
Security News
November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.
webrtc-server-client-datachannel
Advanced tools
This library is a first attempt at making the RTCDataChannel a bit easier to implement in a server-client communication model.
npm i webrtc-server-client-datachannel --save
Server side with express
const { RTCServer } = require("webrtc-server-client-datachannel");
const { createServer } = require('http');
const { Server } = require('ws');
const express = require('express');
const app = express();
const server = createServer(app);
/**
* @type {RTCConfiguration}
*/
const pcConf = { required: {
video: false,
audio: false
},
iceServers: [{ urls: 'stun:stun.l.google.com:19302' }],
optional: [{ DtlsSrtpKeyAgreement: true }]
};
const dataChannelTCPLike = {
label: "tcp",
config: {
ordered: true,
maxRetransmits: 10,
binaryType: "blob"
}
};
const dataChannelUDPLike = {
label: "udp",
config: {
ordered: false,
maxRetransmits: 0,
binaryType: "blob"
}
};
server.listen(8080, () => {
const address = server.address();
console.log(`Server running at ${address.port}`);
});
new Server({ server }).on('connection', async ws => {
let pc = new RTCServer(ws, pcConf, [dataChannelTCPLike, dataChannelUDPLike]);
await pc.create();
pc.tcp.onmessage = (event) => {
console.log(`got 'tcp'. ${event.data}`);
};
pc.udp.onmessage = (event) => {
console.log(`got 'udp'. ${event.data}`);
};
});
Your client can then have code like this to accept and send some strings to the RTCDatachannels:
import { RTCClient } from "webrtc-server-client-datachannel";
/**
* @type {RTCConfiguration}
*/
const pcConf = {
required: {
video: false,
audio: false
},
iceServers: [{ urls: 'stun:stun.l.google.com:19302' }],
optional: [{ DtlsSrtpKeyAgreement: true }]
};
const dataChannelTCPLike = {label: "tcp"};
const dataChannelUDPLike = {label: "udp"};
async function main() {
try {
console.log("opening websocket");
const ws = new WebSocket('ws://' + "localhost" + ':8080');
await onOpen(ws);
let pc = new RTCClient(ws, pcConf,[dataChannelTCPLike, dataChannelUDPLike]);
await pc.create();
pc.tcp.send("AllReadyFromTCP");
pc.udp.send("AllReadyFromUDP");
pc.tcp.onmessage = (event)=>{
console.log("got 'tcp'.", event.data);
};
pc.udp.onmessage = (event)=>{
console.log("got 'udp'.", event.data);
};
setInterval(() => {
console.log("trying to send hello from tcp");
pc.tcp.send("Hello from client TCP");
console.log("trying to send hello from UDP");
pc.udp.send("Hello from client UDP");
}, 5000);
} catch (error) {
console.log(error);
}
}
async function onOpen(ws) {
return new Promise((resolve, reject) => {
ws.onopen = () => resolve();
ws.onclose = () => reject(new Error('WebSocket closed'));
});
}
main();
The RTCPeerConnection is not available in all browsers. RTCDataChannel even less! It is not supported in firefox.
If you want compatability, or use this functionality outside of chromium browsers, I would suggest packing the client into electron.
If (browser != chrome) {"redirect to bundled electron download page"}
It is also wise to add handlers for websocket close, and RTCServer.pc.onclose, RTCClient.pc.onclose.
FAQs
A class that handles RTCDataChannels from cradle to grave
We found that webrtc-server-client-datachannel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
November CVE publications fell 25% YoY even as 2025 totals rose, showing how a few major CNAs can swing “global” counts and skew perceived risk.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.