Wowza Community

Protecting a stream with AllowDomains

Hi,

I tried to protect a stream with in Application.xml. This works for RTMP streams, but it won’t work the HLS / HTML5 streams. How can I protect a HLS stream?

Regards, John

Hi,

Please see our Media security overview for your security options.

Jason

The only proper free, “built-in” way to protect HLS streams from Wowza is AES encryption:

https://www.wowza.com/docs/how-to-secure-apple-http-live-streaming-aes-128-external-method

This does require you to set up a key server and add your own logic to verify the request

Simplest way, when on your website someone opens the video player page, generate a random token and save it to a database table, along with the IP address of the user. Pass this token in the stream URL [http://myserver.com/live/stream/playlist.m3u8?token=xxxxxx] . Then, have your authentication script compare the token to the database, if the IP of the auth request matches, allow playback, otherwise reject it.

You can make things fancier from there, the script sample on the page linked above are good starting point. But do keep in mind this system may not be compatible with some players (Android 4.0’s video system for instance, you’ll need 4.1 and above)

Otherwise, there are third-party solutions which make this a bit easier, such as wmspanel.com which I highly recommend.

Hope this helps!

Thanks a lot! It does help a lot!