SSL encryption for streaming #2

New Issue

3wordchant · 2024-01-09T02:34:24Z

3wordchant commented

2024-01-09 02:34:24 +00:00

Currently, streaming has to be done unencrypted.

Icecast supports its own TLS encryption, which would be possible using traefik-cert-dumper, but annoying.

An alternative would be to get everything routed through Traefik; see #1

Currently, streaming has to be done unencrypted. Icecast supports its own TLS encryption, which would be possible using `traefik-cert-dumper`, but annoying. An alternative would be to get everything routed through Traefik; see #1

3wordchant added the

enhancement

help wanted

labels 2024-01-09 02:34:24 +00:00

3wordchant commented

2024-01-09 02:38:12 +00:00

It's Fine, Actually? See #1

3wordchant closed this issue

2024-01-09 02:38:12 +00:00

3wordchant commented

2024-04-01 22:47:59 +00:00

It's not fine :( Streaming was cutting out every ~10 seconds as reported here: https://community.traefik.io/t/icecast-services-behind-traefik/8679/7

Bypassing Traefik SSL seems to work OK though.

It's not fine :( Streaming was cutting out every ~10 seconds as reported here: https://community.traefik.io/t/icecast-services-behind-traefik/8679/7 Bypassing Traefik SSL seems to work OK though.

3wordchant reopened this issue

2024-04-01 22:47:59 +00:00

fauno commented

2024-10-01 16:07:11 +00:00

When I configured Nginx as a reverse proxy for Icecast I had to proxy it using HTTP/1.0 and disable chunking, otherwise it wouldn't behave as a stream on browsers. I don't remember if I got to reverse proxy the streamer, but I do remember it uses a non-standard HTTP verb, which reverse proxies don't recognize. Maybe it can be set as TCP reverse proxy instead of HTTP on Traefik?

location ~ \.(ogg|xsl)$ {
  proxy_pass http://localhost:8000;
  proxy_buffering off;
  proxy_http_version 1.0;

# http://stackoverflow.com/questions/17952258/http-request-to-icecast-and-response                                                      
  chunked_transfer_encoding off;
  keepalive_requests 0;
  expires off;
}

When I configured Nginx as a reverse proxy for Icecast I had to proxy it using HTTP/1.0 and disable chunking, otherwise it wouldn't behave as a stream on browsers. I don't remember if I got to reverse proxy the streamer, but I do remember it uses a non-standard HTTP verb, which reverse proxies don't recognize. Maybe it can be set as TCP reverse proxy instead of HTTP on Traefik? ```nginx location ~ \.(ogg|xsl)$ { proxy_pass http://localhost:8000; proxy_buffering off; proxy_http_version 1.0; # http://stackoverflow.com/questions/17952258/http-request-to-icecast-and-response chunked_transfer_encoding off; keepalive_requests 0; expires off; } ```

fauno commented

2024-10-01 16:11:15 +00:00

I skimmed through #1 and realized my advice may be outdated, but I can ask friends how they're doing :P

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/icecast#2