Benjamin PrachtandClaude Opus 5 91f33da004 ingress: add opt-in support for udp:// URL pull ingress (#4810) ...

* ingress: add opt-in support for udp:// URL pull ingress

URL pull ingress previously accepted only http, https and srt source
URLs. Add udp:// as an accepted scheme, gated behind a new
`ingress.enable_udp_url_pull` config option that defaults to false, so
unauthenticated UDP sources are not reachable unless the operator opts
in.

Also add a counterfeiter fake for IngressLauncher and a test covering
the scheme validation matrix.

The ingress handler binds a local socket on the caller supplied address
and port instead of connecting out like the http and srt sources do.
Spell out what that means for operators in both the config field doc
comment and config-sample.yaml: caller controlled local port binding,
unauthenticated and spoofable input, and multicast relaying of traffic
on the handler's local network.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-01 12:11:14 -07:00

..

configtest

ignore unexported fields in yaml lint (#3145)

2024-10-29 12:16:21 -07:00

config_test.go

Add configurable read-message size limit on signalling WebSockets (#4743)

2026-08-12 12:07:26 +05:30

config.go

ingress: add opt-in support for udp:// URL pull ingress (#4810)

2026-09-01 12:11:14 -07:00