rrweb cloud

Proxy Ingest Endpoints ​

If you wish to avoid exposing the rrwebcloud.com ingestion endpoints in the browser, then it is possible to proxy them with some plumbing.

Motivations: ​

  • Technical: there may be CORS issues with sending requests to third party domains
  • Avoid blocking: in the event that rrwebcloud.com makes it onto a list of analytics providers
  • Compliance: your service needs to only use pre-approved domains in e.g. a GDPR jurisdiction. We use EU datacenters by default and can set up any additional compliance requirements on our backend after proxying.

Setting up a separate subdomain for rrwebCloud recording is the most straightforward method of directing requests to us.
This can be accomplished by adding a CNAME record to the DNS configuration for your domain. Your hosting provider will provide a guide on how to do this.

DNS

;; Sample DiG output:
rrwebcloud.my-domain.com. 86400 IN  CNAME api.rrwebcloud.com.

We've used rrwebcloud as the subdomain in this example, but you can use anything e.g. ingest.my-domain.com. After that goes live, you can replace any rrwebcloud.com domain mentioned in the Javascript SDK with your own subdomain, e.g.:

html
<script src="https://rrwebcloud.my-domain.com/record.js" autostart async>
  {
    "publicAPIkey": "your-public-api-key-here"
  }
</script>

Final step: let us know what subdomain you've used so we can allow-list it.

Forwarding the entire subdomain means that the individual API endpoints mentioned below will also be accessible, for example rrwebcloud.my-domain.com/recordings/{recordingId}/ingest/ws.

Server config for path proxying ​

INFO

The rest of this guide is only relevant if you cannot or do not wish to do CNAME forwarding, e.g. if you don't have access to the DNS system for the website. The following details are given as a sketch, and the rrwebCloud team are on hand to help you set this up for the first time.

Configuring a serverUrl ​

The default value for serverUrl for the Javascript SDK is https://api.rrwebcloud.com/recordings/{recordingId}/ingest/ws You can supply a different value for that in the starting config, by setting the serverUrl param. In this example we've used my-domain.com/proxy as the sample endpoint you require:

"serverUrl": "https://my-domain.com/proxy/{recordingId}/ingest/ws"

The above will necessitate the proxying of an additional URLs pattern which is derived from the above serverUrl value:

  • https://my-domain.com/proxy/([0-9a-f])+/ingest/ws (for websockets)
  • https://my-domain.com/proxy/([0-9a-f])+/ingest (for POST requests)

Here is some example nginx config:

nginx

location ~ /proxy/(?<recordingId>.+)/ingest/ws {
    proxy_pass https://api.rrwebcloud.com/recordings/$recordingId/ingest/ws;
    # websocket upgrade headers:
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}
location ~ /proxy/(?<recordingId>.+)/ingest {
    proxy_pass https://api.rrwebcloud.com/recordings/$recordingId/ingest;
    proxy_set_header Host $host;
}

Get in contact to with us to help set this up with you.

Proxying the <script> url ​

If you are including the rrwebCloud client js using a script tag JavaScript SDK (HTML/JS) and you wish to serve the javascript file from your own domain, then it is important that the file is proxied rather than copied to your server, as we will be regularly updating the file in lockstep with changes to our backend servers.

If you proxy this file, e.g. by serving <script src="https://my-domain.com/recording.js" autostart async>, then the javascript file will check it's own URL and will use the following URL patterns unless you supply an explicit server url:

nginx

# proxy the js you have specified in the <script> tag above
location ~ /recording.js {
    proxy_pass https://rrwebcloud.com/record.js;
}
# these paths are autogenerated without an explicit `serverUrl` param
location ~ /recordings/(?<recordingId>.+)/ingest/ws {
    proxy_pass https://api.rrwebcloud.com/recordings/$recordingId/ingest/ws;
    # websocket upgrade headers:
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}
location ~ /recordings/(?<recordingId>.+)/ingest {
    proxy_pass https://api.rrwebcloud.com/recordings/$recordingId/ingest;
    proxy_set_header Host $host;
}

Omitting the {recordingId} pattern ​

Note: the special {recordingId} part of the URL will be replaced by an actual UUID when it is used. If you need to omit this, then the recordingId will be added as a GET parameter instead. This would need to be transformed by the proxy server into the correct URL pattern as shown in the examples above, but a recordingId in the GET is otherwise currently not implemented by our backend.