Coturn TURN server Files

New

• No more dependency on https://github.com/digitalocean/prometheus-client-c for prometheus metrics! Prometheus library has been rewritten from scratch for the use of coturn. Functionality still depends on libmicrohttpd. Prometheus support is now compiled in if libmicrohttpd is available. Still needs to be enabled to function.
• HTTPS support for prometheus client (optional)
• TLS support for redis - now compatible with managed redis (optional)
• Rate limiting "401 Unauthorized" responses - reduces reflection attacks off the coturn server. This is an experimental feature - not fully tested on production scale deployment and massive DDoS attacks. New prometheus counters should help shed some light on real life behavior and performance. The feature is off by default.

What's Changed

• validate hmackey length in sqlite_get_user_key before hex decode by @alhudz in https://github.com/coturn/coturn/pull/1948
• Add out-of-tree patch to restore deprecated OpenSSL 1.1.1 support by @eakraly in https://github.com/coturn/coturn/pull/1952
• Add optional TLS transport for Redis connections by @eakraly in https://github.com/coturn/coturn/pull/1951
• Fix relay threads override by @eakraly in https://github.com/coturn/coturn/pull/1953
• Flush prometheus hot-path counters once per second to kill lock contention by @eakraly in https://github.com/coturn/coturn/pull/1954
• fix signed-char index out-of-bounds read in base64_decode by @alhudz in https://github.com/coturn/coturn/pull/1950
• Build Prometheus exporter from vendored local sources by @eakraly in https://github.com/coturn/coturn/pull/1955
• Prom https by @eakraly in https://github.com/coturn/coturn/pull/1956
• Fix realm quota data race and warnings by @eakraly in https://github.com/coturn/coturn/pull/1958
• Add per-source rate-limiting of UDP 401 Unauthorized responses by @eakraly in https://github.com/coturn/coturn/pull/1957

Full Changelog: https://github.com/coturn/coturn/compare/4.13.1...4.14.0