We have told you about Zextras Team — a solution that adds corporate text and video chat functionality to the Zimbra Collaboration Suite Open-Source Edition, as well as the ability to conduct video conferences with a large number of participants, without the need to use external services and without transferring any data externally. This use case is ideal for companies that have a strictly defined security perimeter in the form of an internal network and can ensure their information security by protecting this perimeter. However, the internal network of an enterprise is not always something simple and straightforward. Often, a large network contains a huge number of different subnets, many of which are connected via VPN when it comes to geographically remote branches and offices. The complex structure of the internal network can hinder the proper functioning of video chats and video conferences in Zextras Team, and now we will tell you what can be done to ensure everything works correctly and without failures.
Installing Zextras Team is as straightforward as possible. After installing Zextras Suite Pro, simply activate the zimlet com_zextras_Team from the admin console, after which the relevant functionality will become available to all users of Zimbra OSE in the enterprise. After this, the system administrator can restrict the functionality of Zextras Team for different user groups as well as for individual accounts. This is done using the following commands:
- zxsuite config teamChatEnabled false
- zxsuite config historyEnabled false
- zxsuite config videoChatEnabled
The first command allows disabling a range of functions related to text chat for specific groups or individual users. The second command allows disabling chat history saving. This action can be performed for all users, users of a specific server, as well as for different groups or individual users. The third command allows disabling functions related to video chats. This function can be disabled globally, on a specific server, and for a group of users or a specific account.
Once all necessary restrictions are in place, the administrator just needs to ensure that video communication within the organization operates smoothly. Since Zextras Team is based on WebRTC technology, which functions using peer-to-peer connections, two things are critically important: the ease of establishing connections and sufficient bandwidth. While the administrator does not need to worry about bandwidth and signal quality in the internal network, a complex network architecture may hinder the establishment of connections between employees.
To avoid issues when establishing connections between clients, the developers of Zextras Team have incorporated support for TURN servers, which facilitate connections between users, even in the most complex internal networks. To achieve this, it is necessary to add a visible node with TURN capabilities to the organization's internal network that is accessible to other domains.
For example, let’s suppose the corresponding node in the corporate network will be called turn.company.ru. We need to ensure that when attempting to create a video chat, Zextras Team contacts the TURN server with the user's authentication data, and if everything is fine, establishes a connection similar to WebSocket and allows users to communicate normally with each other.
To connect the TURN server with Zextras Team, we enter a console command like zxsuite Team iceServer add turn:turn.company.ru:3478?transport=udp credential password username admin cos default. With this command, we added a new TURN server to the Zextras Team list, specifying its network address and administrator account details, and designated it for use by the default user group. By the same principle, multiple TURN servers can be added at once so that users from different groups utilize different servers for their connections.
In addition to adding new TURN servers, they can be removed from the added list using the command zxsuite Team iceServer remove turn.company.ru, and the list of added servers can be viewed servers using the command zxsuite Team iceServer getIt should be noted that creating the same users on the TURN server as in Zimbra OSE is not required. To work comfortably on the TURN server, only an administrator account will be needed.
Thus, after adding the TURN server to the local network and making a few configurations, the connection between Zextras Team users will be established quickly regardless of the network structure, and the internal network's bandwidth should consistently provide good image quality during both private video chats and video conferences.
The safety alphabet in Kubernetes: authentication, authorization, auditing
Source: habr.com
