Educaship Jitsi

CNM Jitsi (hereinafter, the Soft) is a CNM stable app built with Jitsi. At this moment, it is unclear where and how this app will be finally installed since its HA and storage solutions haven't been designed yet.

Development of the Soft occurs under the Jitsi for CNM Cloud project.

Product specification

The Product specifications are:

CNM Jitsi has LDAP authentication and is hosted on a Proxmox cluster that ensures its high stability that distinguishes CNM Jitsi from Jitsi.

Database system

Jitsi has a complex structure. Jitsi comprises a collection of projects:

• Jitsi Meet - WebRTC compatible JavaScript application that uses Jitsi Videobridge to provide high quality, scalable video conferences. Build upon React and React Native.
• Jitsi Videobridge (JVB) - WebRTC compatible server designed to route video streams amongst participants in a conference. When transmitting video and audio between participants, it acts as an intermediary, that is, it performs the function of RTP/RTCP termination, sets the bitrate limits in both directions for each client. It has its own HTTP API for monitoring (/colibri/debug).

It works on the Simulcast architecture and does not do any transcoding, so it consumes relatively few server CPU resources, but increases the load on the client side compared to other architectures.

Several videobridges can be connected to the Jitsi videoconferencing system - then each new conference will be assigned to one of them.

• Jitsi Conference Focus (jicofo) - server-side focus component used in Jitsi Meet conferences that manages media sessions and acts as load balancer between each of the participants and the videobridge. It has its own HTTP API (/about/health) to poll for resource status.
• Jitsi Gateway to SIP (jigasi) - server-side application that allows regular SIP clients to join Jitsi Meet conferences
• Jitsi Broadcasting Infrastructure (jibri) - set of tools for recording and/or streaming a Jitsi Meet conference that works by launching a Chrome instance rendered in a virtual framebuffer and capturing and encoding the output with ffmpeg.

External Software used by Jitsi:

• Prosody - XMPP server used for signaling written in the Lua programming language.

Hosting

CNM Jitsi is installed on the CNM EndUser Farm on the Proxmox cluster, CNM Jitsi is a unique installation that is the first experience of the CNM EndUser Farm property - high availability. CNM Jitsi can migrate from one machine to another one that were added to Proxmox cluster. These machines are hosted by Hetzer. Read more about high availability: CNM EndUser Farm, CNM ProxmoxVE.

Software instances

The software instance that powers core, hands-on training, and experiential systems.

• CNM core Jitsi:
  • https://jitsi.bskol.com/
• Kryvi Jitsi:
• Inplz Jitsi:

Security

For security, we use Fail2ban because it operates by monitoring log files (e.g. /var/log/auth.log, /var/log/apache/access.log, etc.) for selected entries and running scripts based on them. Most commonly this is used to block selected IP addresses that may belong to hosts that are trying to breach the system's security. It can ban any host IP address that makes too many login attempts or performs any other unwanted action within a time frame defined by the administrator. Includes support for both IPv4 and IPv6.

Calls use the P2P mode, which is end-to-end encrypted via DTLS-SRTP between the two participants for encrypted communication (secure communication). Group calls also use DTLS-SRTP encryption, but rely on the Jitsi Videobridge (JVB) as video router, where packets are decrypted temporarily. All data is transmitted only through our server, and comprehensive TLS encryption provides protection against interception and unauthorized eavesdropping.

Malware protection

Previously, CNM Cloud developers struggled with the viruses, so an effective anti-virus strategy must be found -- what was the solution?

Standing operating procedures

Standing operating procedure

Monitoring process

Monitoring is done in Nagios Snapshots are made by hand, not on CNM Jitsi. Read more: CNM Nagios.

Backup

Usually the main backup is done on the farm, not on CNM Jitsi. So you can read more about backup on CNM EndUser Farm.

Snapshot

We take snapshots of the entire database it's made by hand. Separately, CNM Jitsi snapshots are not taken. More about snapshots: CNM MariaDB, CNM Nagios.

System recovery

How to install & Configure Jitsi: https://drive.google.com/file/d/14ynvD3wqliwynQr7TrBf6B-slxqmsDnn/view?usp=sharing

Customization

Меняем лого:.... отдельно для каждой установки

Hands-on assignments

Hands-on assignments that CNM learners can use to get accustomed to the software while using its hands-on training systems and applications.

Presentations

Presentations that present the software to its new users in multimedia, video, just audio, and/or just graphic formats.

User group

CNM Social user group has not yet been created; the group may organize software-related events and produce newsletters.

See also

• https://blog.mi.hdm-stuttgart.de/index.php/2021/03/11/how-to-scale-jitsi-meet/

Related lectios

Lectios that provide CNM learners with knowledge about the deployed software.