XMPP Service Operators - 2022-12-25

Happy Christmas happy holidays to everyone.

😊 Merry Xmas abdullah

Same to you all

Merry xmas everybody! We are setting up an xmpp Server and have a few questions. Maybe somebody is willing to answer

Can xmpp be handled over http(s) only? I.e. connections via subdomains on 443 instead of 5223/5270 Is there a backend which can handle xmpp on a single port but instead use a load-balance or reverse proxy of web socket to accomplish the multiple port use What xmpp clients work best for connecting to an xmpp that is a hidden service only

Merry Christmas

On first question: You can use BOSH (XMPP over HTTP) or Websockets to connect to the XMPP network as well

References: * XEP-0124 * XEP-0206 * RFC-7395

reload: do you want it to federate with the rest of the XMPP network or not

reload: XEP-368 multiplexing over sslh or nginx

reload: hidden service means .onion? ✏

> reload: do you want it to federate with the rest of the XMPP network or not Federate is ideally yes

> reload: XEP-368 multiplexing over sslh or nginx I’m more familiar with Nginx

> reload: hidden service means .onion? Yes

reload: so you can accept all incoming connections on one port no problem, if that port can only do http that will severely limit the clients that can be used to only those that can do WebSocket, and in practice cut you off from federating with public servers because only 1 currently can do s2s over WebSocket

Also very few servers can successfully federate with .onion domains

reload: .onion does not need http or multiplexing or anything

> Also very few servers can successfully federate with .onion domains This too, yes

> reload: so you can accept all incoming connections on one port no problem, if that port can only do http that will severely limit the clients that can be used to only those that can do WebSocket, and in practice cut you off from federating with public servers because only 1 currently can do s2s over WebSocket Websocket then I just mean http assuming I am running on 443 Can still be websocket at that port ✏

Also. I don’t mind subdomains. My big question is what backend is best to do the summary of these

Multiplexing means that the connection to that one single port is forwarded to xmpp or http or whatever, so it appear you only have 443 but...several services live behind it

Getting clients to connect to non-traditional methods is the main issue

Backend? Summary?

But what I'm saying is you can run regular XMPP on port 443 too, not just https, then you'll be able to federate with the whole public network (just add srv records so they know what port to use)

reload: SRV settings in your DNS are respected by most clients so they'll connect to 443 or whatever you put there

Clients will use SRV records as well

> Multiplexing means that the connection to that one single port is forwarded to xmpp or http or whatever, so it appear you only have 443 but...several services live behind it Perfect!

> Backend? Summary? Ejabberd, prosody or open fire? What will work best for this?

And a client for connection via hidden service Built in tor proxy

😊 i say Prosŏdy, Licaon_Kter gonna say Ejabberd, i don't know what that moparisthebest guy is gonna say

reload: > Ejabberd, prosody or open fire? What will work best for this? All work I use ejabberd, others use prosody Read about Snikket too

reload: this is an example of how I host multiple services behind port 443, I use sslh myself https://wiki.xmpp.org/web/Tech_pages/XEP-0368, any XMPP server should work fine for that, I use prosody

prosody is the only one that can easily do s2s to other onions afaik

reload: > And a client for connection via hidden service > Built in tor proxy Not included, no Dino Gajim Conversations All can use .onion and normal Not sure on iOS/mac

Sorry it is mostly that there is a lot of people doing a lot of things. The ideal tools for the ideal application

Sapotaceae: > prosody is the only one that can easily do s2s to other onions afaik mod_dark or mod_onion or something, yes

> reload: this is an example of how I host multiple services behind port 443, I use sslh myself https://wiki.xmpp.org/web/Tech_pages/XEP-0368, any XMPP server should work fine for that, I use prosody Amazing. Thanks

> The ideal tools for the ideal application Funny, you won't have this here, they're all ideal :))

Nice to hear :))

Thanks all. We will send a welcome as soon as it is setup :)