WebRTC Relay

Issue Cloudflare Realtime TURN credentials for WebRTC. Without secrets configured, endpoints return safe demo credentials so tests and local demos still work.

API ReferenceCopy Anchor Link

GET /turn-credentialsCopy Anchor Link

GET /ice-serversCopy Anchor Link

Both routes return the same shape.

ttl number (optional)

Credential lifetime in seconds (60–86400, default 86400).

Example RequestCopy Anchor Link

curl "https://your-worker.workers.dev/turn-credentials?ttl=3600"
curl "https://your-worker.workers.dev/ice-servers"

Success Response (demo mode)Copy Anchor Link

Returned when REALTIME_APP_ID or TURN_API_TOKEN is missing:

{
  "iceServers": [
    {
      "urls": ["turn:turn.cloudflare.com:3478?transport=udp"],
      "username": "demo",
      "credential": "demo"
    }
  ],
  "ttl": 86400,
  "mode": "demo",
  "note": "Configure REALTIME_APP_ID and TURN_API_TOKEN for real credentials"
}

Success Response (live mode)Copy Anchor Link

Calls POST https://rtc.live.cloudflare.com/v1/turn/keys/${REALTIME_APP_ID}/credentials/generate-ice-servers with Authorization: Bearer ${TURN_API_TOKEN}.

Error CodesCopy Anchor Link

• 400 - Invalid ttl (INVALID_TTL)
• 502 - Realtime TURN API failure (TURN_API_ERROR)

Use CasesCopy Anchor Link

• Learn Cloudflare Realtime TURN credential issuance
• Bootstrap WebRTC ICE servers from a Worker API
• Demo clients safely when secrets are not yet configured
• Centralize TURN TTL and key rotation behind one endpoint

LimitationsCopy Anchor Link

• Demo credentials are not usable for real peer connections
• Requires a TURN key from the Realtime dashboard for live mode
• TTL clamped to 60–86400 seconds
• No STUN-only path in this experiment beyond what the API returns

DeploymentCopy Anchor Link

curl "https://your-worker.workers.dev/turn-credentials?ttl=3600"

Local DevelopmentCopy Anchor Link

cd apps/experiments/webrtc-relay
npm install
npm run dev

curl "http://localhost:8787/turn-credentials?ttl=3600"

Without secrets, endpoints return demo credentials (safe for tests).

ConfigurationCopy Anchor Link

wrangler.json declares:

• Var REALTIME_APP_ID (TURN key id)
• Secret TURN_API_TOKEN (set via wrangler secret put)

Cloudflare Features UsedCopy Anchor Link

• Workers - Edge compute runtime
• Cloudflare Realtime TURN - ICE / TURN credentials for WebRTC