Xirsys.XTurn.Plugin.Guard (xturn_plugins v0.1.0)

Copy Markdown View Source

Active relay-abuse guard for SRTP-constrained deployments.

Performs RFC 7983 first-byte demultiplexing and an RTP payload-type allowlist. This plugin is drop-only — it never rewrites frames. Rewriting any RTP header field would invalidate the SRTP authentication tag.

Options

  • :mode — :monitor (default) emits [:xturn, :guard, :reject] telemetry and passes the frame through; :enforce drops rejected frames.
  • :payload_types — allowed RTP payload types (default [0, 8]).
  • :match — allocation filter passed to attach?/2 (default attaches to all).