Configuration
OvenMediaEngine has an XML configuration file. If you start OvenMediaEngine with
systemctl start ovenmediaengine, the config file is loaded from the following path.1
/usr/share/ovenmediaengine/conf/Server.xml
Copied!
If you run it directly from the command line, it loads the configuration file from:
1
/<OvenMediaEngine Binary Path>/conf/Server.xml
Copied!
If you run it in Docker container, the path to the configuration file is:
1
# For Origin mode
2
/opt/ovenmediaengine/bin/origin_conf/Server.xml
3
# For Edge mode
4
/opt/ovenmediaengine/bin/edge_conf/Server.xml
Copied!
Server
The
Server is the root element of the configuration file. The versionattribute indicates the version of the configuration file. OvenMediaEngine uses this version information to check if the config file is a compatible version.1
<?xml version="1.0" encoding="UTF-8"?>
2
<Server version="8">
3
<Name>OvenMediaEngine</Name>
4
<IP>*</IP>
5
<PrivacyProtection>false</PrivacyProtection>
6
<StunServer>stun.l.google.com:19302</StunServer>
7
<Bind>...</Bind>
8
<VirtualHosts>...</VirtualHosts>
9
</Server>
Copied!
IP
1
<IP>*</IP>
Copied!
The
IP address is OvenMediaEngine will bind to. If you set *, all IP addresses of the system are used. If you enter a specific IP, the Host uses that IP only.PrivacyProtection
PrivacyProtection is an option to comply with GDPR, PIPEDA, CCPA, LGPD, etc. by deleting the client's personal information (IP, Port) from all records. When this option is turned on, the client's IP and Port are converted to
xxx.xxx.xxx.xxx:xxx in all logs and REST APIs.StunServer
OvenMediaEngine needs to know its public IP in order to connect to the player through WebRTC. The server must inform the player of the IceCandidates and TURN server addresses when signaling, and this information must be the IP the player can connect to. However, in environments such as Docker or AWS, public IP cannot be obtained through a local interface, so a method of obtaining public IP using stun server is provided (available from version 0.11.1).
If OvenMediaEngine obtains the public IP through communication with the set stun server, you can set the public IP by using * or ${PublicIP} in IceCandidate and TcpRelay.
1
<StunServer>stun.l.google.com:19302</StunServer>
Copied!
Bind
The
Bind is the configuration for the server port that will be used. Bind consists of Providers and Publishers. The Providers are the server for stream input, and the Publishers are the server for streaming.1
<Bind>
2
<Providers>
3
<RTMP>
4
<Port>1935</Port>
5
</RTMP>
6
<SRT>
7
<Port>9999</Port>
8
</SRT>
9
<MPEGTS>
10
<Port>4000-4003,4004,4005/udp</Port>
11
</MPEGTS>
12
<WebRTC>
13
<Signalling>
14
<Port>3333</Port>
15
</Signalling>
16
<IceCandidates>
17
<TcpRelay>*:3478</TcpRelay>
18
<IceCandidate>*:10000-10005/udp</IceCandidate>
19
</IceCandidates>
20
</WebRTC>
21
</Providers>
22
​
23
<Publishers>
24
<OVT>
25
<Port>9000</Port>
26
</OVT>
27
<HLS>
28
<Port>80</Port>
29
</HLS>
30
<DASH>
31
<Port>80</Port>
32
</DASH>
33
<WebRTC>
34
<Signalling>
35
<Port>3333</Port>
36
</Signalling>
37
<IceCandidates>
38
<TcpRelay>*:3478</TcpRelay>
39
<IceCandidate>*:10000-10005/udp</IceCandidate>
40
</IceCandidates>
41
</WebRTC>
42
</Publishers>
43
</Bind>
Copied!
The meaning of each element is shown in the following table:
Element
Description
RTMP
RTMP port for incoming RTMP stream.
SRT
SRT port for incoming SRT stream
MPEG-TS
MPEGTS ports for incoming MPEGTS/UDP stream.
WebRTC
Port for WebRTC. If you want more information on the WebRTC port, see the WebRTC Ingest and WebRTC Streaming chapters.
OVT
OVT port for an origin server.
OVT is a protocol defined by OvenMediaEngine for Origin-Edge communication. For more information about Origin-Edge, see the Origin-Edge Clustering chapter.
HLS
HTTP(s) port for HLS streaming.
DASH
HTTP(s) port for MPEG-DASH streaming including Low-Latency MPEG-DASH.
HLS and DASH can be set to the same port, but all other protocols have to use different ports. The ability for all protocols to use the same port will be updated in the future.
Virtual Host
VirtualHosts are a way to run more than one streaming server on a single machine. OvenMediaEngine supports IP-based virtual host and Domain-based virtual host. "IP-based" means that you can separate streaming servers into multiples by setting different IP addresses, and "Domain-based" means that even if the streaming servers use the same IP address, you can split the streaming servers into multiples by setting different domain names.VirtualHostsconsist of Name, Host, Origins, SignedPolicy, and Applications.1
<?xml version="1.0" encoding="UTF-8"?>
2
<Server version="8">
3
<Name>OvenMediaEngine</Name>
4
<VirtualHosts>
5
<VirtualHost>
6
<Name>default</Name>
7
<Host>
8
...
9
</Host>
10
​
11
<Origins>
12
...
13
</Origins>
14
​
15
<SignedPolicy>
16
...
17
</SignedPolicy>
18
​
19
<Applications>
20
...
21
</Applications>
22
</Host>
23
</Hosts>
24
</Server>
Copied!
Host
The Domain has
Names and TLS. Names can be either a domain address or an IP address. Setting * means it allows all domains and IP addresses.1
<Host>
2
<Names>
3
<!-- Domain names
4
<Name>stream1.airensoft.com</Name>
5
<Name>stream2.airensoft.com</Name>
6
<Name>*.sub.airensoft.com</Name>
7
-->
8
<Name>*</Name>
9
</Names>
10
</Host>
Copied!
SignedPolicy
SignedPolicy is a module that limits the user's privileges and time. For example, operators can distribute RTMP URLs that can be accessed for 60 seconds to authorized users, and limit RTMP transmission to 1 hour. The provided URL will be destroyed after 60 seconds, and transmission will automatically stop after 1 hour. Users who are provided with a SingedPolicy URL cannot access resources other than the provided URL. This is because the SignedPolicy URL is authenticated. See the SignedPolicy chapter for more information.
Origins
Origins (also we called OriginMap) are a feature to pull streams from external servers. It now supports OVT and RTSP for the pulling protocols. OVT is a protocol defined by OvenMediaEngine for Origin-Edge communication. It allows OvenMediaEngine to relay a stream from other OvenMediaEngines that have OVP Publisher turned on. Using RTSP, OvenMediaEngine pulls a stream from an RTSP server and creates a stream. RTSP stream from external servers can stream by WebRTC, HLS, and MPEG-DASH.
The Origin has
Location and Pass elements. Location is a URI pattern for incoming requests. If the incoming URL request matches Location, OvenMediaEngine pulls the stream according to a Pass element. In the Pass element, you can set the origin stream's protocol and URLs.To run the Edge server, Origin creates application and stream if there isn't those when user request. For more learn about Origin-Edge, see the Live Source chapter.
1
<Origins>
2
<Origin>
3
<Location>/app/stream</Location>
4
<Pass>
5
<Scheme>ovt</Scheme>
6
<Urls><Url>origin.com:9000/app/stream_720p</Url></Urls>
7
</Pass>
8
</Origin>
9
<Origin>
10
<Location>/app/</Location>
11
<Pass>
12
<Scheme>ovt</Scheme>
13
<Urls><Url>origin.com:9000/app/</Url></Urls>
14
</Pass>
15
</Origin>
16
<Origin>
17
<Location>/rtsp/stream</Location>
18
<Pass>
19
<Scheme>rtsp</Scheme>
20
<Urls><Url>rtsp-server.com:554/</Url></Urls>
21
</Pass>
22
</Origin>
23
<Origin>
24
<Location>/</Location>
25
<Pass>
26
<Scheme>ovt</Scheme>
27
<Urls><Url>origin2.com:9000/</Url></Urls>
28
</Pass>
29
</Origin>
30
</Origins>
Copied!
Application
<Application> consists of various elements that can define the operation of the stream, including Stream input, Encoding, and Stream output. In other words, you can create as many <Application> as you like and build various streaming environments.1
<VirtualHost>
2
...
3
<Applications>
4
<Application>
5
...
6
</Application>
7
<Application>
8
...
9
</Application>
10
</Applications>
11
</VirtualHost>
Copied!
<Application> needs to set <Name> and <Type> as follows:1
<Application>
2
<Name>app</Name>
3
<Type>live</Type>
4
<OutputProfiles> ... </OutputProfiles>
5
<Providers> ... </Providers>
6
<Publishers> ... </Publishers>
7
</Application>
Copied!
<Name>is used to configure the Streaming URL.<Type>defines the operation of<Application>. Currently, there is only alivetype.
OutputProfiles
<OutputProfile> is a configuration that creates an output stream. Output stream name can be set with <OutputStreamName>, and transcoding properties can be set through <Encodes>. If you want to stream one input to multiple output streams, you can set multiple <OutputProfile>.1
<Application>
2
<OutputProfiles>
3
<OutputProfile>
4
<Name>bypass_stream</Name>
5
<OutputStreamName>${OriginStreamName}</OutputStreamName>
6
<Encodes>
7
<Audio>
8
<Bypass>true</Bypass>
9
</Audio>
10
<Video>
11
<Bypass>true</Bypass>
12
</Video>
13
<Audio>
14
<Codec>opus</Codec>
15
<Bitrate>128000</Bitrate>
16
<Samplerate>48000</Samplerate>
17
<Channel>2</Channel>
18
</Audio>
19
<!--
20
<Video>
21
<Codec>vp8</Codec>
22
<Bitrate>1024000</Bitrate>
23
<Framerate>30</Framerate>
24
<Width>1280</Width>
25
<Height>720</Height>
26
</Video>
27
-->
28
</Encodes>
29
</OutputProfile>
30
</OutputProfiles>
31
</Application>
Copied!
Providers
Providers ingest streams that come from a media source.1
<Application>
2
<Providers>
3
<RTMP/>
4
<WebRTC/>
5
<SRT/>
6
<RTSPPull/>
7
<OVT/>
8
<MPEGTS>
9
<StreamMap>
10
...
11
</StreamMap>
12
</MPEGTS>
13
</Providers>
14
</Application>
Copied!
Publishers
You can configure the Output Stream operation in
<Publishers>. <ThreadCount> is the number of threads used by each component responsible for the <Publishers> protocol.You need many threads to transmit streams to a large number of users at the same time. So it's better to use a higher core CPU and set
<ThreadCount> equal to the number of CPU cores.1
<Application>
2
<Publishers>
3
<OVT />
4
<HLS />
5
<DASH />
6
<LLDASH />
7
<WebRTC />
8
</Publishers>
9
</Application>
Copied!
​OvenMediaEngine currently supports WebRTC, Low-Latency DASH, MEPG-DASH, and HLS. If you don't want to use any protocol then you can delete that protocol setting, the component for that protocol isn't initialized. As a result, you can save system resources by deleting the settings of unused protocol components.
If you want to learn more about WebRTC, visit the WebRTC Streaming chapter. And if you want to get more information on Low-Latency DASH, MPEG-DASH, and HLS, refer to the chapter on HLS & MPEG-DASH Streaming.
Configuration Example
Finally,
Server.xml is configured as follows:1
<?xml version="1.0" encoding="UTF-8"?>
2
​
3
<Server version="8">
4
<Name>OvenMediaEngine</Name>
5
<!-- Host type (origin/edge) -->
6
<Type>origin</Type>
7
<!-- Specify IP address to bind (* means all IPs) -->
8
<IP>*</IP>
9
​
10
<!--
11
To get the public IP address(mapped address of stun) of the local server.
12
This is useful when OME cannot obtain a public IP from an interface, such as AWS or docker environment.
13
If this is successful, you can use ${PublicIP} in your settings.
14
-->
15
<StunServer>stun.l.google.com:19302</StunServer>
16
​
17
<!-- Settings for the ports to bind -->
18
<Bind>
19
<!-- Enable this configuration if you want to use API Server -->
20
<!--
21
<Managers>
22
<API>
23
<Port>48081</Port>
24
<WorkerCount>1</WorkerCount>
25
</API>
26
</Managers>
27
-->
28
​
29
<Providers>
30
<RTMP>
31
<Port>1935</Port>
32
<!-- <WorkerCount>1</WorkerCount> -->
33
</RTMP>
34
<SRT>
35
<Port>9999</Port>
36
<!-- <WorkerCount>1</WorkerCount> -->
37
</SRT>
38
<MPEGTS>
39
<!--
40
Listen on port 4000~4005
41
This is just a demonstration to show that you can configure the port in several ways
42
-->
43
<Port>4000-4004,4005/udp</Port>
44
</MPEGTS>
45
<WebRTC>
46
<Signalling>
47
<Port>3333</Port>
48
<!-- If you want to use TLS, specify the TLS port -->
49
<!-- <TLSPort>3334</TLSPort> -->
50
<!-- <WorkerCount>4</WorkerCount> -->
51
</Signalling>
52
​
53
<IceCandidates>
54
<!--
55
If you want to stream WebRTC over TCP, specify IP:Port for TURN server.
56
This uses the TURN protocol, which delivers the stream from the built-in TURN server to the player's TURN client over TCP.
57
For detailed information, refer https://airensoft.gitbook.io/ovenmediaengine/v/0.11.1/streaming/webrtc-publishing#webrtc-over-tcp
58
-->
59
<TcpRelay>*:3478</TcpRelay>
60
<IceCandidate>*:10000-10005/udp</IceCandidate>
61
​
62
<!--
63
Sets the number of worker threads to use in TcpRelay
64
​
65
<TcpRelayWorkerCount>4</TcpRelayWorkerCount>
66
-->
67
</IceCandidates>
68
</WebRTC>
69
</Providers>
70
​
71
<Publishers>
72
<OVT>
73
<Port>9000</Port>
74
<!-- <WorkerCount>1</WorkerCount> -->
75
</OVT>
76
<HLS>
77
<Port>80</Port>
78
<!-- If you want to use TLS, specify the TLS port -->
79
<!-- <TLSPort>443</TLSPort> -->
80
<!-- <WorkerCount>4</WorkerCount> -->
81
</HLS>
82
<DASH>
83
<Port>80</Port>
84
<!-- If you want to use TLS, specify the TLS port -->
85
<!-- <TLSPort>443</TLSPort> -->
86
<!-- <WorkerCount>4</WorkerCount> -->
87
</DASH>
88
<Thumbnail>
89
<Port>80</Port>
90
<!-- If you want to use TLS, specify the TLS port -->
91
<!-- <TLSPort>443</TLSPort> -->
92
<!-- <WorkerCount>4</WorkerCount> -->
93
</Thumbnail>
94
<WebRTC>
95
<Signalling>
96
<Port>3333</Port>
97
<!-- If you want to use TLS, specify the TLS port -->
98
<!-- <TLSPort>3334</TLSPort> -->
99
<!-- <WorkerCount>4</WorkerCount> -->
100
</Signalling>
101
​
102
<IceCandidates>
103
<!--
104
If you want to stream WebRTC over TCP, specify IP:Port for TURN server.
105
This uses the TURN protocol, which delivers the stream from the built-in TURN server to the player's TURN client over TCP.
106
For detailed information, refer https://airensoft.gitbook.io/ovenmediaengine/v/0.11.1/streaming/webrtc-publishing#webrtc-over-tcp
107
-->
108
<TcpRelay>*:3478</TcpRelay>
109
<IceCandidate>*:10000-10005/udp</IceCandidate>
110
​
111
<!--
112
Sets the number of worker threads to use in TcpRelay
113
​
114
<TcpRelayWorkerCount>4</TcpRelayWorkerCount>
115
-->
116
</IceCandidates>
117
</WebRTC>
118
</Publishers>
119
</Bind>
120
​
121
<!-- P2P works only in WebRTC -->
122
<!--
123
<P2P>
124
<MaxClientPeersPerHostPeer>2</MaxClientPeersPerHostPeer>
125
</P2P>
126
-->
127
​
128
<!--
129
Enable this configuration if you want to use API Server
130
​
131
<AccessToken> is a token for authentication, and when you invoke the API, you must put "Basic base64encode(<AccessToken>)" in the "Authorization" header of HTTP request.
132
For example, if you set <AccessToken> to "ome-access-token", you must set "Basic b21lLWFjY2Vzcy10b2tlbg==" in the "Authorization" header.
133
-->
134
<!--
135
<Managers>
136
<Host>
137
<Names>
138
<Name>*</Name>
139
</Names>
140
<TLS>
141
<CertPath>path/to/file.crt</CertPath>
142
<KeyPath>path/to/file.key</KeyPath>
143
<ChainCertPath>path/to/file.crt</ChainCertPath>
144
</TLS>
145
</Host>
146
<API>
147
<AccessToken>ome-access-token</AccessToken>
148
</API>
149
</Managers>
150
-->
151
​
152
<VirtualHosts>
153
<!-- You can use wildcard like this to include multiple XMLs -->
154
<VirtualHost include="VHost*.xml" />
155
<VirtualHost>
156
<Name>default</Name>
157
​
158
<!-- Settings for multi ip/domain and TLS -->
159
<Host>
160
<Names>
161
<!-- Host names
162
<Name>stream1.airensoft.com</Name>
163
<Name>stream2.airensoft.com</Name>
164
<Name>*.sub.airensoft.com</Name>
165
<Name>192.168.0.1</Name>
166
-->
167
<Name>*</Name>
168
</Names>
169
<!--
170
<TLS>
171
<CertPath>path/to/file.crt</CertPath>
172
<KeyPath>path/to/file.key</KeyPath>
173
<ChainCertPath>path/to/file.crt</ChainCertPath>
174
</TLS>
175
-->
176
</Host>
177
​
178
<!-- Refer https://airensoft.gitbook.io/ovenmediaengine/signedpolicy
179
​
180
<SignedPolicy>
181
<PolicyQueryKeyName>policy</PolicyQueryKeyName>
182
<SignatureQueryKeyName>signature</SignatureQueryKeyName>
183
<SecretKey>aKq#1kj</SecretKey>
184
​
185
<Enables>
186
<Providers>rtmp</Providers>
187
<Publishers>webrtc,hls,dash,lldash</Publishers>
188
</Enables>
189
</SignedPolicy>
190
-->
191
​
192
<!--
193
<Origins>
194
​
195
<Origin>
196
<Location>/app/stream</Location>
197
<Pass>
198
<Scheme>ovt</Scheme>
199
<Urls><Url>origin.com:9000/app/stream_720p</Url></Urls>
200
</Pass>
201
</Origin>
202
<Origin>
203
<Location>/app/</Location>
204
<Pass>
205
<Scheme>ovt</Scheme>
206
<Urls><Url>origin.com:9000/app/</Url></Urls>
207
</Pass>
208
</Origin>
209
<Origin>
210
<Location>/edge/</Location>
211
<Pass>
212
<Scheme>ovt</Scheme>
213
<Urls><Url>origin.com:9000/app/</Url></Urls>
214
</Pass>
215
</Origin>
216
</Origins>
217
-->
218
<!-- Settings for applications -->
219
<Applications>
220
<Application>
221
<Name>app</Name>
222
<!-- Application type (live/vod) -->
223
<Type>live</Type>
224
<OutputProfiles>
225
<OutputProfile>
226
<Name>bypass_stream</Name>
227
<OutputStreamName>${OriginStreamName}</OutputStreamName>
228
<Encodes>
229
<Audio>
230
<Bypass>true</Bypass>
231
</Audio>
232
<Video>
233
<Bypass>true</Bypass>
234
</Video>
235
<Audio>
236
<Codec>opus</Codec>
237
<Bitrate>128000</Bitrate>
238
<Samplerate>48000</Samplerate>
239
<Channel>2</Channel>
240
</Audio>
241
<!--
242
<Video>
243
<Codec>vp8</Codec>
244
<Bitrate>1024000</Bitrate>
245
<Framerate>30</Framerate>
246
<Width>1280</Width>
247
<Height>720</Height>
248
</Video>
249
-->
250
</Encodes>
251
</OutputProfile>
252
​
253
<!-- For thumbnail -->
254
<!--
255
<OutputProfile>
256
<Name>default_stream</Name>
257
<OutputStreamName>${OriginStreamName}_preview</OutputStreamName>
258
<Encodes>
259
<Image>
260
<Codec>png</Codec>
261
<Framerate>1</Framerate>
262
<Width>1280</Width>
263
<Height>720</Height>
264
</Image>
265
</Encodes>
266
</OutputProfile>
267
-->
268
</OutputProfiles>
269
<Providers>
270
<OVT />
271
<WebRTC />
272
<RTMP />
273
<SRT />
274
<MPEGTS>
275
<StreamMap>
276
<!--
277
Set the stream name of the client connected to the port to "stream_${Port}"
278
For example, if a client connets to port 4000, OME creates a "stream_4000" stream
279
-->
280
<Stream>
281
<Name>stream_${Port}</Name>
282
<Port>4000,4001-4004</Port>
283
</Stream>
284
<Stream>
285
<Name>stream_4005</Name>
286
<Port>4005</Port>
287
</Stream>
288
</StreamMap>
289
</MPEGTS>
290
<RTSPPull />
291
<WebRTC>
292
<Timeout>30000</Timeout>
293
</WebRTC>
294
</Providers>
295
<Publishers>
296
<AppWorkerCount>1</AppWorkerCount>
297
<StreamWorkerCount>8</StreamWorkerCount>
298
<OVT />
299
<WebRTC>
300
<Timeout>30000</Timeout>
301
<Rtx>true</Rtx>
302
<Ulpfec>true</Ulpfec>
303
</WebRTC>
304
<HLS>
305
<SegmentDuration>5</SegmentDuration>
306
<SegmentCount>3</SegmentCount>
307
<CrossDomains>
308
<Url>*</Url>
309
</CrossDomains>
310
</HLS>
311
<DASH>
312
<SegmentDuration>5</SegmentDuration>
313
<SegmentCount>3</SegmentCount>
314
<CrossDomains>
315
<Url>*</Url>
316
</CrossDomains>
317
</DASH>
318
<LLDASH>
319
<SegmentDuration>5</SegmentDuration>
320
<CrossDomains>
321
<Url>*</Url>
322
</CrossDomains>
323
</LLDASH>
324
<!--
325
<Thumbnail>
326
<CrossDomains>
327
<Url>*</Url>
328
</CrossDomains>
329
</Thumbnail>
330
-->
331
</Publishers>
332
</Application>
333
</Applications>
334
</VirtualHost>
335
</VirtualHosts>
336
</Server>
Copied!
Last modified 3mo ago
Export as PDF
Copy link