@Sturmgewehr said in Current connection problems (Preferred Coturns for ICE):
Are they all self-hosted except for GLOBAL? So the servers at Hetzner like Germany 1 or Finland?
Yes. All coturn servers except global are self hosted. Global can be either Xirsys or Cloudflare depending on our configuration right now.
@Sturmgewehr said in Current connection problems (Preferred Coturns for ICE):
During a test (as host -> lobby) I once tried to block all coturn server connections locally (firewall), so that players can only connect directly to me, to roughly understand how much delay / lag / connection problems coturn servers generate.
Couldn't do this though, as once I blocked all coturn servers, I couldn't create a lobby or join other lobbies (tried this several times and with very few players in them to exclude any existing coturn server connections).
I wonder if this is a bug in the software and it is never assumed here that there are simply no coturn servers?
Yes, blocking all coturns for FAF is not a smart move 
The ICE protocol requires coturn. If you block all coturns the ICE adapter can only gather your local ip addresses. Since everybody uses a router in between, this will never reveal your public ip to others. And even if it could, it would still be required for hole-punching (you send data out on the port, so your firewall accepts incoming traffic on that port).
Btw: No match worked yesterday. But since the coturn servers Finland is no longer in the list (off?), it works quite well.
Coincidence.
I cannot recommend Hetzner for DDoS protection.
Yes I am quite pissed at Hetzner right now. It's not just their lack of DDoS handlng, is also there basically useless hardware firewall setup from the 90s. You can setup exactly 10 rules and each rule only takes on ip-range. That is not even sufficient to whitelist all cloudflare ip addresses.
I have personally had the best experience with OVH.
FAF used to run on OVH at the very beginning. It was very unreliable. Also we are talking about the one company that had a whole datacenter burn down so far.
Hetzner has incredible good pricing for dedicated machines. But the rest slowly goes to shit.
