Channel 4's on Demand website does not stream correctly through Guardian

Article #:

Product

Castle

1623

Guardian

All

Summary

The root cause appears to be when the 4 on Demand (All 4) server is sent a POST request, but instead of responding it terminates the connection without sending any data. The Smoothwall sends a proper HTTP / HTML error response and page, which appears to confuse the client's browser.There is nothing that can be done by the proxy to fix this issue. Once a broken cookie is stored by the browser, the user must clear their browser's cookie cache after the IP addresses and sites have been whitelisted.

Problem

All4 videos will not stream properly

Due to the way the All4 media is streamed, All4 does not support proxying. You may find that it partially works for some content and not for others. This is not something Smoothwall can resolve. We have logged this as an issue with All4.

Solution

A good way of testing this is to try connecting using TELNET to ll.securestream.channel4.com on port 1935. (On a Windows machine, open a command window and run: telnet ll.securestream.channel4.com 1935. If the telnet client says Connected, the test is successful.

We have seen some limited success using the following:

Ensure workstations can resolve Internet domains.
Ensure outbound access on TCP port 1935 (RTMP) is allowed on any gateway routers or firewalls. A good way of testing this is to try connecting using TELNET to ll.securestream.channel4.com on port 1935. (On a Windows machine, open a command window and run: telnet ll.securestream.channel4.com 1935. If the telnet client says Connected, the test is successful.

If you are unable to allow direct outbound access, the All4 Flash player will attempt to connect via a proxy, if configured in the web browser. However the stream is unlikely to be reliable and may struggle to connect or pause during playback.

We're still investigating the exact cause but most likely caused by the very time sensitive nature of RTMP video streams being incompatible with web content filtering. The tips below may help improve streaming when accessing through Guardian when connecting directly is not an available option:

1. Create a new custom category for the following:
securestream.channel4.com
webstat.channel4.com
247realmedia.com
realmedia.channel4.com
178.79.194.15
82.71.193.223
82.71.193.228
82.71.193.244
87.248.213.126
87.248.213.155
87.248.213.160
87.248.213.172
92.123.154.174
92.123.154.191
95.140.226.18
95.140.226.35
95.140.227.176
95.140.227.181
95.140.227.185
95.140.227.219
95.140.227.232

Note: There may be more IP addresses; this list is not completely exhaustive. These addresses will allow adverts on All4. It is likely it will allow most adverts on Channel 4's website and possibly some adverts on other sites.

Download a file of the above domains.

2. Create an Allow web filter policy for the newly created custom category.
3. Move the policy above any block policies you may have in the Web filter policies table.
4. Browse to http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html and clear your Flash cache.
5. Delete all cookies from your device.
6. Restart the Smoothwall's web proxy with a cleared cache — see https://help.smoothwall.net/Latest/Content/modules/guardian3/cgi-bin/guardian/proxy.htm.

Attribution:

Last updated:

Author:

Contributions by:

30 August 2016

 

Tanja

 

Copyright © 2000-2016 Smoothwall All rights reserved.