Nm

Node-Media-Server Live Streaming - Secured , cloudimg Support

AWS Streaming & Messaging

live media streaming, secured on first boot, backed by cloudimg support

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Node-Media-Server is a lightweight open source live media streaming server. It ingests an RTMP feed from any publisher and republishes it in real time as HTTP-FLV, WebSocket-FLV and HLS for low latency playback in browsers and native players, with a JSON admin API for live stream statistics. This cloudimg image delivers it fully installed and secured so a working ingest and playback endpoint is operational within minutes of launch.

Why the cloudimg image

Upstream ships with no authentication at all. This cloudimg image enables admin API, publish and play authentication and generates two independent per-instance secrets on first boot: an admin API credential and a stream signing secret every publish and playback URL must be signed with. No shared or default credentials exist and nothing is baked in, the server refuses to start in the insecure open mode, and every deployment includes bundled ffmpeg, signing and self test helper tools plus 24/7 cloudimg support.

Common uses

  • Stand up a low latency RTMP ingest and HTTP-FLV or HLS playback endpoint for a live event or broadcast
  • Give an OBS or ffmpeg publisher a secured, signed streaming target without hand rolling a media server
  • Embed a self hosted live video pipeline behind your own application, CDN or reverse proxy

Key features

  • Working live streaming endpoint on first boot. Ingests RTMP from OBS, ffmpeg, hardware encoders or mobile apps and republishes as HTTP-FLV, WebSocket-FLV and HLS for low latency browser and native playback, with a JSON admin API for live stream statistics. Runs as an unprivileged system user under systemd, no manual package install or Node.js version wrangling required.
  • Secure by default where upstream is not. Upstream ships with no authentication at all; this image enables admin API, publish and play authentication and generates two independent per-instance secrets on first boot - an admin API credential and a stream signing secret every publish and playback URL must be signed with. No shared or default credentials exist, nothing is baked in, and the server refuses to start in the insecure open mode.
  • Bundled ffmpeg plus signing and self test tools, and 24/7 cloudimg support. One helper generates a signed stream URL, another runs an end to end self test that publishes a test pattern, pulls it back over signed HTTP-FLV and proves the auth rules. cloudimg engineers assist via email and live chat with sizing, publisher and player integration, URL signing, TLS termination and upgrades.

Description

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## A Working Live Streaming Endpoint In Minutes

Node-Media-Server is a lightweight, open source live media streaming server written in Node.js. It ingests an RTMP feed from any publisher (OBS Studio, ffmpeg, a hardware encoder, a mobile app) and republishes it in real time as HTTP-FLV, WebSocket-FLV and HLS for low latency playback in browsers and native players, with a JSON admin API for live stream and session statistics. This image delivers it fully installed and secured, so a working ingest and playback endpoint is operational within minutes of launch, with no manual package installation, no Node.js version wrangling and no service configuration required.

## Secure By Default

Upstream Node-Media-Server ships with no authentication at all, which means anyone who can reach it could publish to or play from your server and read the admin API. This image does not:

  • Authentication is enabled for the admin API, for publishing and for playback
  • Every instance generates two independent secrets on first boot, written to a root only file: an admin API credential that protects the statistics API, and a stream signing secret that every publish and playback URL must be signed with
  • There are no shared or default credentials, and nothing is baked into the image, so no two deployments are ever the same
  • The server refuses to start in the insecure open mode, and runs as an unprivileged system user under systemd for automatic restarts and clean logging

## Helper Tools And Self Test

The image includes ffmpeg and two helper tools: one that generates a signed stream URL from your signing secret, and one that runs an end to end self test by publishing a short test pattern, pulling it back over signed HTTP-FLV, and confirming the admin API and the authentication rules all behave. RTMP ingest is on port 1935 and HTTP playback plus the admin API are on port 8000.

## Getting Started

1. Launch the AMI on an m5.large instance or larger

2. SSH into the instance and read the generated secrets from the root only credentials file

3. Generate a signed stream URL with the bundled helper, then publish an RTMP feed to it

4. Play the stream back over signed HTTP-FLV or HLS on port 8000

5. Query live statistics from the authenticated admin API

For a detailed walkthrough, see the user guide linked in the Additional Resources section.

## 24/7 cloudimg Support

Every deployment is backed by cloudimg engineers available around the clock via email and live chat, covering deployment and sizing guidance, publisher and player integration, URL signing and authentication, TLS termination, and version upgrades. This is the stable open source 2.x line, which is MIT licensed and freely redistributable.

Node-Media-Server is a trademark of its respective owner. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Related technologies

rtmp serverlive streaminghls streaminghttp-flvmedia servervideo streamingstreaming serverobs streaminglow latencynodejs streamingingest serverwebrtc alternative