Documentation for Axxon One 3.0/3.1 version. Documentation for Axxon One 2.0 version is also available.


On the page:




General information

The Web server allows you to access Axxon One remotely over the internet (see Working with Axxon One through the Web client, Working with Axxon One Through the Mobile Clients).

Attention

  • On the local computer with the Web server running, ports from the range [9001; 9001 + number of logical cores of the processor] must be open.
  • Except for the H.264 format, the Web server transcodes the incoming video image using the MJPEG compression algorithm, which can result in high levels of incoming traffic.

In addition, Axxon One allows you to use Wildcard certificates to work with the Web server. Axxon One also supports the following types of certificate validation:

  • D (Domain Validation - DV):
    • Certificate with domain validation
    • Only domain ownership is validated.
  • D+O (Domain + Organization Validation - OV):
    • Certificate with domain and organization validation
    • In addition to validating domain ownership, the authenticity of the organization that registers the certificate is also validated.
  • IDN (Internationalized Domain Name):
    • Certificate for domains that use national characters (for example, Cyrillic characters)
    • This can be a D or D+O certificate, but it is intended for domains that contain non-Latin characters.
  • EV (Extended Validation):
    • Certificate with extended validation.
  • Wildcard:
    • Certificate that protects the domain and all its subdomains. For example, a certificate for .domain.com is valid for all subdomains like web.domain.com, client.domain.com, and so on.
    • It can be either D or D+O.

Configuration of the Web server

To configure the Web server in Axxon One, do the following:

  1. Go to the Devices tab.
  2. Select the Server object (see Server). In the Web server properties section, you can change the settings of the web server listed in the table:
    ParameterValueDescription
    EnableYes

    By default, the Web server starts automatically together with the server. If you want to disable the Web server, select the No value

    No
    Port80Enter the port number on which the Web server will be located. The default port is 80
    Certificate file

    To connect to the Web server via the SSL port only, do the following:

    1. Enter the SSL port number to connect to the Web server in the SSL port field.
    2. Enter a path to the private SSL key.

    3. Enter a path to the SSL certificate file.

    Attention!

    • Axxon One supports SSL certificates in PEM format with TLS cryptographic protocol versions 1.2 and 1.3 and AES GCM, AES CCM, and AES CBC algorithms. PEM format is a text container that uses base-64 encoding. File extensions in PEM format can be, for example, .pem, .crt, .key. For the correct operation of the Web server, the private key and certificate must be represented in one of these extensions. For example, private key—privkey3.pem, certificate—fullchain3.pem.
    • If the private key file and certificate file are not specified in the Web server settings, the connection to the Web server is made via HTTP port only.
    Private key file
    Enable CORSYesBy default, the setting is disabled. If the Web server must use the CORS mechanism, select the Yes value.
    Axxon One supports the following:
    1. CORS HTTP headers for GET and POST requests.

    2. Preflight requests.

    No
    Enable recompression of video streamYes

    By default, the setting is disabled, and the Web server doesn't transcode the stream, which helps to avoid unpredictable CPU load on the server. For example, if the browser cannot play back a video in H.265 format, you must switch to a browser-supported video codec (see Real-time video surveillance in the web client) or change the video codec of the camera to the video codec supported by the browser (see Camera). If the Web server must transcode the stream, select the Yes value

    No
    RTSP port554Enter the port via which data will be transferred via the RTSP protocol (see Configuring the RTSP server). The default port is 554
    RTSP/HTTP port8554Enter the port via which data will be transferred via the RTSP/HTTP protocol. The default port is 8554
    SSL port443

    If you need to connect to the Web server only via the SSL port, you must enter the SSL port number. The default port is 443.

    You must also:

    1. Enter the path to the private key file in the Private key file field.
    2. Enter the path to the certificate file in the Certificate file field.
    URL path/Enter the prefix that is added to the server address
  3. Click the Apply button to apply the configured parameters and restart the Web server.

The Web server is now configured and available over the internet at the following address: http(s)://<IP address of the Axxon One server>:<Port>/<Prefix>. For example, if the server's IP address is 10.0.11.1, the port is 8000, and the prefix is /asip-api, then the Web server can be accessed at the following address: http://10.0.11.1:8000/asip-api.

Attention!

In Linux OS, for the correct operation of the Web server, the ngp user must have permissions to open the directory where the private key and certificate files are located, as well as permissions to read the files. To give the permissions, do the following:

  1. Run the command:
    chmod 751 /home/certs/
    where instead of /home/certs/ you must enter the current path to the files.
  2. Check the permissions for the directory with files using the command:
    ls -lt /home/
    As a result, the permissions for the directory with files look like this:
    total 8
drwxr-x--x  2 user user 4096 aug 20 14:46 certs
drwxr-xr-x 18 user user 4096 aug 20 14:46 user