Geo-location and IP ranges restriction

Wmsauth_flow_geo_limit-250w Paywall-structure-250w

Go back to paywall features or check this feature for Nimble Streamer.


Many streaming media businesses are targeted to some geographical or network location. This may be a local streaming provider which want to concentrate on the relevant audience.

What can we do?

WMSPanel can set up the following behavior for Wowza Streaming Engine.

  • Define allow list and deny list for countries access.
  • Set up separate IP ranges to include in allow/deny list.
  • GeoIP database is updated automatically by downloading latest version from WMSPanel.

Connections control is made by panel agent installed on server side.

The following Wowza entities may be limited: entire server, virtual host, application, application instance, separate stream.

Set up control panel settings

To define restriction settings on server side, the agent must be notified about it. The set up is made via WMSAuth feature set.

Top-menu-half

WMSAuth group

In WMSAuth, every restriction may be applied to a group of servers. So the first thing to do is to create a group and assign one or more Wowza servers to it. Check these screenshots for details.
Groups-list-half
2_server_selection-half

WMSAuth rule

Within a group, there may be several rules, each working with its set of Wowza entities. Just click on "Add rule" to enter rule creation page. Check this screenshot to see how you can specify Wowza vHost, application, instance or stream regular expression.

5_wowza_entities-half

You can also see WMSAuth group description in this blog post.

Specify geo or IP

Now you can scroll to allow/deny lists and just add designated countries in there by clicking on nice Add buttons. Please notice that deny list have top priority over allow list of countries and ranges.

You may set up special IP ranges in allow/deny as well. Like as exception for either lists. For this, just click on "Add or manage custom IP range" and add CIDRs of ranges you need.
7_geo-half
8_range-half

Is that it?

Yes. Now the agent will be checking each incoming request IP for being in deny list for geo-location and IP ranges. If the IP belongs to denied conditions, the connection will be either denied, it takes just several milliseconds.

You may combine this functionality with hot-linking protection, limitation of connections and bandwidth as well as pay-per-view feature set.

What if WMSPanel is not accessible?

Location restriction works regardless of WMSPanel availability. If your server can't connect to WMSPanel for some reason, the restriction will still work perfectly. Once the rules are set up, the control panel is not used anymore.

Any other questions or problems?

Check the FAQ. Please also check company forum to see common questions and answers from other companies.

This product includes GeoLite data created by MaxMind(c), available from http://www.maxmind.com


Works perfectly for Nimble Streamer

The geo-location restriction is also available in Nimble Streamer.
Nimble Streamer is a light-weight freeware media server for RTMP, HLS and other protocols. You can use it as efficient edge and origin server for live and VOD streaming.
Read this article to see how to set up geo-block and IP limitations there.