP Port 8743 Connections To Zimbra 
Matthew F. said that he recently noticed a large number of TCP port 8743 connections to Nginx, in his Zimbra cluster, from his external Internet gateway, but noted that Nginx is not configured to listen on this port. He asked if anyone knew of a service in Zimbra that normally uses this port, however no one on the call had heard of this port being used within Zimbra. 

Upcoming Zimbra Patches 
Mark S. asked if anyone knew of the release date and details of what will be included for 8.8.15 Patch 17 and 9.0 Patch 10. He said that December 16th was listed as the anticipated release date in the Zimbra Partner Portal for these patches, but John E. said that he was not sure the patches would be released on this date since he had not yet seen internal notes that Zimbra developers normally release following QA testing of a new patch, prior to a patch release. 

Next Zeta Alliance Call: January 5th, 2021 
The Tuesday, December 15th call is the last Zeta Alliance call for 2020. Weekly Zeta Alliance calls will resume on Tuesday, January 5th, 2021 at the regular time. 


Randy Leiker ( randy at skywaynetworks.com ) 
Skyway Networks, LLC 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20201216/02f78ca0/attachment.html>