AWS cloudfront with flashphoner

[KaranBhansali91]

Hi,

After attaching aws cloudfront to flashphoner, we get error message net::ERR_CERT_COMMON_NAME_INVALID. Please also let us know flashphoner will work on AWS cloudfront or not ?

We have implemented HLS using pull rest api
/rest-api/pull/pull from another flashphoner server.

Regards,
Karan Bhansali

 

[Max]

Hello

How do you test CloudFront? How CloudFront is configured?
Could you please provide some screenshots where do you see this error net::ERR_CERT_COMMON_NAME_INVALID

As you can see from Architecture description

Architecture - Web Call Server 5.2 - EN - Flashphoner Documentation

docs.flashphoner.com

WCS server is listening ports 8082 (http) and 8445 (https) for HLS traffic
Therefore if you are using CloudFront, make sure that your HLS player sends HTTPS requests to CloudFront edge https://yourdomain.com:443
and CloudFront is configured with redirect requests to WCS as a CloudFront Custom Origin.

[ Player ] > [ CloudFront Edge https://yourdomain.com:443 ] > [ CloudFront Origin WCS http://wcs-host:8082 or http://wcs-host:8445 ]

Therefore if you see SSL error on the first hop [ Player ] > [ CloudFront Edge https://yourdomain.com:443 ] then it seems your CloudFront Edge is not configured properly and you have to setup SSL certificates for your domain yourdomain.com and your CloudFront endpoint.

Use HTTPS with CloudFront - Amazon CloudFront

Learn how to require HTTPS connections with CloudFront.

docs.aws.amazon.com

Please also let us know flashphoner will work on AWS cloudfront or not ?

It should work but we did not test it.
If you describe your case in detail, we will be able to schedule CloudFront - WCS internal tests.

 

[KaranBhansali91]

We have configured Nginx for port proxy pass http://wcs-host:8445 to 443(https) then attached wcs machine with ALB -> ALB attached with CloudFront --> Cloud Distribution domain name attached with Route53 Domain.

 

[Max]

We have configured Nginx for port proxy pass http://wcs-host:8445 to 443(https)

In this case, please make sure that:
1. You're using HTTPS to connect to the port 8445 https://wcs-host:8445.
2. You're applied an SSL certificate to WCS
Another option is to proxy HTTPS port 443 via nginx to HTTP port 8082 http://wcs-host:8082. In this case you don't need to import certificate to WCS directly.