Reverse Proxying Acestream

[PrivatePasta]

I'm running the Acestream proxy on a server and would feel much better if I could reverse proxy the streams. Considering anyone with the ip and port can start a stream, I'd really like to secure this

I'm currently using SWAG from LSio as my reverse proxy, does anyone have a working nginx config to proxy acestream behind domain.tld/subfolder ?

Even a simple http login would be good. And I could hardcode the username and password into my playlists so it doesn't fail

[iercan]

I haven't used a reverse proxy, but I resolved this issue with a VPN. I set up an OpenVPN server on the same machine, and once connected, you can access the Acestream engine via the intranet (e.g., 10.8.0.1). This eliminates the need to enable remote access.

[PrivatePasta]

Not sure if this would fix my issue. It's not that I don't want to enable remote access. I have a lot of services running on this server and I access all of them through remote access. But I can secure them with SWAG and Authelia as well as choose to not expose their respective ports

But with Acestream, without a working reverse proxy config, I have to expose the port in order to access it

[bozdemir14]

I use a website on my server to watch acestream streams. I reverse proxy acestream server through a node server. I'll put my code below, maybe it will help.

https://gist.github.com/bozdemir14/de9657396c9dfd7211bc1e314bd1e666

[peretm]

this from nginx is working for me:

`
location ~ ^/(ace|content) {

        proxy_pass http://ace:6878;

        proxy_redirect http://127.0.0.1:6878 https://my_server;

        proxy_set_header Host '127.0.0.1';

    }`

[ANBAL534]

I found the issue. The problem is that the ace engine is appending the port on the redirection, the port that is set in the engine, so proxying from port 80/443 doesn't work if the engine is set to use 6878.

You can set the engine to use port 80 or 443. With 443 will try to use by default SSL, so it will break if the SSL termination is done at the proxy level.

But it will work without SSL termination if the binding port for the engine http server is set to port 80.