This guide explains how to maintain control over your streaming radio streams by enabling IP protection or geolocation, allowing you to decide, for example, whether a specific listener can listen to your radio station or not.

Introduction

• You can protect an MP3/AAC or HLS stream independently of each other (the same applies to protection using a token).
• Activating the restriction involves a change to the stream configuration, which may take a few minutes to replicate across the servers.

Protect an audio stream using GeoIP

To do this, simply go to the restriction settings and enable protection for the stream you want to secure:

1. Click here to access the management interface for your product in the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question:
   
3. Click:
   1. either on the radio station name:
      
   2. or on Restrictions in the left-hand menu to apply restrictions to the entire product:
      
4. When selecting a above, click on Restrictions in the left-hand menu.
5. Choose HLS if necessary.
6. Click on the action menu ⋮ located to the right of the item in question.
7. Click on Geolocation restriction:
   

Then, configure the restrictions:

1. Choose whether the listed countries will be allowed or prohibited.
2. Search for a country to add it to the list.
3. Enable advanced settings if necessary.
4. Copy or paste a list of countries (useful for restricting other feeds with a simple copy-paste).
5. Click to remove all countries listed on the page.
6. Click the blue button to save:
   

Protect an audio stream via IP

You can define an IP address or a range of IP addresses as an allowed or blocked list for accessing a stream.

If you specify only one allowed IP address criterion, a geographical restriction must be in placeIn this use case, the goal is, for example, to block a country but allow a person from that country to access the stream:

If you want to block access for everyone and only allow one or more IPs, you must explicitly block the range 0.0.0.0 → 255.255.255.255 (global address range), and at the same time allow the IP(s) for which you want to grant access: