We’ve recently implemented some new security procedures for Flash live streaming. The intent is to reduce the risk of attacks against the ingest servers. Read on for the details of the new procedure.
When setting up new live events you are now required to provide a source address, a username/password, or both. You have to establish a username and password (of your choosing) when creating the stream, however, you can opt out of this once the stream has been created by double-clicking on the stream’s camera icon and then simply deleting the username and password field data. The source address field must be set, at least up to the first octet (first zero) and then the CIDR value [block to the right of the source address] has to match the set IP. You can find your public IP address by browsing to http://whatismyip.com/. Note that this site will give you the public facing IP address to whatever computer you are on, so be sure to open the page from your encoding computer. Again, you can edit your live event by double-clicking on the camera icon to your stream from the Live Events section of the Media Manager. If your first octet (first number in your IP address before the period) is under 128,
you may simply fill in that first number, leave the last three octets as .0.0.0, and then set your CIDR [box to the right of the source address] to 8. With the following source address and username and password optionally set to blank, you will be able to stream to the CDN ingest server:
Example:
Source Address: 77.0.0.0 8
Username:
Password:
This is the minimum security currently required to stream events. Please remember that the address above is only an example. The first octet of your encoder computer’s IP address will likely vary. If you decide to lock down your source address to your full IP, then it is likely that you will need to run a whois lookup or contact the internet provider to discover the CIDR on the IP address. Usually when you provide the full source address IP, the CIDR 32 will work.
To learn more about CIDR blocks, you can visit http://hubpages.com/hub/ip-tutorial-subnetting.
If you have any questions then feel free to contact us.