Skip to content

OpenVidu Single Node PRO installation: Azure#

Warning

Azure deployments are considered in Beta in version 3.2.0 of OpenVidu.

This section contains the instructions to deploy a production-ready OpenVidu Single Node PRO deployment in Azure. Deployed services are the same as the On Premises Single Node installation but automate the process with Template Spec of ARM.

To use the Azure template you just need to click the button below (you will be redirected to Azure).

Deploy to Azure

This is how the architecture of the deployment looks like:

OpenVidu Single Node Azure Architecture
OpenVidu Single Node Azure Architecture

Template Parameters#

To deploy the template you need to fill the following parameters.

Resource Group and Stack Name#

Select your Subscription and the Resource Group where you want to deploy OpenVidu.

Azure Instance configuration

Warning

It is highly recommended to deploy OpenVidu in a brand new Azure Resource Group. Reusing an existing Resource Group can lead to conflicts. The only reason to reuse an existing Resource Group is to use the same IP and Azure Blob Storage Account as a previous OpenVidu deployment. The rest of resources are not reusable and should be eliminated before deploying OpenVidu in the same Resource Group.

Select the Region and choose a descriptive Stack Name. It will be used as a prefix in the name of all the resources created by the template.

Azure Instance configuration

Domain and SSL Certificate Configuration#

There are three possible scenarios for this section:

For a production-ready setup, this scenario is ideal when you have an FQDN (Fully Qualified Domain Name) and a Public IP at your disposal. It leverages the services of Let's Encrypt to automatically generate valid certificates.

First, you need to have the FQDN pointing to the Public IP you are going to use.

Then, you need to fill in the following parameters:

Let's Encrypt certificates

As you can see, you need to specify the Public Ip Address with the Public IP that the domain points to, the Domain Name with your FQDN, and the Lets Encrypt Email with your email address for Let’s Encrypt notifications. These parameters are mandatory.

To deploy OpenVidu in Azure under your Fully Qualified Domain Name (FQDN) using already existing certificates, follow this method.

You need to have your FQDN pointing to a previously created Public Ip.

Also, you need a temporary HTTP server hosting your private and public certificate under a specific URL. These URLs are needed for the instance to be able to securely download and install your certificates.

The configured parameters would look like this:

Custom certificates

You need to specify at Own Public Certificate and Own Private Certificate the URLs where the public and private certificates are hosted, respectively. The Domain Name, Public Ip Address are mandatory parameters.

Certificates need to be in PEM format and the URLs must be accessible from the instance.

This is the most straightforward option for deploying OpenVidu on Azure when you do not have a Fully Qualified Domain Name (FQDN). This method allows for the immediate use of OpenVidu with ARM Templates.

However, this convenience comes with the caveat that users will need to manually accept the certificate in their web browsers. Please be aware that this configuration is solely for developmental and testing purposes and is not suitable for a real production environment.

These are the parameters needed in this section to use self-signed certificates:

Self-signed certificates

You don’t need to specify any parameters; just select the CertificateType as self-signed. The domain name used will be an Azure-generated one.

OpenVidu Single Node PRO configuration#

In this section, you need to specify some properties needed for the OpenVidu Single Node PRO deployment.

Parameters of this section look like this:

OpenVidu Elastic Configuration

Make sure to provide the OpenViduLicense parameter with the license key. If you don't have one, you can request one here.

For the RTCEngine parameter, you can choose between Pion (the default engine used by LiveKit) and Mediasoup (with a boost in performance). Learn more about the differences here.

Azure Instance Configuration#

Specify properties for the Azure instance that will host Openvidu.

Parameters in this section look like this:

Azure Instance configuration

Simply select the type of instance you want to deploy at Type of Instance. Fill in the parameter Admin Username that will be set as admin username in the instance. Select the SSH key you've created previously in SSH public key source (or you can create a new one in the drop down) to allow you to SSH into the instance.

Storage Account#

You need to fill some parameters about the storage account that the deployment will use to save the recordings.

Warning

Recordings are not available in OpenVidu v2 Compatibility mode (v2compat) in OpenVidu 3.2.0 deployed in Azure.

Parameters in this section look like this:

Azure Instance configuration

Storage Account Name: leave blank to create a new Storage Account for this deployment. You can specify an already existing Storage Account name if you want (remember it must belong to the same resource group as your deployment).

Container Name is the name that you desire for the container that of the storage account where the recordings will be saved. If you leave it blank it will create the container with name openvidu-appdata.

(Optional) TURN server configuration with TLS#

This section is optional. It is useful when your users are behind a restrictive firewall that blocks UDP traffic. This parameter will only work if you are using letsencrypt or owncert as the Certificate Type parameter.

Parameters in this section look like this:

TURN server configuration with TLS

Set the Turn Domain Name parameter to the domain name you intend to use for your TURN server. It should be pointing to the Public Ip Address specified in the previous section.

If you are using letsencrypt as the Certificate Type parameter, you can leave the Turn Own Public Certificate and Turn Own Private Certificate parameters empty. If you are using owncert, you need to specify the URLs where the public and private certificates are hosted.

Deploying the stack#

Whenever you are satisfied with your Template paremeters, just click on "Next" to trigger the validation process. If correct, click on "Create" to start the deployment process (which will take about 5 to 10 minutes).

Warning

In case of failure, it might be that some role failed to create. In this case redeploy in a new resource group and change the Stack Name. To remove a role in a resource group visit Remove Azure role assignments.

When everything is ready, you can check the output secrets on the Key Vault or by connecting through SSH to the instance:

  1. Go to the Key Vault created called yourstackname-keyvault in the Resource Group that you deployed. You can access it from the Azure Portal Dashboard.

  2. Once you are in the Key Vault on the left panel click on "Objects" 🡒 "Secrets".

    Azure Key Vault secrets location

  3. Here click on the secret of your choice or whatever you need to check and click again in the current version of that secret

    Azure Key Vault Secret Version

  4. Now you will see a lot of properties but the one you are searching for is located at the bottom and it will be revealed by clicking in "Show Secret Value".

    Check deployment outputs in Azure Key Vault

SSH to the instance and navigate to the config folder /opt/openvidu/config. Files with the deployment outputs are:

  • openvidu.env
  • app.env

Configure your application to use the deployment#

You need your Azure deployment outputs to configure your OpenVidu application. If you have permissions to access the Key Vault you will be able to check there all the outputs (Check deployment outputs in Azure Key Vault). If you don't have permissions to access the Key Vault you can still check the outputs directly in the instance through SSH (Check deployment outputs in the instance).

Your authentication credentials and URL to point your applications would be:

  • URL: The value in the Key Vault Secret of DOMAIN-NAME or in the instance in openvidu.env as a URL. It could be wss://openvidu.example.io/ or https://openvidu.example.io/ depending on the SDK you are using.
  • API Key: The value in the Key Vault Secret of LIVEKIT-API-KEY or in the instance in openvidu.env.
  • API Secret: The value in the Key Vault Secret of LIVEKIT-API-SECRET or in the instance in openvidu.env.

Troubleshooting initial Azure stack creation#

If something goes wrong during the initial Azure stack creation, your stack may reach some failed status for multiple reasons. It could be due to a misconfiguration in the parameters, a lack of permissions, or a problem with Azure services. When this happens, the following steps can help you troubleshoot the issue and identify what went wrong:

  1. Check if the instance or instances are running. If they are not, check the Azure deployment events for any error messages.

  2. If the instance or instances are running, SSH into the instance and check the logs of the following files:

    • /var/log/cloud-init-output.log
    • /var/log/cloud-init.log

    These logs will give you more information about the Azure stack creation process.

  3. If everything seems fine, check the status and the logs of the installed OpenVidu services.

Configuration and administration#

When your Azure stack reaches the Succeeded status, it means that all the resources have been created. You will need to wait about 5 to 10 minutes to let the instance install OpenVidu as we mentioned before. When this time has elapsed, try connecting to the deployment URL. If it doesn't work, we recommend checking the previous section. Once finished you can check the Administration section to learn how to manage your deployment.