Overview
Since build 5.2.792 it is possible to allow Websocket client connections by certain domain or domains list with the following parameter in flashphoner.properties file
allow_domains=wcs.mydomain.com
There can be listed a number of domains and subdomains, they will be checked until the first match
allow_domains=mydomain.com,wcs.mydomain.com,myotherdomaincom,wcs2.myotherdomain.com
Mask ('*' character) is also supported, for example
allow_domains=*.mydomain.com,*.myotherdomain.com
The changes can be applied without restarting the server using CLI command
reload node-settings
Connection restriction from certain domains
Since build 5.2.971 it is possible to restrict Websocket connections from certain domains. For example, to forbid connections from one domain, but allow connections from all the other domains, set the restrictions list as follows
allow_domains=!*.evildomain.com,*
Using the setting on CDN node
When using this parameter on CDN node, the CDN IP address of this node should be set in this list. For example, if node CDN IP is
cdn_ip=192.168.111.101
then this address should be added to allowed domains list
allow_domains=*.mydomain.com,*.myotherdomain.com,192.168.111.101