Fair TURN Bandwidth Shaping Between Large and Small Flows
Use actor- and allocation-level token buckets, burst allowance, and fair queues so one bulk transfer cannot starve control, screen, or small files.
uCopy Technical Blog
Clear explanations for connections that work in real life · Page 10
Practical uCopy guides to WebRTC, P2P file transfer, STUN and TURN, LAN discovery, resumable transfers, screen sharing, privacy, and security.
WebRTCP2P transferSTUN / TURNPrivacy & security
FIELD NOTES
Subscribe via RSSLatest articles
Securing a TURN Credential API with Expiring Usernames and HMAC
Issue REST-style temporary credentials bound to an authenticated actor, expiry, region, and quota while protecting shared secrets against cache, replay, and bulk harvesting.
The Full Lifecycle of Temporary TURN Credentials
Design HMAC-based short-lived TURN credentials with clock skew, session binding, renewal, logout revocation, key rotation, and a bounded blast radius after leakage.
TURN Disaster Recovery Beyond the Myth of Stateless Relays
Plan node, region, secret-service, and credential-API failure across discovery failover, headroom, configuration rebuild, secret recovery, and active-session policy.
Restricting TURN Peer Addresses Against Scanning and Reflection
Reject private, loopback, link-local, multicast, and metadata targets at permission and channel-bind time, including IPv4-mapped IPv6 and dual stack.
Enforcing TURN Daily Quotas Before, During, and After Allocation
Carry daily budget through credential issuance, live relay accounting, near-limit warnings, graceful termination, and final reconciliation instead of one admission check.
TURN Regional Capacity Planning Across Bandwidth, Ports, and Failover
Estimate relay nodes from relay ratio, bidirectional traffic, peak concurrency, port range, NIC packet rate, and regional failover, then define scaling triggers.
Sizing the TURN Relay Port Range for Capacity and Firewalls
Plan the UDP relay range from concurrent allocations, address count, port reuse, and failure headroom, aligning cloud firewalls, host rules, and capacity alerts.
TURN over UDP, TCP, and TLS for Restrictive Networks
Design candidate ordering, certificates, proxy boundaries, and connection timeouts across UDP/TCP 3478 and TLS 443 for fast paths plus restrictive networks.
Reconciling TURN Allocation Bytes with Per-User Daily Quotas
Collect relay allocation lifecycle, bidirectional bytes, region, credential subject, and end reason while handling crashes, day boundaries, duplicate reports, and reporting lag.
A Two-Browser E2E Harness for Complete A-to-B Workflows
Test connection, chat, files, clipboard, and screen sharing with isolated browser contexts, controlled signaling, and network proxies while collecting evidence from both endpoints.
Detecting Blocked UDP and Reaching a Fallback Quickly
Use ICE checks, TURN transport outcomes, and bounded deadlines to identify unreachable UDP while preparing TCP/TLS fallback without invasive probing.
Cancellation: Immediate UI, Remote Convergence, and Residue
Define cancellable phases, immediate UI response, remote acknowledgement, timeout, cleanup, and resume-data policy for chat, files, screens, and connections.
When Version Vectors Beat Last-Write-Wins for Peer State
Use version vectors to distinguish causal and concurrent updates across trust, shared settings, and offline state, including mergeable fields, conflict UX, and metadata cost.
Virtualizing Ten Thousand Activity Rows Without Breaking Navigation
Implement fixed or dynamic virtualization, stable keys, scroll anchors, incremental loading, filter restoration, and accessible alternatives without list jumps.
How VPN Routing, Virtual Adapters, and Leak Protection Affect WebRTC
Analyze full-tunnel and split VPNs, virtual-adapter priority, UDP policy, DNS, and enterprise leak protection across ICE candidates and paths.
When WASM File Hashing Is Actually Faster
Compare Web Crypto, JavaScript, and incremental WASM hashing across throughput, startup, memory copies, SIMD, worker parallelism, and mobile power.
The Web Push Lifecycle Across Expiry, Permission Changes, and Rotation
Manage permission prompts, PushSubscription changes, VAPID keys, 410 deletion, per-device preferences, encrypted payloads, and click routing.
Incremental SHA-256 in a Web Worker Without Freezing the UI
Design chunked reads, transferable buffers, incremental digests, throttled progress, cancellation, and Worker reuse for large files and mobile memory pressure.
Webhook Signature Verification with Raw Bodies and Replay Records
Sign raw bytes with HMAC or public keys bound to timestamp, event ID, and version, using constant-time comparison, rotation, and duplicate handling.
No install. No account.
Start for freeConnect two devices now
Send files, sync a clipboard, chat, and share a screen securely from the browser.