We have identified and resolved an incident on our stun server that was only working partially.
The affected services were
- legacy on-prem Voxbi PBX's
- Voxbi Softphones
The stun service was only responding partially and sometimes delayed to binding requests.
The issue was that the STUN service was running twice on the server, that caused issues with the STUN ports being hijacked between the two services causing flappings.
There was an old systemd file that was not disabled that caused to be autostarted during a restart of the server.
We have disabled and removed the faulty systemd file to avoid this incident to happen again in the future.
In addition during our analysis we have identified a DDOS attack on our STUN server that we have resolved in parallel.
We are sorry for the inconvenience caused.
