media server logo
Product user guide

Streams and connection access

Create named publisher or receiver access on an existing SRT or RTMP server without opening the entire server to unknown connections.

Find it in CallabaQuick start → Streams
What this module does

A Stream is an access object: it binds a protocol server, connection role and identity rule. Create it before handing URLs or stream keys to encoders and receivers.

Before you start

  • A running SRT or RTMP server.

  • The intended role: publisher sends media; receiver consumes it.

  • A planned stream ID, stream key or allowed host that does not collide with another connection.

Settings explained

These are the controls an operator needs to understand. Internal field names and implementation events are intentionally omitted.

Identity

Name the connection and choose its server.

Name

Operator-facing name for the encoder, feed or receiver.

Active

Allow the connection object to be used after it is saved.

Protocol

Choose SRT or RTMP to match the owning server and client.

Streaming server

Select the existing server that accepts this connection.

Access

Grant only the role and identity the client needs.

Role

Publisher sends a feed; receiver reads a feed.

Stream ID or stream key

Stable media identifier used by the client connection.

Allowed host

Optional IP-based restriction for the connecting client.

Safe first workflow

  1. 01

    Open Streams and choose the same protocol as the target server.

  2. 02

    Select the running server and choose Publisher or Receiver.

  3. 03

    Set the stream identity or permitted host required by the server access policy.

  4. 04

    Save and start the Stream.

  5. 05

    Use the generated connection details in one real encoder or receiver and verify media.

Workflow examples

Use this when

Give a remote encoder publisher-only access

An external operator should send one feed but must not receive other feeds.

EncoderPublisher
Stream accessOne identity
SRT or RTMP serverIngest
DownstreamAuthorized workflow
Animated workflow diagram: Give a remote encoder publisher-only access

How to build it

  1. 1

    Create a Publisher Stream on the selected server.

  2. 2

    Assign a unique stream ID/key or restrict the known encoder host.

  3. 3

    Send only that connection detail to the encoder operator.

  4. 4

    Start the encoder and verify that a different identity is rejected.

Use this when

Create a receiver for a monitored output

A decoder or confidence monitor should read one named stream.

Live serverAvailable feed
Receiver accessRead role
DecoderConnect
MonitorPlayback
Animated workflow diagram: Create a receiver for a monitored output

How to build it

  1. 1

    Create a Receiver Stream on the server that owns the live feed.

  2. 2

    Use the expected stream identity and optional receiver host restriction.

  3. 3

    Connect the decoder with the generated receiver details.

  4. 4

    Confirm playback and server-side connection state.

Verify the result

  • The intended publisher or receiver connects with its assigned role.
  • An incorrect stream identity is rejected when explicit access is enabled.
  • The owning server and live statistics show the expected connection.

Troubleshooting

A valid client is rejected

Check
  • Compare protocol and selected server.
  • Check role, stream identity and host restriction exactly.
Then do this

Correct the single mismatched access value; do not enable allow-all as a diagnostic shortcut.