一分钟教你搭建WebRTC流媒体服务器Janus-gateway

前言

我最开始使用docker安装，结果docker安装的不是集成东西太多，导致镜像非常大。要么就是安装后发现问题多的，基本上没有维护。

不知道是我没有找到好的docker镜像还是真的就没有好的，如果有觉得不错的janus的docker镜像欢迎小伙伴留言哈。

注意：全篇建议在root用户下操作，如果没有办法执行root，那么在每条命令前面请加sudo

准备工作

• 一台Ubuntu18.04的服务器，拥有公网ip，最好是国外服务器，国内服务器下载依赖很慢。
• 一个域名，提前把域名解析到服务器的公网ip
• 使用http的话开放8088端口 使用https的话开放8089端口 ps:WebRTC需要在https环境或者本地的环境下才有效，所以建议开放8099就可以了，但是janus默认走的http。我也不知道官方怎么想的，不然我去提个pr？

安装依赖

sudo apt-get install aptitude
aptitude install libmicrohttpd-dev libjansson-dev 
	libssl-dev libsrtp-dev libsofia-sip-ua-dev libglib2.0-dev 
	libopus-dev libogg-dev libcurl4-openssl-dev liblua5.3-dev 
	libconfig-dev pkg-config gengetopt libtool automake

有一个依赖库是必须通过源码安装的，它就是libsrtp库。 libsrtp库的主要作用是对数据进行加密。之所以要通过源码安装，是因为在apt源上的libsrtp库没有将ssl库编译上，而janus又需要使ssl库对数据做最终的加密，所以我们只能使用源码的方式安装了。具体操作步骤如下：

mkdir -p /opt/janus && cd janus
wget https://github.com/cisco/libsrtp/archive/v2.2.0.tar.gz
tar xfv v2.2.0.tar.gz
cd libsrtp-2.2.0
./configure --prefix=/usr --enable-openssl
make shared_library && sudo make install

安装Janus-Gateway

git clone https://github.com/meetecho/janus-gateway.git
cd janus-gateway

生成Makefile文件

./autogen.sh
./configure --prefix=/usr/local/janus

确认下生成Makefile成功没

ll Makefile

编译janus

make -j 4
sudo make install
sudo make configs

在这我出现了以下的错误

configure: error: Package requirements ( glib-2.0 >= 2.34 gio-2.0 >= 2.34 libconfig nice jansson >= 2.5 libssl >= 1.0.1 libcrypto zlib ) were not met: No package 'nice' found

是因为没有找到liblua5.3-dev，我找了很久也没有找到，最后解决办法是

sudo aptitude install libmicrohttpd-dev libjansson-dev libnice-dev
sudo aptitude install libssl-dev libsrtp-dev libsofia-sip-ua-dev libglib2.0-dev
sudo aptitude install libopus-dev libogg-dev libcurl4-openssl-dev pkg-config gengetopt libtool automakeg

如果没有出现此错误可以忽略，出现了的话可以按照我的步奏解决 解决后重新

./autogen.sh
./configure --prefix=/usr/local/janus
make -j 4
sudo make install
sudo make configs

安装CoTurn服务

安装coTrun看我之前的教程 WebRTC之搭建coturn服务遇到的问题

Janus配置

申请ssl证书，不会的看我这篇文章: WebRTC之完整搭建Jitsi Meet指南

vim /usr/local/janus/etc/janus/janus.jcfg

找到certificates配置项，在里面打开以下内容的配置，并设置。

certificates:
        cert_pem = "/etc/ssl/cert/domain/cert.pem"
        cert_key = "/etc/ssl/cert/domain/key.pem"

找到nat配置项，在里面打开以下内容的配置，并设置,其中的用户名及密码为turnserver.conf中配置的用户名及密码。

nat: {
        stun_server = "domain.com"
        stun_port = 3478
        nice_debug = true
        #full_trickle = true
        #ice_lite = true
        ice_tcp = true

        # By default Janus tries to resolve mDNS (.local) candidates: even
        # though this is now done asynchronously and shouldn't keep the API
        # busy, even in case mDNS resolution takes a long time to timeout,
        # you can choose to drop all .local candidates instead, which is
        # helpful in case you know clients will never be in the same private
        # network as the one the Janus instance is running from. Notice that
        # this will cause ICE to fail if mDNS is the only way to connect!
        #ignore_mdns = true

        # In case you're deploying Janus on a server which is configured with
        # a 1:1 NAT (e.g., Amazon EC2), you might want to also specify the public
        # address of the machine using the setting below. This will result in
        # all host candidates (which normally have a private IP address) to
        # be rewritten with the public address provided in the settings. As
        # such, use the option with caution and only if you know what you're doing.
        # Make sure you keep ICE Lite disabled, though, as it's not strictly
        # speaking a publicly reachable server, and a NAT is still involved.
        # If you'd rather keep the private IP address in place, rather than
        # replacing it (and so have both of them as advertised candidates),
        # then set the 'keep_private_host' property to true.
        #nat_1_1_mapping = "1.2.3.4"
        #keep_private_host = true

        # You can configure a TURN server in two different ways: specifying a
        # statically configured TURN server, and thus provide the address of the
        # TURN server, the transport (udp/tcp/tls) to use, and a set of valid
        # credentials to authenticate...
        turn_server = "domain.com"
        turn_port = 3478
        turn_type = "udp"
        turn_user = "user"
        turn_pwd = "passwd"      

继续修改传输的配置把https打开，不打开https没有办法使用WebRTC的

vim /usr/local/janus/etc/janus/janus.transport.http.jcfg
修改general的配置
general: {
        #events = true                                  # Whether to notify event handlers about transport events (default=true)
        json = "indented"                               # Whether the JSON messages should be indented (default),
                                                                        # plain (no indentation) or compact (no indentation and no spaces)
        base_path = "/janus"                    # Base path to bind to in the web server (plain HTTP only)
        http = true                                             # Whether to enable the plain HTTP interface
        port = 8088                                             # Web server HTTP port
        #interface = "eth0"                             # Whether we should bind this server to a specific interface only
        #ip = "192.168.0.1"                             # Whether we should bind this server to a specific IP address (v4 or v6) only
        https = true                                    # Whether to enable HTTPS (default=false)
        secure_port = 8089                              # Web server HTTPS port, if enabled
        #secure_interface = "eth0"              # Whether we should bind this server to a specific interface only
        #secure_ip = "192.168.0.1"              # Whether we should bind this server to a specific IP address (v4 or v6) only
        #acl = "127.,192.168.0."                # Only allow requests coming from this comma separated list of addresses
}

修改admin配置
admin: {
        admin_base_path = "/admin"                      # Base path to bind to in the admin/monitor web server (plain HTTP only)
        admin_http = false                                      # Whether to enable the plain HTTP interface
        admin_port = 7088                                       # Admin/monitor web server HTTP port
        #admin_interface = "eth0"                       # Whether we should bind this server to a specific interface only
        #admin_ip = "192.168.0.1"                       # Whether we should bind this server to a specific IP address (v4 or v6) only
        admin_https = true                                      # Whether to enable HTTPS (default=false)
        admin_secure_port = 7889                        # Admin/monitor web server HTTPS port, if enabled
        #admin_secure_interface = "eth0"        # Whether we should bind this server to a specific interface only
        #admin_secure_ip = "192.168.0.1         # Whether we should bind this server to a specific IP address (v4 or v6) only
        #admin_acl = "127.,192.168.0."          # Only allow requests coming from this comma separated list of addresses
}

修改证书
certificates: {
        cert_pem = "/etc/letsencrypt/live/janus.rtctest.7moor.com/cert.pem"
        cert_key = "/etc/letsencrypt/live/janus.rtctest.7moor.com/privkey.pem"
        #cert_pwd = "secretpassphrase"
        #ciphers = "PFS:-VERS-TLS1.0:-VERS-TLS1.1:-3DES-CBC:-ARCFOUR-128"
}

nginx配置

创建新的nginx配置文件

vim /etc/nginx/conf.d/doman.janus.conf

添加以下内容

server {
    listen 0.0.0.0:443 ssl;
    listen [::]:443 ssl;
    # tls configuration that is not covered in this guide
    # we recommend the use of https://certbot.eff.org/
    server_name doman.com;
    # set the root
    root /opt/janus/janus-gateway/html;
    index index.html;
    location ~ ^/([a-zA-Z0-9=?]+)$ {
        rewrite ^/(.*)$ / break;
    }
    location / {
        ssi on;
    }

    ssl_certificate /etc/letsencrypt/live/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/privkey.pem; # managed by Certbot
}

启动nginx

nginx -t && nginx -s reload

启动janus

nohup /opt/janus/bin/janus >> /var/log/janus.log 2>&1 &

打开浏览器输入你的域名

https://youdomain.com