We are searching for a specialist hand in our video streaming project and help us to correctly configure our Red5 rtmp server. More specifically, we would like some help to implement and improve our project security server.
For your understanding, the client application that uses this Red5 rtmp server is a web project divided in 2 modules:
Modulo 1: developed in Flex + Java
Modulo 2: developed in .Net
The Module 1 is a video streaming client application developed in Flex and Java (Blaze DS), that records lots of FLV video files and store those files them in a specific folder in our windows server. This application does the streams recording using Red5 as the rtmp server.
Modulo 2 is the playback application, which allows our clients to watch online the recorded videos. As per right now, the .NET application has a video player embedded (SPARK video player) that reads the recorded file from the folder over a http request (e.g. http://rtmp-server/streams/gateway/folder-to-flv-files/[login to view URL])
What we would like the scope of this small project to be is to configure our Red5 rtmp server to:
1 - Protect our RTMP server: allow recordings thru our RTMP server only if requests come from our domain and subdomains (in this case, our flex client application Module 1, which has a specify URL with a different url parameter for each video that should be recorded).
2 - Protect our streams: currently the video files are unprotected and they can be accessed over a simple http request. We would like to change this, and only allow HTTP requests that come from our domain (and subdomains) to be able to access the FLV files over http request (in this case, from HTTP request that comes from our Module 2 application, that has another specific URL);
3 - Implement HTTPS in our application for video stream recording and playback.
4 - This configuration has to be documented step by step, and this documentation has to be made available for us.
The hole application is in one Windows 2008 R2 server. The version of Red5 rtmp server that we installed is the 1.0, as we compiled a build from Red5 source code release number 4299, available on svn (we can send you this red5 compiled source in case you need).
Thank you