Get in Touch

Course Outline

Video Conferencing Sovereignty

  • Analysis of data residency vulnerabilities and interception risks associated with commercial platforms such as Zoom and Microsoft Teams.
  • Architectural overview of Jitsi Meet, detailing the roles of Prosody, Jicofo, Videobridge, and the web client interface.
  • Comparative assessment against alternative solutions including BigBlueButton, Element Call, and Pexip.

Installation and Deployment

  • Evaluation of deployment methods: rapid implementation via Docker Compose versus manual configuration using Debian packages.
  • Implementation of SSL certificates utilizing LetsEncrypt for secure transmission.
  • Configuration of domain records and associated DNS requirements for public access.
  • Definition of firewall rules governing RTP, RTCP, and Colibri websocket traffic.

Core Components Deep Dive

  • Configuration of the Prosody XMPP server, covering room management, user identity, and authentication modules.
  • Management of conference focus and load balancing protocols through Jicofo.
  • Functionality of Jitsi Videobridge in handling SFU routing, bandwidth estimation, and simulcast streams.
  • Deployment of Jibri for session recording and live streaming integration to YouTube/RTMP endpoints.

NAT Traversal and TURN

  • Theoretical foundation of STUN/TURN and analysis of WebRTC connectivity challenges imposed by corporate firewall architectures.
  • Deployment of coturn infrastructure to facilitate relayed media traffic.
  • Management of port allocation, credential authentication, and rate limiting policies.
  • Methodologies for testing connectivity using WebRTC internal diagnostics.

Security and Privacy

  • Enforcement of access controls via room passwords, lobby modes, and administrative moderation tools.
  • Implementation of end-to-end encryption mechanisms utilizing insertable streams.
  • Establishment of recording consent protocols and data retention guidelines for government compliance.
  • Hardening of secure domains and integration of JWT token authentication.

Scaling and Performance

  • Utilization of Octo for orchestrating geo-distributed videobridge clusters.
  • Distribution of load across multiple JMS instances to ensure high availability.
  • Optimization of network bandwidth and implementation of last-N video selection strategies.
  • Monitoring operational metrics and integrating Prometheus exporters for observability.

Integration and Customization

  • Integration of identity management via LDAP and OAuth2 Single Sign-On (SSO).
  • Synchronization with calendar systems, including Outlook and Google Calendar.
  • Customization of branding elements, watermarks, and welcome page interfaces.
  • Utilization of APIs to embed Jitsi capabilities into enterprise applications for government workflows.

Requirements

  • Intermediate proficiency in Linux system administration and Docker management.
  • Technical understanding of WebRTC standards, STUN/TURN protocols, and video codec technologies.
  • Familiarity with the core Jitsi components: Prosody, Jicofo, and Videobridge.

Audience

  • IT departments seeking to replace commercial conferencing tools with a sovereign, self-hosted alternative.
  • Government agencies subject to compliance mandates that prohibit the storage of video data in external cloud environments.
  • Educational institutions and non-governmental organizations requiring cost-effective, scalable video conferencing capabilities for government operations.
 14 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories