ApsaraVideo Live allows you to configure an IP address blacklist or whitelist to restrict requests that access resources on Alibaba Cloud points of presence (POPs). This helps you identify and filter users and improve the live streaming security. This topic describes how to configure an IP address blacklist or whitelist.
Background information
If you configure an IP address blacklist, IP addresses in the blacklist are not allowed to access the accelerated domain name.
If you configure an IP address whitelist, only IP addresses in the whitelist can access the accelerated domain name.
IP address blacklist and whitelist support IPv6 addresses. Letters in IPv6 addresses must be uppercase. Examples: 2001:DB8:0:23:8:800:200C:417A and 2001:0DB8:0000:0023:0008:0800:200C:417A. You cannot shorten an IPv6 address by using the two-colon (::) notation. For example, 2001:0DB8::0008:0800:200C:417A is invalid.
The IP address blacklist and whitelist support CIDR blocks. For example, in the 192.168.0.0/24 CIDR block, /24 indicates that the first 24 bits in the subnet mask are network bits. The remaining 8 bits are host bits. The number of host bits is calculated based on the following formula: 32 - 24 = 8. The subnet can accommodate up to 254 hosts. The number of hosts is calculated based on the following formula: 2^8 - 2 = 254. Therefore, 192.168.0.0/24 indicates IP addresses from 192.168.0.1 to 192.168.0.254.
Procedure
- Log on to the ApsaraVideo Live console.
In the left-side navigation pane, click Domain Names. The Domain Management page appears.
Find the streaming domain that you want to configure and click Domain Settings in the Actions column.
- Choose .
Click the IP Blacklist or Whitelist tab, and turn on IP Blacklist or Whitelist.
Specify the List Type parameter, enter IP addresses in the Rule text box, and then click OK.
Type Description Blacklist All requests that are sent from domain names in the blacklist are denied. Whitelist Only requests that are sent from domain names in the whitelist are allowed. Requests from other domain names are denied.