RTPProxy
← News

RTPProxy v3.1.0 release

@sobomaxReleases

We are excited to announce the release of RTPProxy v3.1.0, which brings significant new features and enhancements to improve NAT traversal, media security and system robustness. This release focuses on the introduction of the new ICE-Lite module, enhancements to the DTLS gateway module, and the addition of a new fuzzer type for improved testing.

See the GitHub release for downloads, and the comparison between v3.0.1 and v3.1.0 for a detailed list of changes.

New Features

ICE-Lite module

  • A new ice_lite module allows RTPProxy to participate in Interactive Connectivity Establishment (ICE) procedures as a lite implementation.
  • Enhances NAT traversal capabilities by allowing RTPProxy to handle ICE connectivity checks, improving media stream establishment in NAT-restricted environments.
  • Supports interoperability with full ICE implementations, facilitating seamless media negotiation between endpoints behind NATs.
  • Can be combined with the existing dtls_gw module to provide a full WebRTC endpoint. Verified to interoperate seamlessly with Google Chrome, Mozilla Firefox and Microsoft Edge.

New fuzzer integration

  • A new RTP/DTLS/ICE session fuzzer type has been integrated into the testing framework, to proactively identify and address potential vulnerabilities.
  • The fuzzer systematically generates a wide range of inputs to test the resilience of RTPProxy against unexpected or malformed data.
  • Improves overall stability and security by uncovering edge cases and ensuring robust handling of diverse network scenarios.

Improvements

DTLS gateway module

  • RTCP support: RTCP/SRTCP packets muxed into an RTP/SRTP stream can now be encrypted/decrypted.
  • Optimized DTLS handshake: improved efficiency of the DTLS handshake, reducing latency during the establishment of secure media streams.
  • Expanded cipher suite support: additional cipher suites are supported, enhancing compatibility with a broader range of clients and strengthening security.
  • Stability and reliability: resolved issues related to DTLS session management, resulting in more stable and reliable encrypted media transmission.

Pre-built containers

  • Pre-built Docker images are now also pushed to ghcr.io, in addition to hub.docker.com.
  • Ubuntu-based images have been added in addition to the Debian ones.

Documentation Updates

  • Added documentation on the ICE-Lite (ice_lite) module.
  • Revised documentation for the dtls_gw module to reflect the latest enhancements and provide guidance on optimizing DTLS settings.

Upgrade Notes

  • Configuration changes: new configuration parameters are introduced for the ICE-Lite module. Review and update your configuration files to enable and customize ICE-Lite functionality.
  • Dependency updates: make sure all dependencies, especially those related to DTLS and ICE, are updated to their latest versions to fully leverage the new features and improvements.

Acknowledgments

We extend our gratitude to all contributors, testers and community members whose efforts and feedback have been invaluable in making this release possible.