oeng/coturn-chart

Watch

Fork 0

Update coturn/coturn Docker tag to v4.13.1 #7

Merged

forgejo merged 0 commits from refs/pull/7/head into main

2026-06-16 09:42:20 +00:00

forgejo commented

2026-05-26 00:03:15 +00:00

(Migrated from git.smallhack.org)

This PR contains the following updates:

Package	Update	Change
coturn/coturn	minor	`4.11.0` → `4.13.1`

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

coturn/coturn (coturn/coturn)

`v4.13.1`

Compare Source

What's in this release

Security fixes

What's Changed

null-terminate server_name in stun_is_challenge_response_str by @alhudz in #1944
Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks by @eakraly in #1945
Auto-deny coturn's own database backend endpoints as relay peers by @eakraly in #1946
Deny link-local / ULA / site-local relay peers by default by @eakraly in #1947

New Contributors

@alhudz made their first contribution in #1944

Full Changelog: https://github.com/coturn/coturn/compare/4.13.0...4.13.1

`v4.13.0`

Compare Source

What's in this release

More performance improvements for --udp-recvmmsg and --multiplex-peer. If your system does not rely on TURN unique ports give multiplexing a try - it has capacity to dramatically increase performance.
Security fixes

What's Changed

Wrap atomic everywhere by @eakraly in #1922
Fix sendmmsg stride bug in multiplex-peer UDP batch flush by @eakraly in #1925
Reap TURN permissions/channels via a per-thread sweep instead of per-object timers by @eakraly in #1926
Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO batching by @eakraly in #1927
Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics by @eakraly in #1928
Restrict recvmmsg fast path to shared fan-in sockets (make --udp-recvmmsg useful standalone) by @eakraly in #1929
Enable --udp-recvmmsg by default on Linux by @eakraly in #1930
Security hardening: port parsing, admin brute-force throttle, credential log redaction, constant-time compare, OAuth bounds checks, permission cap by @eakraly in #1932
Adapt .gitignore to allow files already in repo (#1935) by @tbart in #1936
Add continuous latency mode to stunclient by @eakraly in #1937
Fix test_redis_format link failure by @eakraly in #1939
Fix configure MANPREFIX typo by @misi in #1940
Fix missing sqlite3 dependendcy by @misi in #1941
Fix UDP receive buffer ownership by @eakraly in #1938

New Contributors

@tbart made their first contribution in #1936

Full Changelog: https://github.com/coturn/coturn/compare/4.12.0...4.13.0

`v4.12.0`

Compare Source

coturn 4.12.0

This release focuses on high-throughput UDP relay performance, new multiplexed peer relay mode, improved load testing tools, and documentation cleanup.

Highlights

Added optional --multiplex-peer mode, which uses shared per-thread IPv4/IPv6 relay sockets instead of one relay port per allocation.
- Helps lift the usual relay port range allocation ceiling.
- Uses exact peer IP:port demultiplexing.
- Rejects EVEN-PORT allocations in this mode.
- Documented in docs/multiplex-peer.md.
Added Linux UDP fast paths:
- --udp-recvmmsg for batched UDP receives.
- --udp-gso for UDP-GSO relay send batching when used with multiplex-peer.
- sendmmsg/recvmmsg improvements across relay, peer, and uclient paths.
Improved turnutils_uclient load generation:
- Multi-threaded listener/receive pool.
- Sender thread pool.
- UDP-GSO send batching.
- recv_pps reporting.
- --no-even-port option for clean multiplex-peer testing.

Added

New turnserver options:
- --multiplex-peer
- --multiplex-peer-port
- --udp-recvmmsg
- --udp-recvmmsg-log
- --udp-gso
New turnutils_uclient options:
- --listener-threads
- --sender-threads
- --no-even-port
CI coverage for uclient thread pools, UDP-GSO, recv PPS reporting, and multiplex-peer tests.

Fixed

Fixed TTL/TOS type conversion.
Fixed a memory leak introduced by the recvmmsg path.
Removed stale --ne option from turnserver --help.
Fixed fuzzing dictionary encoding for HTTP end-of-header bytes.

Changed

Updated bundled khash.
Restored CodeQL permissions, category, and manual build mode.
Updated examples and docs for CLI behavior, invalid packet handling, RFC5780 behavior, and current command-line options.

Documentation

Added multiplex-peer design and implementation guide.
Synced turnserver, turnutils, and man page documentation with current options.
Added DeepWiki link to the README.

Contributors

Thanks to:

Corey Siltala
Gustavo Garcia
Kai Ren
Pavel Punsky
nfuhler

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [coturn/coturn](https://github.com/coturn/coturn) | minor | `4.11.0` → `4.13.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>coturn/coturn (coturn/coturn)</summary> ### [`v4.13.1`](https://github.com/coturn/coturn/releases/tag/4.13.1) [Compare Source](https://github.com/coturn/coturn/compare/4.13.0...4.13.1) #### What's in this release Security fixes #### What's Changed - null-terminate server\_name in stun\_is\_challenge\_response\_str by [@alhudz](https://github.com/alhudz) in [#1944](https://github.com/coturn/coturn/pull/1944) - Canonicalize all IPv4-in-IPv6 encodings before peer-IP checks by [@eakraly](https://github.com/eakraly) in [#1945](https://github.com/coturn/coturn/pull/1945) - Auto-deny coturn's own database backend endpoints as relay peers by [@eakraly](https://github.com/eakraly) in [#1946](https://github.com/coturn/coturn/pull/1946) - Deny link-local / ULA / site-local relay peers by default by [@eakraly](https://github.com/eakraly) in [#1947](https://github.com/coturn/coturn/pull/1947) #### New Contributors - [@alhudz](https://github.com/alhudz) made their first contribution in [#1944](https://github.com/coturn/coturn/pull/1944) **Full Changelog**: <https://github.com/coturn/coturn/compare/4.13.0...4.13.1> ### [`v4.13.0`](https://github.com/coturn/coturn/releases/tag/4.13.0) [Compare Source](https://github.com/coturn/coturn/compare/4.12.0...4.13.0) #### What's in this release - More performance improvements for `--udp-recvmmsg` and `--multiplex-peer`. If your system does not rely on TURN unique ports give multiplexing a try - it has capacity to dramatically increase performance. - Security fixes #### What's Changed - Wrap atomic everywhere by [@eakraly](https://github.com/eakraly) in [#1922](https://github.com/coturn/coturn/pull/1922) - Fix sendmmsg stride bug in multiplex-peer UDP batch flush by [@eakraly](https://github.com/eakraly) in [#1925](https://github.com/coturn/coturn/pull/1925) - Reap TURN permissions/channels via a per-thread sweep instead of per-object timers by [@eakraly](https://github.com/eakraly) in [#1926](https://github.com/coturn/coturn/pull/1926) - Add --udp-sendmmsg-log to observe egress sendmmsg/UDP-GSO batching by [@eakraly](https://github.com/eakraly) in [#1927](https://github.com/coturn/coturn/pull/1927) - Expose recvmmsg/sendmmsg UDP batch sizes as Prometheus metrics by [@eakraly](https://github.com/eakraly) in [#1928](https://github.com/coturn/coturn/pull/1928) - Restrict recvmmsg fast path to shared fan-in sockets (make --udp-recvmmsg useful standalone) by [@eakraly](https://github.com/eakraly) in [#1929](https://github.com/coturn/coturn/pull/1929) - Enable --udp-recvmmsg by default on Linux by [@eakraly](https://github.com/eakraly) in [#1930](https://github.com/coturn/coturn/pull/1930) - Security hardening: port parsing, admin brute-force throttle, credential log redaction, constant-time compare, OAuth bounds checks, permission cap by [@eakraly](https://github.com/eakraly) in [#1932](https://github.com/coturn/coturn/pull/1932) - Adapt .gitignore to allow files already in repo ([#1935](https://github.com/coturn/coturn/issues/1935)) by [@tbart](https://github.com/tbart) in [#1936](https://github.com/coturn/coturn/pull/1936) - Add continuous latency mode to stunclient by [@eakraly](https://github.com/eakraly) in [#1937](https://github.com/coturn/coturn/pull/1937) - Fix test\_redis\_format link failure by [@eakraly](https://github.com/eakraly) in [#1939](https://github.com/coturn/coturn/pull/1939) - Fix configure MANPREFIX typo by [@misi](https://github.com/misi) in [#1940](https://github.com/coturn/coturn/pull/1940) - Fix missing sqlite3 dependendcy by [@misi](https://github.com/misi) in [#1941](https://github.com/coturn/coturn/pull/1941) - Fix UDP receive buffer ownership by [@eakraly](https://github.com/eakraly) in [#1938](https://github.com/coturn/coturn/pull/1938) #### New Contributors - [@tbart](https://github.com/tbart) made their first contribution in [#1936](https://github.com/coturn/coturn/pull/1936) **Full Changelog**: <https://github.com/coturn/coturn/compare/4.12.0...4.13.0> ### [`v4.12.0`](https://github.com/coturn/coturn/releases/tag/4.12.0) [Compare Source](https://github.com/coturn/coturn/compare/4.11.0...4.12.0) #### coturn 4.12.0 This release focuses on high-throughput UDP relay performance, new multiplexed peer relay mode, improved load testing tools, and documentation cleanup. ##### Highlights - Added optional `--multiplex-peer` mode, which uses shared per-thread IPv4/IPv6 relay sockets instead of one relay port per allocation. - Helps lift the usual relay port range allocation ceiling. - Uses exact peer IP:port demultiplexing. - Rejects `EVEN-PORT` allocations in this mode. - Documented in `docs/multiplex-peer.md`. - Added Linux UDP fast paths: - `--udp-recvmmsg` for batched UDP receives. - `--udp-gso` for UDP-GSO relay send batching when used with multiplex-peer. - sendmmsg/recvmmsg improvements across relay, peer, and uclient paths. - Improved `turnutils_uclient` load generation: - Multi-threaded listener/receive pool. - Sender thread pool. - UDP-GSO send batching. - `recv_pps` reporting. - `--no-even-port` option for clean multiplex-peer testing. ##### Added - New `turnserver` options: - `--multiplex-peer` - `--multiplex-peer-port` - `--udp-recvmmsg` - `--udp-recvmmsg-log` - `--udp-gso` - New `turnutils_uclient` options: - `--listener-threads` - `--sender-threads` - `--no-even-port` - CI coverage for uclient thread pools, UDP-GSO, recv PPS reporting, and multiplex-peer tests. ##### Fixed - Fixed TTL/TOS type conversion. - Fixed a memory leak introduced by the `recvmmsg` path. - Removed stale `--ne` option from `turnserver --help`. - Fixed fuzzing dictionary encoding for HTTP end-of-header bytes. ##### Changed - Updated bundled `khash`. - Restored CodeQL permissions, category, and manual build mode. - Updated examples and docs for CLI behavior, invalid packet handling, RFC5780 behavior, and current command-line options. ##### Documentation - Added multiplex-peer design and implementation guide. - Synced `turnserver`, `turnutils`, and man page documentation with current options. - Added DeepWiki link to the README. ##### Contributors Thanks to: - Corey Siltala - Gustavo Garcia - Kai Ren - Pavel Punsky - nfuhler </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

jessebot (Migrated from git.smallhack.org) approved these changes

2026-05-31 09:00:16 +00:00