Icecast Streaming Media Server | cloudimg Support

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Deploy a fully configured internet-radio and audio streaming server on AWS in minutes - not hours. This AMI delivers Icecast 2.4.4 from the Xiph.Org Foundation preinstalled and running as a managed system service, so you can point a source client at it and start broadcasting immediately after launch.

A source client such as butt, Mixxx, liquidsoap, ices or OBS pushes a live audio stream to a named mountpoint, and Icecast relays that single stream out to many simultaneous listeners over ordinary HTTP. It speaks Ogg Vorbis, Opus and MP3, publishes M3U and XSPF playlists that any media player understands, and needs nothing special on the listener side - a browser, VLC or any internet radio app can tune in directly. A public status page lists every active mountpoint with its listener count and current track, while a password-protected admin interface lets you inspect connected listeners, move an audience between mountpoints, update track metadata and disconnect a source.

• Versus manual EC2 setup: Skip the download, the systemd-unit hand-writing, the reverse-proxy configuration and the credential hardening. This image handles all of it at launch.
• Versus other community AMIs: Benefit from a hardened first-boot process that generates three independent per-instance passwords (no shared or default credentials ever ship), a native systemd unit that reports service health honestly, and 24/7 professional support from cloudimg.

• Icecast 2.4.4, installed from the stock distribution archive package so it inherits the OS vendor's security maintenance
• Icecast listening on port 8000, its native port, for both listeners and source clients
• nginx on port 80 reverse-proxying the status and admin interface (so the server is reachable without a port suffix) plus an unauthenticated /healthz endpoint for load-balancer probes
• A native systemd unit for Icecast that starts it on boot and restarts on failure
• A fully patched base image with unattended security upgrades enabled

Secure First Boot: The stock Icecast configuration ships the well-known default password hackme for its source, relay and admin accounts. This image removes it everywhere - including from the commented examples in the configuration - and a one-shot service generates three independent random passwords unique to each instance, recording them in a root-only file. Icecast is wired to refuse to start if that rotation has not run, so an instance can never come up serving a default or placeholder credential.

Encryption in Transit: Icecast serves plain HTTP. For a public station, or any time an admin or source password crosses the internet, terminate TLS in front of it with your own domain using a reverse proxy or an Application Load Balancer.

Network Isolation: Deploy in a private VPC subnet and use security groups to restrict access to only the ports your station requires (22 for SSH, 80 for the status and admin interface, 8000 for listeners and source clients).

The status page is served on port 80 through nginx at http://your-instance/ , and the admin interface at http://your-instance/admin/ . Sign in as admin with the generated password to manage mountpoints and listeners. Icecast also listens natively on port 8000, where both listeners and source clients connect.

• Internet radio stations and community or campus radio
• Podcasters and broadcasters self-hosting live audio to a wide audience
• Relaying a single live source out to many simultaneous listeners
• Scripted or automated stations driven by liquidsoap

Technical support by email and live chat covers deployment, mountpoint and listener management, source-client configuration, TLS termination, hostname and playlist setup, and OS administration.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them. Icecast is developed by the Xiph.Org Foundation and licensed under the GNU General Public License version 2; the corresponding source is available from the distribution archive with apt-get source icecast2.