Jitsi Meet VPS: Video Conference Self-Hosted

Zoom co lich su lo van de bao mat dang ke: routing traffic qua server Trung Quoc, claim sai ve E2EE, va vu su co Zoombombing nam 2020. Du da cai thien, Zoom van luu cuoc hop trong cloud, dem nguoi tham gia, va co the cung cap recording theo yeu cau phap ly.

Jitsi Meet self-hosted khac biet o 5 diem:

• E2EE that su: Voi tinh nang Insertable Streams, audio/video duoc ma hoa client-side. Server khong giai ma duoc.
• Khong account, khong metadata: User chi can mo URL phong va tham gia. Khong dang ky, khong log IP (neu cau hinh dung).
• Khong gioi han thoi gian: Zoom free gioi han 40 phut. Jitsi self-hosted chay vo han.
• Tuy bien hoan toan: Logo, mau sac, tinh nang - tat ca dieu chinh duoc qua config va branding plugin.
• Tich hop Matrix/Element: Cong dong dung Matrix co the lam video call qua Jitsi tich hop trong Element client.

VPS Pro+ AnubizHost voi 8GB RAM va 4 vCPU du chay Jitsi voi cuoc hop 20-30 nguoi. Voi cuoc hop lon hon, can VPS lon hon hoac trien khai Jitsi Videobridge tach biet.

Jitsi cung cap quick install script chinh thuc cho Debian/Ubuntu. Truoc khi chay, dam bao:

• Domain (vd meet.yourdomain.com) tro toi VPS IP.
• UFW mo cong 80, 443 (TCP), va 10000 (UDP) cho video traffic.
• Hostname VPS dat dung: hostnamectl set-hostname meet.yourdomain.com.

Chay install script:

apt update && apt install -y curl gnupg2 sudo
curl -sSL https://download.jitsi.org/jitsi-key.gpg.key | \
  gpg --dearmor -o /usr/share/keyrings/jitsi-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] https://download.jitsi.org stable/" \
  | tee /etc/apt/sources.list.d/jitsi-stable.list
apt update
apt install -y jitsi-meet

Script se hoi:

1. Hostname: nhap meet.yourdomain.com.
2. SSL cert: chon "Generate a new self-signed certificate" hoac "Use existing certificate". De auto Lets Encrypt, sau cai dat chay /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh.

Sau khi script hoan tat, truy cap https://meet.yourdomain.com va tao phong dau tien. Mac dinh, bat ky ai biet URL co the join.

De yeu cau authentication (chi user co credential moi tao phong), sua /etc/prosody/conf.avail/meet.yourdomain.com.cfg.lua: doi authentication = "anonymous" thanh authentication = "internal_hashed". Sua /etc/jitsi/meet/meet.yourdomain.com-config.js: bat anonymousdomain: 'guest.meet.yourdomain.com'. Tao user bang prosodyctl register.

Bao mat layer 1 - HTTPS strict: Bat HSTS va disable TLS 1.0/1.1 trong nginx config /etc/nginx/sites-available/meet.yourdomain.com.conf. SSL Labs rating phai dat A+.

Layer 2 - Disable lobby bypass: Mac dinh moderator co the cho phep skip lobby. Trong production, tat option nay de moi nguoi phai duoc duyet:

# /etc/jitsi/meet/meet.yourdomain.com-config.js
disableProfile: true,
disableJoinPassword: false,
enableInsecureRoomNameWarning: true,
enableLobbyChat: false,
enableNoisyMicDetection: true

Layer 3 - E2EE bat dau tien: Sua config them e2eping.pingInterval: -1 va trong meet config bat enableE2EE: true. User se thay icon khoa khi E2EE active. Luu y E2EE chi support browser Chromium-based.

Layer 4 - Rate limit nginx: Chong DDoS bang limit_req:

http {
    limit_req_zone $binary_remote_addr zone=jitsi:10m rate=10r/s;
}
server {
    location / {
        limit_req zone=jitsi burst=20 nodelay;
    }
}

Toi uu hieu nang:

• Last N: Sua config channelLastN: 12 de chi hien thi video cua 12 nguoi noi cuoi cung. Tiet kiem bang thong va CPU dang ke trong cuoc hop lon.
• Tat HD mac dinh: constraints.video.height.ideal: 480 de cuoc hop nho dung resolution thap.
• JVB separate node: Khi vuot 50 participant, deploy Jitsi Videobridge tren VPS thu hai. Cau hinh JVB pool de Jicofo distribute load.
• Multistream support: Bat trong nightly version de tan dung Simulcast layers.

Voi cau hinh nay, Jitsi Meet cua ban tren AnubizHost VPS Iceland tro thanh nen tang video conference doanh nghiep an toan, hieu nang cao va vuot xa Zoom ve quyen rieng tu.