vod_drm_single_key
The `vod_drm_single_key` directive specifies a single encryption key for DRM (Digital Rights Management) in video on demand (VOD) streaming using NGINX-based VOD Packager.
Описание
The vod_drm_single_key directive allows administrators to specify a single encryption key that will be used uniformly for all video segments rendered by the NGINX VOD module in a particular context. This is especially useful in scenarios where content needs to be protected by a single key across multiple viewing sessions or for different clients, facilitating simpler key management when serving DRM-protected videos.
This directive can be set within various contexts such as http, server, or location, providing flexibility in configuration. By defining the encryption key explicitly, it ensures that all requests for the video streams utilize the same key, helping to maintain security standards and simplify the playback configuration for clients. For example, when the directive is set at the server level, every video stream within that server block will adhere to this key, reducing the overhead of managing multiple keys for different media assets.
The directive is crucial when dealing with common encryption (CENC) for DASH streams or when integrating with DRM providers. Any inconsistencies or misconfigurations in the key settings can lead to playback failures or security vulnerabilities, which is why it is essential to establish this directive thoughtfully in the NGINX configuration to ensure proper video protection while serving VOD content.
Пример конфига
server {
listen 80;
server_name example.com;
location /video {
vod_drm_single_key "abcdef1234567890";
# Additional VOD configuration options here
}
}Using an incorrect key can lead to playback errors for all clients requesting the video content.
Ensure the vod_drm_single_key directive is set in the appropriate context that matches your video's serving structure (http, server, location).
If multiple keys are needed for different media files, consider using separate configurations rather than a single key declaration.