Skip to content

v3_CN_Security

winlin edited this page Jan 6, 2022 · 7 revisions

HOME > CN > Security

Security

Note: 如果觉得Github的Wiki访问太慢,可以访问 Gitee 镜像。

SRS提供了禁用或允许客户端的简单安全策略。

Config

Vhost中安全策略的配置:

vhost your_vhost { # security for host to allow or deny clients. # @see https://github.com/ossrs/srs/issues/211 security { # whether enable the security for vhost. # default: off enabled on; # the security list, each item format as: # allow|deny publish|play all|<ip> # for example: # allow publish all; # deny publish all; # allow publish 127.0.0.1; # deny publish 127.0.0.1; # allow play all; # deny play all; # allow play 127.0.0.1; # deny play 127.0.0.1; # SRS apply the following simple strategies one by one: # 1. allow all if security disabled. # 2. default to deny all when security enabled. # 3. allow if matches allow strategy. # 4. deny if matches deny strategy. allow play all; allow publish all; } } 

SRS应用安全策略的方式是:

  • 若securty没有开启,则允许所有。
  • 若security开启了,默认禁止所有。
  • 允许客户端,若找到了匹配的允许策略。
  • 禁用客户端,若找到了匹配的禁用策略。

参考配置文件conf/security.deny.publish.conf.

Kickoff Client

可以踢掉连接的用户,参考WIKI

Bug

关于这个功能的Bug,参考:#211

Reload

当Reload改变security配置后,只影响新连接的客户端,已经连接的客户端不受影响。

Winlin 2015.1

Welcome to SRS wiki!

SRS 5.0 wiki

Please select your language:

SRS 4.0 wiki

Please select your language:

SRS 3.0 wiki

Please select your language:

SRS 2.0 wiki

Please select your language:

SRS 1.0 wiki

Please select your language:

Clone this wiki locally