e></strong><span>, not the web app host. If you have a wildcard cert with the app host and turn server on the same machine it&#39;ll be fine.</span></p></li></ul><hr /><h2 id='dns--firewall-checklist-quick'><span>DNS &amp; firewall checklist (quick)</span></h2><ul><li><p><code>turn.example.com</code><span> → A/AAAA record to your TURN server </span><strong><span>(DNS only / grey cloud if Cloudflare)</span></strong></p></li><li><p><span>Open these on the TURN server:</span></p><ul><li><p><span>UDP </span><