Protocol URLs

Protocol URLs

The private dashboard is the authoritative source for working URLs. The examples here contain placeholders and explain the format only.

Purpose	Transport	Port	Authentication
SRT publish/read	UDP	8890	SRT stream ID
RTSP read	TCP	8554	URL user/password
RTMP publish	TCP	1935	URL query parameters
LL-HLS preview	TCP	8888	MediaMTX HTTP authentication
WebRTC signaling	TCP	8889	MediaMTX HTTP authentication
WebRTC media	UDP	8189	Session authorization
Dashboard	TCP	8090	Tailnet trust boundary
MediaMTX API	TCP	9997	Localhost only
Metrics	TCP	9998	Localhost only

SRT publisher

srt://TAILSCALE_IP:8890?streamid=publish:live:mobile:PUBLISH_PASSWORD&pkt_size=1316

• Role: mobile
• Permission: publish
• Path: live
• Packet size: 1316 bytes

SRT reader

srt://TAILSCALE_IP:8890?streamid=read:live:studio:READ_PASSWORD&pkt_size=1316

• Role: studio
• Permission: read
• Expected transport content: MPEG-TS with H.264/AAC

RTSP reader

rtsp://studio:READ_PASSWORD@TAILSCALE_IP:8554/live

RTSP is configured for TCP transport.

RTMP publisher

rtmp://TAILSCALE_IP:1935/live?user=mobile&pass=PUBLISH_PASSWORD

Use as a fallback when SRT/UDP is blocked.

LL-HLS preview

http://TAILSCALE_IP:8888/live

Authenticate as studio with the reader password.

WebRTC preview

http://TAILSCALE_IP:8889/live

Signaling uses TCP 8889; media uses UDP 8189. Authenticate with the reader role when prompted.

Dashboard

http://TAILSCALE_IP:8090

The dashboard itself uses Tailnet reachability rather than a second web login and displays complete authenticated media URLs.

Secret-handling rules

• Treat complete media URLs as passwords.
• Copy URLs from the dashboard; do not assemble them in public terminals or chats.
• Never include them in screenshots, GitHub issues, logs, OBS collections or Moblin exports shared with others.
• Do not expose any listed port through a public tunnel or router forwarding.
• Rotate credentials after any suspected disclosure.