Disable default _definst_ live with no credentials

[Kevin_McDermott]

Hi,

I apologize if the answer to this question is documented somewhere. I’ve searched but haven’t been able to find an answer:

How can I disable the default live “myStream” application/stream that doesn’t require any credentials to publish? I want to ensure that all streams being fed to the Wowza server require credentials.

Thanks.

[Richard_Lanham]

There is no default stream. As long as you have secured each application you are covered.

Richard

[Richard_Lanham]

Kevin,

Use the Wowza MediaSecurity Addon Package:

https://www.wowza.com/docs/media-security-overview

For live application, use ModuleRTMPAuthenticate to protect publishing. If you want to also protect content in a player you add the Property “secureTokenSharedSecret” to enable SecureToken when using ModuleRTMPAuthenticate.

In a vod application, you can do it the same way, or you can use ModuleSecureToken instead of ModuleRTMPAuthenticate.

If you are re-streaming, and have an application with StreamType “rtp-live” (for example, re-streaming from an IP camera), then use the StreamNameAlias packge to limit what streams can be re-streamed:

https://www.wowza.com/docs/how-to-get-the-streamnamealias-addon

Richard

[Kevin_McDermott]

Thanks Richard. But how exactly do I secure each application? I must be missing something. I copied the …/conf/live/Application.xml into the application that I created, but even though the stream name is named something else, I can always send a stream to “myStream” without credentials. And in the stream manager it displays “testapplication/definst” (in this case the application is named testapplication).

Kevin

[Kevin_McDermott]

Much appreciated! Thanks

Kevin