OPTICODEC-PC
STREAMING SERVERS
4-11
Firewall Considerations
DSS is a very secure, robust streaming server designed to be connected directly to
the Internet if required. It is not necessary or recommended to operate DSS from
behind a firewall or router using Network Address Translation (NAT). This makes
things much more complicated than they need to be. However, if DSS is located be-
hind a firewall or router and access from the Internet is required, specific ports need
to be opened in the firewall to allow Real Time Streaming Protocol (RTSP) requests
from users, encoded audio from the encoder and outbound streams to clients, and
DSS Remote Administration on the local network and the Internet.
FUNCTION
PORT
PROTOCOL
DIRECTION
Encoder – Opticodec-PC – RTSP - Default
554
TCP
In
Encoder – Opticodec-PC – HTTP - Default
8001
TCP
In
Player-Control – RTSP
554
TCP
In
Player-Media – RTSP/RTP/UDP
6970-6999
UDP
Out / In
Player-Media – RTSP/RTP/TCP Interleave
554
TCP
Out
Player-Media – HTTP Tunneling
80
TCP
Out
Player-Media – HTTP/ICY - Default
8000
TCP
Out
DSS Remote Admin – HTTP
1220
TCP
In
DSS Remote Admin – HTTPS
1240
TCP
In
Table 4-1: Firewall configuration for various protocols and servers
If the firewall or router is using NAT, it is necessary to configure DSS with the IP ad-
dress of the Internet side of the router or firewall for UDP streams to work properly.
Do this by editing the
alt_transport_src_ipaddr
option in the
stream-
ingserver.xml
file located in the Darwin Streaming Server root directory.
The default value is empty:
<PREF NAME="alt_transport_src_ipaddr" ></PREF>
Change it to contain the Internet IP address (for example):
<PREF NAME="alt_transport_src_ipaddr" >123.45.67.8</PREF>
DSS must be restarted in order for this to take effect.
If you do not have a static IP address, then DSS needs to be reconfigured every time
your IP address changes.
It is wise to have a static IP address when streaming.
