Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




4741 posts

Uber Geek


#267968 20-Feb-2020 16:05
Send private message

My wish is to broadcast high quality livestreams of sports events, to anyone with an internet connection and an RTMP capable media player. 

 

My setup is to connect my camcorder to my laptop, and use OBS to capture/send the livestream over 4g/wifi to my home RTMP server, from where anyone can view the stream...ie,...

 

Camcorder/laptop -> {cloud} ->  home lan UBUNTU RTMP server  -> {cloud} ->-> video player client(s), eg, VLC

 

This actually works extraordinarily well - livestreams 1080P/50 with no dropped frames and minimal lag from anywhere to anywhere.

 

My concern is my home lan ubuntu RTMP server ... which is an intel PC, Ubuntu 18.04LTS, and NGINX with RTMP listener to relay the stream on port 1935. 

 

 

 

For this to work, I've forwarded port 1935 in my router to the ubuntu server --- it means this port exposes my ubuntu machine to the world -- is this a security risk that I should worry about? 

 

 


Create new topic
570 posts

Ultimate Geek


  #2424606 20-Feb-2020 16:51
Send private message

So generally yes, a direct exposure is not recommended. You’d want something in front usually that can handle the requests (your router would do this) that you can configure for a bit of security. Otherwise you machine itself will need to do this.

Eg. Are things that block bad requests, block spam connections or even a geoip filter to stop majority of spam from US/China/Russia

Someone can probably explain some better steps, but jist is you kinda have to have it open somehow to serve content.

'That VDSL Cat'
12453 posts

Uber Geek

Trusted
Spark
Subscriber

  #2424612 20-Feb-2020 17:20
Send private message

can you provide your ip so we can check it's secure? ;) /s





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 


 
 
 
 


BDFL - Memuneh
67791 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #2424613 20-Feb-2020 17:24
Send private message

Port forwarding is always a risk. You will be responsible for making sure the server software does not have security vulnerabilities and update it to new versions as needed. Ideally you would be behind a proxy that could determine DDoS, credential stuffing, geolocation, etc to make sure you keep some threats at large.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 




4741 posts

Uber Geek


  #2424618 20-Feb-2020 17:40
Send private message

freitasm:

 

Port forwarding is always a risk. You will be responsible for making sure the server software does not have security vulnerabilities and update it to new versions as needed. Ideally you would be behind a proxy that could determine DDoS, credential stuffing, geolocation, etc to make sure you keep some threats at large.

 

 

Think I get it... software is updated at least. 

 

The main thing I'm worried about whether someone can use an open port vulnerability to access data and run malicious programs on windows PC's on the same lan. 

 

This is only a one day event anyway, maybe I'll just open the port for when I need it. 




4741 posts

Uber Geek


  #2424620 20-Feb-2020 17:46
Send private message

SpartanVXL: So generally yes, a direct exposure is not recommended. You’d want something in front usually that can handle the requests (your router would do this) that you can configure for a bit of security. Otherwise you machine itself will need to do this.

Eg. Are things that block bad requests, block spam connections or even a geoip filter to stop majority of spam from US/China/Russia

Someone can probably explain some better steps, but jist is you kinda have to have it open somehow to serve content.

 

Thanks, this helps..... I should mention this is only a one-off event, I don't need a permanent solution.

 

I wonder if it is possible to block all incoming requests, except for port 1935 and the request originates from NZ . Fritzbox is pretty basic though . 

 

I could just use mixer, the lag wasn't too bad compared to other live streaming platforms . 


1704 posts

Uber Geek


  #2424621 20-Feb-2020 17:51
Send private message

surfisup1000:

 

freitasm:

 

Port forwarding is always a risk. You will be responsible for making sure the server software does not have security vulnerabilities and update it to new versions as needed. Ideally you would be behind a proxy that could determine DDoS, credential stuffing, geolocation, etc to make sure you keep some threats at large.

 

 

Think I get it... software is updated at least. 

 

The main thing I'm worried about whether someone can use an open port vulnerability to access data and run malicious programs on windows PC's on the same lan. 

 

This is only a one day event anyway, maybe I'll just open the port for when I need it. 

 



General answer is, it depends.  On the port, on the software, on the O/S, on the attackers, etc.  I have hacked into systems through open ports and managed to gain SSH access on dummy systems when applying for infosec jobs (part of the technical testing).  So it's possible. 

If your network supports I would put the system running the software on a separate VLAN, at least that way you separate things.


264 posts

Ultimate Geek


  #2424711 20-Feb-2020 22:17
Send private message

Hi there
Plus you not setup vpn on router and then tunnel home? Not sure if impact on stream though.

 
 
 
 


4567 posts

Uber Geek

Trusted

  #2464276 17-Apr-2020 15:53
Send private message

Run OBS and stick it out to Youtube/Twitch/etc...

 

No port forwarding, very easy to configure, high quality (assuming the orignal content is good quality).

 

On the other hand, for a one day event?.... I probably wouldn't stress too much about just port forwarding if that's easier. But for viewers, it's certainly nicer to just hit a YouTube link than it is to load a stream in to VLC.




4741 posts

Uber Geek


  #2464285 17-Apr-2020 16:06
Send private message

chevrolux:

 

Run OBS and stick it out to Youtube/Twitch/etc...

 

No port forwarding, very easy to configure, high quality (assuming the orignal content is good quality).

 

On the other hand, for a one day event?.... I probably wouldn't stress too much about just port forwarding if that's easier. But for viewers, it's certainly nicer to just hit a YouTube link than it is to load a stream in to VLC.

 

 

Youtube/facebook/twitch/periscope and most of the others had a 5-10 second delay on live streaming. Also, some of them had restrictions on the bandwidth. 

 

That was unacceptable to me for real-time 2 way communication. 

 

Microsoft had a pretty good live streaming service, the delay was maybe 2 seconds. 

 

But, using my RTMP solution, it is maybe a 300ms delay for 1080p video. 

 

Regardless, covid-19 put an end to the event. But, there will be another day :)

 

 

 

 

 

 

 

 


Create new topic




News »

Freeview On Demand app launches on Sony Android TVs
Posted 6-Aug-2020 13:35


UFB hits more than one million connections
Posted 6-Aug-2020 09:42


D-Link A/NZ extends COVR Wi-Fi EasyMesh System series with new three-pack
Posted 4-Aug-2020 15:01


New Zealand software Rfider tracks coffee from Colombia all the way to New Zealand businesses
Posted 3-Aug-2020 10:35


Logitech G launches Pro X Wireless gaming headset
Posted 3-Aug-2020 10:21


Sony Alpha 7S III provides supreme imaging performance
Posted 3-Aug-2020 10:11


Sony introduces first CFexpress Type A memory card
Posted 3-Aug-2020 10:05


Marsello acquires Goody consolidating online and in-store marketing position
Posted 30-Jul-2020 16:26


Fonterra first major customer for Microsoft's New Zealand datacentre
Posted 30-Jul-2020 08:07


Everything we learnt at the IBM Cloud Forum 2020
Posted 29-Jul-2020 14:45


Dropbox launches native HelloSign workflow and data residency in Australia
Posted 29-Jul-2020 12:48


Spark launches 5G in Palmerston North
Posted 29-Jul-2020 09:50


Lenovo brings speed and smarter features to new 5G mobile gaming phone
Posted 28-Jul-2020 22:00


Withings raises $60 million to enable bridge between patients and healthcare
Posted 28-Jul-2020 21:51


QNAP integrates Catalyst Cloud Object Storage into Hybrid Backup solution
Posted 28-Jul-2020 21:40



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.