Enable DME Stream Authorization Lockdown
Enable this setting to place all DMEs to a lockdown state where playback of Live or VOD HLS assets requires Rev authorization. Rev automatically provides authorization encoded into the playback URLs. Admins may put their entire systems into and out of this lockdown state as needed or required.
Note: You must have all if your deployed DMEs on Version 3.21 (or later) to use this functionality. DMEs on previous versions will not be used for content distribution. Best Practice is to update all your DMEs before attempting to use this feature. |
Before you enable this feature, complete the following steps:1. Make sure all DMEs are updated to version 3.21.x or later. DMEs that are on previous versions may corrupt the ability of the Stream Authorization feature.
2. For distribution, make sure all of your DMEs are “Pushing” streams from DME to DME when Stream Authorization is enabled.
As part of the DME Stream Authorization feature, DMEs will no longer serve RTMP, RTSP, or TS. Any DME that is actively “Pulling” an RTMP / RTSP / or TS from another DME will fail. DMEs may still continue to “Push” RTMP / RTSP / TS to other DMEs.
For example, DME-1 is pulling RTMP-Stream2 from DME-2. When Stream Authorization is enabled, that pull will fail. DME-2 will need to be reconfigured to “Push” RTMP-Stream2 to DME-1 in order to get the stream on DME-1.
3. Configure your Recording DMEs for Stream Authorization.
Rev currently supports two Recording DMEs. Streams that need to be recorded must be native on the Recording DME (they cannot be “Pulled”). Make sure all streams that need to be recorded are “Pushed” (from origin) to the Recording DMEs. Recording will fail if the stream is not provisioned to the recording DME.
4. If you are utilizing a DME for the Rev > System Settings > User Location feature, confirm that the DME URL is using https (per recommendations suggested at The DME User Location Service help topic).
5. Once you have completed all the preceding steps, you are ready to enable DME Stream Authorization.
To enable DME Stream Authorization Lockdown:1. Navigate to Admin > System Settings > Security.
2. Select the Enabled checkbox in the DME Stream Authorization Lockdown section. Note: If this section is not visible, contact Vbrick Customer Support to review availability.
3. When enabling (or disabling) this feature, Rev directs each DME to change its Stream Authorization state. There are several configuration items that are necessary for a DME to enter this state including enabling NTP services, forcing HTTPS content sharing, and validating the DME’s Security Cert. If these are not set correctly, the DME will not be used to distribute content which means that Rev will not point users to that DME for content playback. See: DME Stream Authorization Lockdown Management for details.
4. It may take several moments for the DMEs to report back a successful lockdown status. Status state can always be reviewed on the DME Management and DME Network Statistics page(s).
5. Test fully. Test DME configured distribution and make sure your streams are propagating through the system correctly with Pushes. Test that your Recordings are happening for all necessary streams.
Keep in mind:
●Only authorized viewers will be able to see a particular video asset once enabled
●Streams will be authorized on a per-user, public, or all users level
●Individual levels will receive individual tokens to thwart sharing
●This setting is disabled by default
Note: Once enabled, view the DME Management page for the status of individual DMEs and authentication settings. |
Caution: This setting is not recommended during events or high system usage. |