3 ms·
Jitsi uses XMPP(prosody) for MUC- basically coordination and control of sessions. XMPP is not exposed directly to the user, they use a BOSH client abstraction t
by manquer 7y ago
Jitsi uses XMPP(prosody) for MUC- basically coordination and control of sessions. XMPP is not exposed directly to the user, they use a BOSH client abstraction to convert that to http. It is actually good design and scales well. we have scaled the bridge to 500 plus concurrent sessions without lot of production tuning in non P2P mode (generally harder more resource intensive).
- Nextgrid 7y ago> BOSH client abstraction to convert that to http This still means the outside world can interact with the XMPP server, correct? If so then this is my concern - an XMPP server seems like a huge attack surface for the tiny bit of functionality Jitsi needs (I'm confident it's using less than 10% of the actual capabilities of the XMPP server, which means the rest of the code paths are mostly untested in this scenario and are ripe for abuse and potential exploits). In your case, is this an internal server or is it open to the Internet?
- manquer 7y agoIt is authenticated, i.e. only logged in users have access. Prosody is well tested XMPP implementation and is used in many production application. meet.jit.si is unauthenticated deployment and many people use it. I wouldn't call it a tiny bit of functionality, MUC and SFU are the two main components of any video conferencing solution. XMPP helps provide MUC capability, Jicofo is the component you can see the implementation here https://github.com/jitsi/jicofo https://github.com/jitsi/jicofo BOSH does not allow all operations available via XMPP standard, there are restrictions possible, to maintain security.