https://livekit.io logo
Join Slack
Powered by
This message was deleted.
# helpdesk
s
This message was deleted.
a
We don’t currently support any encryption with egress
p
Any plans to support in near future?
a
Not currently. Out of curiosity, what is your use case?
p
Oops sorry, I was thinking of other thread with relay question while messaging here. Editing original reply. For encryption, it is to support file encrypt based on customer configured keys, so that only customers are able to decrypt and play the recordings.
Went through FAQ, found below answer, which mentions that the Egress out can be sent to local server instead of cloud storage. https://github.com/livekit/egress#can-i-store-the-files-locally-instead-of-uploading-to-cloud-storage • Is it recommended and safe way? • When is the output file available, after the room is closed or is the file created and call uploaded in streams? Which would mean, that file can keep on growing at the mount location till the room is closed. • What is 
backup_storage
? Is it on the same server hosting egress? Does it mean if we don't configure cloud storage and docker mount, then will the file be saved at this location?
a
Local storage is generally for testing, but safe to use. Gstreamer writes all the data to a temporary file, then moves it into the output file at the very end. This is because it needs to figure out the file headers after it finishes. You are right, that means the file will just keep growing. If you use SegmentedFile output it will create, upload, then delete many small files instead, which might be better for very long rooms Backup storage should be a docker mount, but doesn't have to be, and is where the files are moved if an upload fails. For example if you let users supply their own AWS keys for uploads, and one of them gives a bad key, you could recover the file from backup storage
You could use local storage, write the files to a mounted volume, and have some worker process running that encrypts the files and uploads them to s3
p
Yup, was thinking in the similar line, to use local storage and then upload by worker process to our ObjectStorage. Wanted to know whether its safe. So local storage and backup storage, both are docker mounts. Thanks for confirmation.
👍 1
One more follow-up query, Is the location of temporary file by Gstreamer or small files by SegmentedFile same as output file location, or is it temporary at different place. And only final output file will be created at the mounted location or cloud storage?
a
it’s the standard temp dir for the os (I believe it’s /tmp/ on ubuntu)
👍 1
p
Thanks, so at the mounted location only the final output file will be available; intermediate once will not be available, that will make things simpler.
Out of curiosity, instead of docker mount, is there a way to save or access the recording in egress server itself?
a
not any useful way. You can 
docker cp
but to get files out of the container but if the service shuts down you will lose them
p
Thanks, yeah docker cp is not reliable than docker mount. Since the 
cp
service will need to mange the copying, instead of inbuilt 
mount
.
Open in Slack
PreviousNext
Powered by