Skip to main content
K
karimushan
Participating Frequently
August 19, 2011
Question

Restrict incoming stream from Flash Media Live Encoder

  • August 19, 2011
  • 1 reply
  • 1133 views

Has there been any further discussion regarding restricting who can stream to FMSS (not FMIS or the development version).

I found this article, but I don't know if this was ever fully resolved:

http://forums.adobe.com/message/3300894

I don't want just anyone to connect to my server to stream live.  I want to restrict by IP address, authentication, or any other means.

Can you please share your ideas?

Thanks

Shan.

    This topic has been closed for replies.

    1 reply

    Nikhil_Kalyan
    Nikhil_Kalyan
    Participating Frequently
    August 19, 2011

    Hi,

    Few quick ideas that i can share :

    1. Authentication plugins are the best to control and decide the connection restrictions coming to FMS. Username/Pwd pairs can be made mandatory.

    2. FMS can detect User Agents. For example, it can detect connections from FMLE (with different versions) and Flash Players (with different versions) , and a choice can be made on the server side depending on this. An example snippet is below :

    // A request from Flash Media Encoder is not checked for authentication

    if( (p_client.agent.indexOf("FME")==-1) && (p_client.agent.indexOf("FMLE")==-1))

    {

    }
    3. Use SWF Verification (with user agents ) to allow connections only from specified flash player applications.
    4. use allowedHTMLdomains whitelist to allow connections from specific domains (a single IP would also do).
    5. do not expose the application to which publishing happens to the public. multi-publish to other applications to which clients can connect.
    Hope some of them are useful. Thank you !
    K
    karimushanAuthor
    Participating Frequently
    August 19, 2011

    Hi,

    Thanks for the reply.
    Does step 1 work for the streaming server v4 (not interactive server - I don't have that)?
    The allowedHTMLDomains idea, wouldn't that block clients coming from the world?
    Thanks.

    Nikhil_Kalyan
    Nikhil_Kalyan
    Participating Frequently
    August 19, 2011

    Streaming server does not have the support for auth plugins. You need the other flavors of FMS for doing that.

    allowedHTMLDomains should not be taken in isoloation. Depending on your scenario, and may be using multi point publishing, you can achieve restrictive environment.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices