Figure out what's up with OME's API port always listening on 0.0.0.0 #10

Closed
opened 2025-02-23 07:17:08 +00:00 by trysdyn · 1 comment
Owner

For a couple versions now, I've been unable to configure the OME API to listen on localhost only. I've put in the README's security section you need to firewall the port. It's a nasty scary anti-pattern I'd like to remove.

Test OME 0.18.0 and try to find a configuration that doesn't do this and reflect it in example docs.

For a couple versions now, I've been unable to configure the OME API to listen on localhost only. I've put in the README's security section you need to firewall the port. It's a nasty scary anti-pattern I'd like to remove. Test OME 0.18.0 and try to find a configuration that doesn't do this and reflect it in example docs.
Author
Owner

Well that's easy. The API handler takes the same config as the global server bind. So if you're listening for RTMP/WebRTC on all interfaces (which I have to to receive RTMP traffic), your API port is listening there too.

I don't like that. The API port has auth at least, but it has no scopes or anything.

Well that's easy. The API handler takes the same config as the global server bind. So if you're listening for RTMP/WebRTC on all interfaces (which I have to to receive RTMP traffic), your API port is listening there too. I don't like that. The API port has auth at least, but it has no scopes or anything.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: trysdyn/ovenemprex#10
No description provided.