TURN Allocate Error Response

Hi There,

Our company are now introducing Teams into our services, but there is a serious problem when using UDP. The conversation closed and try to re-connect every 6 seconds after connected or re-connected.

The firewall rule allows the traffic below:

Network: 13.107.64.0/18, 52.112.0.0/14 and 52.120.0.0/14

Protocol: UDP 3478-3481

After some network packets captured and analyzed, we found most of the time the server sent Allocate Error Request to clients after received from their Allocate Request. The error code in the Allocate Error Response packet is Number=1, The request did not contain a Message-Integrity attribute.

Then we have deeper inspections into each Allocate Request packet and we found those request packets caused error responses, they did miss to contain the MessageIntegrity attribute within the TURN field. Sometimes they sent Bandwidth attribute only and sometimes UserName, Realm or some others attributes, as long as the MessageIntegrity not there, they got Allocate Error Response.

We have no idea if anyone here have the same situation, we also don't know if this is the reason to cause the 6 seconds re-connecting. It just very strange that the requests do not bring all the sufficient information at once especially not together with the most important MessageIntegrity attribute.

ps.

1. Teams Meeting running by TCP without problems (to block UDP ports by firewall).

2. the packets only captured UDP 3478 for analysis while 3479 runs audio, 3480 runs video and 3481 runs sharing.

3. we only find the Allocate Error Responses which probably caused conversations re-connecting but we are not sure if it is the root cause.