This guide explains how to maintain control over your radio streams by enabling IP protection or geolocation, allowing you to decide, for example, whether a specific listener can listen to your radio station or not.

Introduction

• You can protect MP3/AAC or HLS streams independently of each other (the same applies to protection by token).
• Activating the restriction involves changing the stream configuration, which may take a few minutes to replicate on the servers.

Protect an audio stream by GeoIP

To do this, simply go to the restriction settings and enable protection on the stream you want to secure:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product in question:
   
3. Click:
   1. either on the name of the radio station:
      
   2. or on Restrictions in the left-hand menu to apply restrictions to the entire product:
      
4. When selecting a above, click on Restrictions in the left-hand menu.
5. Choose HLS if necessary.
6. Click on the action menu ⋮ located to the right of the item in question.
7. Click on Restriction by geolocation:
   

Then configure the restrictions:

1. Choose whether the listed countries will be allowed or forbidden.
2. Search for a country to add it to the list.
3. Activate advanced configuration if necessary.
4. Copy or paste a list of countries (useful for restricting other streams with a simple copy-paste).
5. Click to remove all countries listed on the page.
6. Click the blue button to save:
   

Protect an audio stream by IP

You can define an IP or a range of IPs as a list of allowed or forbidden IPs for accessing a stream.

If you only specify an allowed IP criterion, a geographical restriction must be in place. In this case, the goal is, for example, to forbid a country, but to allow a person from that country to access the stream:

If you want to block access for everyone and only allow one or more specific IP addresses, you must explicitly block the range 0.0.0.0 → 255.255.255.255 (the global address range), and at the same time allow the IP address(es) for which you want to grant access: