Self-Hosted Guide

Single-node (up to 100 concurrent sessions, 4 vCPU + 8 GB RAM), 3-node mediasoup cluster (up to 2,000 concurrent sessions), and multi-region active/active for global distribution. Each architecture comes with a Terraform / Ansible reference.

• Ubuntu 22.04 baseline images
• Coturn TURN server config (port 3478, 5349)
• MinIO + Redis + PostgreSQL stack
• TLS termination via Caddy or Nginx
• Prometheus + Grafana dashboards bundled
• Reference Terraform modules for AWS Mumbai and GCP Mumbai

Each agent's session uses about 1.5 Mbps of media plus negligible signaling. A single mediasoup worker handles ~500 simultaneous producers; the SFU forwards to as many consumers as bandwidth allows. The recorder is the heavier workload — plan for one 4-vCPU recorder per 50 concurrent recordings.

Disable root SSH, require key-based login, enable UFW, tighten Postgres pg_hba.conf, run MinIO with versioning + object-lock, rotate TLS certs via Caddy auto-issuance, enable audit logging, and run weekly security updates via unattended-upgrades.

Daily Postgres backups to encrypted S3 (or MinIO replication). MinIO bucket replication across regions. Mediasoup is stateless — failover is just rerouting. RTO under 15 minutes for single-region failure with an active passive setup.