Anbox Stream Agent

Learn about configurations >

• agent_id | string

  ID of the agent

• extra_stun_servers | string

  Comma separated list of extra STUN servers the agent should promote for clients connecting to its region

• location | string

  Location the agent is available on. If not set its private address will be used.

• log_level | string

  Default: info

  Log level for the stream agent. Possible values are: error, info, debug

• port | int

  Default: 8082

  Port the agent listens on.

• region | string

  Region the agent is deployed in

• snap_revision | string

  Specific revision of the snap to install or pin to. This takes precedence over the channel if both are set.

• snap_risk_level | string

  Default: stable

  Sets the snap risk level (https://snapcraft.io/docs/channels) to install the anbox-stream-agent snap from. The channel to use is encoded in the charm and maps to the charm channel (e.g. if charm is on 1.19 the snap will be installed from the 1.19 channel as well).

• tls_use_pinning | boolean

  Default: True

  Enable support for TLS pinning. If the Anbox Stream Agent is not deployed behind a load balancer but uses a certificate signed by an internal CA (e.g. easyrsa) this allows the Anbox container to still verify the TLS certificate based on its fingerprint. When enabled, the agent will pass down the fingerprint of its TLS certificate to the container which then verifies the certificate presented when connecting to the agent based on its fingerprint.

  Since 1.18.2, if you have a load balancer with proper TLS certificates placed in front of the Anbox stream agent and if you have set the location parameter, set tls_use_pinning to false. Otherwise, Anbox containers will fail to communicate with the stream agent.

• turn_auth_max_lifetime | string

  Default: 5m

  Maximum lifetime of an authentication token generate for the TURN relay server

• ua_token | string

  Ubuntu Advantage token you have received with your license of Anbox Cloud