👋 Welcome to the Link Help Center
Find the answers you need—fast and easy
Help Center / Audio/video deployment and use / Security and Production Considerations
Security and Production Considerations
• Never include the AccessKeySecret in public documents, ticket screenshots, group chats, or code repositories.
• Never expose
7880/TCP directly to the public internet. Clients must access the service through 443/TCP.• Keep LiveKit configuration file permissions set to
0600 and rotate the API Key and Secret regularly.• When changing credentials, update LiveKit and Link at the same time. An unsynchronized switchover will cause Token and Webhook verification failures.
• Regularly monitor CPU, memory, UDP packet loss, network RTT, inbound/outbound bandwidth, and connection counts.
• A single-server deployment is not highly available. Server failures, restarts, or network outages will affect every active call.
• Before upgrading LiveKit, back up
config.yaml and the startup scripts. Pin and record the LiveKit version; following the latest tag long-term is not recommended in production.• After changing ports, update the LiveKit configuration, Caddy, cloud security groups, host firewall, NAT, and operations console configuration together.