moq: support forwarding streams (#6145)

Author: aler9

api/openapi.yaml

@@ -152,6 +152,7 @@ components:
         - rtsp
         - rtsps
         - srt
+        - moq
         - whip
         - whips
 
@@ -1275,6 +1276,8 @@ components:
           type: string
         destFingerprint:
           type: string
+        moqTransport:
+          type: string
         whipBearerToken:
           type: string
 

docs/2-features/11-forward.md

@@ -2,6 +2,7 @@
 
 Incoming streams can be natively forwarded to other servers with the following protocols:
 
+- [Media-over-QUIC](#media-over-quic)
 - [SRT](#srt)
 - [WebRTC](#webrtc)
 - [RTSP](#rtsp)
@@ -14,6 +15,24 @@ We provide instructions to forward streams to the following services:
 - [YouTube](#youtube)
 - [Twitch](#twitch)
 
+## Media-over-QUIC
+
+Add the target URL inside `dest` of a `forward` entry:
+
+```yml
+paths:
+  mypath:
+    forward:
+      - dest: moqt://user:pass@host:port/path
+        # Transport protocol used to forward the stream. available values are "quic", "webtransport".
+        moqTransport: quic
+        # If the destination TLS certificate is self-signed or invalid, you can provide the
+        # fingerprint of the certificate in order to validate it anyway. It can be obtained by running:
+        # openssl s_client -connect dest_ip:dest_port </dev/null 2>/dev/null | sed -n '/BEGIN/,/END/p' > server.crt
+        # openssl x509 -in server.crt -noout -fingerprint -sha256 | cut -d "=" -f2 | tr -d ':'
+        destFingerprint:
+```
+
 ## SRT
 
 Add the target URL inside `dest` of a `forward` entry:
@@ -35,14 +54,14 @@ paths:
     forward:
       # use whip:// for HTTP and whips:// for HTTPS.
       - dest: whip://host:port/mystream/whip
+        # Token to insert in the Authorization: Bearer header.
+        whipBearerToken: ""
         # If the destination is HTTPS and the destination TLS certificate is self-signed
         # or invalid, you can provide the fingerprint of the certificate in order to
         # validate it anyway. It can be obtained by running:
         # openssl s_client -connect dest_ip:dest_port </dev/null 2>/dev/null | sed -n '/BEGIN/,/END/p' > server.crt
         # openssl x509 -in server.crt -noout -fingerprint -sha256 | cut -d "=" -f2 | tr -d ':'
         destFingerprint:
-        # Token to insert in the Authorization: Bearer header.
-        whipBearerToken: ""
 ```
 
 If the remote server is a _MediaMTX_ instance, remember to add a `/whip` suffix after the stream name, since in _MediaMTX_ [it's part of the WHIP URL](../3-publish/05-webrtc-clients.md).

internal/api/api_forward_test.go

@@ -54,6 +54,7 @@ func (m *testForwardPathManager) APIForwardDestGet(path string, id uuid.UUID) (*
 
 func TestForward(t *testing.T) {
 	rtmpID := uuid.New()
+	moqID := uuid.New()
 	whipID := uuid.New()
 	pathManager := &testForwardPathManager{
 		items: map[uuid.UUID]*defs.APIForwardDest{
@@ -67,9 +68,21 @@ func TestForward(t *testing.T) {
 				LastError:     "connection refused",
 				OutboundBytes: 123,
 			},
+			moqID: {
+				ID:      moqID,
+				Pos:     2,
+				Created: time.Date(2026, 6, 18, 9, 0, 30, 0, time.UTC),
+				Conf: conf.ForwardDest{
+					Dest:         "moqt://localhost/live/stream",
+					MoQTransport: conf.MoQTransportWebTransport,
+				},
+				Protocol:      defs.APIForwardDestProtocolMoQ,
+				State:         defs.APIForwardDestStateForwarding,
+				OutboundBytes: 234,
+			},
 			whipID: {
 				ID:            whipID,
-				Pos:           2,
+				Pos:           3,
 				Created:       time.Date(2026, 6, 18, 9, 1, 0, 0, time.UTC),
 				Conf:          conf.ForwardDest{Dest: "whip://localhost/live/stream/whip", WHIPBearerToken: "mytoken"},
 				Protocol:      defs.APIForwardDestProtocolWHIP,
@@ -98,26 +111,45 @@ func TestForward(t *testing.T) {
 	var list defs.APIForwardDestList
 	httpRequest(t, hc, http.MethodGet,
 		"http://localhost:9997/v3/paths/forward/list?path=my%2Fnested%2Fstream", nil, &list)
-	require.Equal(t, 2, list.ItemCount)
+	require.Equal(t, 3, list.ItemCount)
 	require.Equal(t, 1, list.PageCount)
-	require.Len(t, list.Items, 2)
+	require.Len(t, list.Items, 3)
 
 	require.ElementsMatch(t, []defs.APIForwardDest{
 		{
-			ID:            rtmpID,
-			Pos:           1,
-			Created:       time.Date(2026, 6, 18, 9, 0, 0, 0, time.UTC),
-			Conf:          conf.ForwardDest{Dest: "rtmp://localhost/live/stream"},
+			ID:      rtmpID,
+			Pos:     1,
+			Created: time.Date(2026, 6, 18, 9, 0, 0, 0, time.UTC),
+			Conf: conf.ForwardDest{
+				Dest:         "rtmp://localhost/live/stream",
+				MoQTransport: conf.MoQTransportQUIC,
+			},
 			Protocol:      defs.APIForwardDestProtocolRTMP,
 			State:         defs.APIForwardDestStateError,
 			LastError:     "connection refused",
 			OutboundBytes: 123,
 		},
 		{
-			ID:            whipID,
-			Pos:           2,
-			Created:       time.Date(2026, 6, 18, 9, 1, 0, 0, time.UTC),
-			Conf:          conf.ForwardDest{Dest: "whip://localhost/live/stream/whip", WHIPBearerToken: "mytoken"},
+			ID:      moqID,
+			Pos:     2,
+			Created: time.Date(2026, 6, 18, 9, 0, 30, 0, time.UTC),
+			Conf: conf.ForwardDest{
+				Dest:         "moqt://localhost/live/stream",
+				MoQTransport: conf.MoQTransportWebTransport,
+			},
+			Protocol:      defs.APIForwardDestProtocolMoQ,
+			State:         defs.APIForwardDestStateForwarding,
+			OutboundBytes: 234,
+		},
+		{
+			ID:      whipID,
+			Pos:     3,
+			Created: time.Date(2026, 6, 18, 9, 1, 0, 0, time.UTC),
+			Conf: conf.ForwardDest{
+				Dest:            "whip://localhost/live/stream/whip",
+				WHIPBearerToken: "mytoken",
+				MoQTransport:    conf.MoQTransportQUIC,
+			},
 			Protocol:      defs.APIForwardDestProtocolWHIP,
 			State:         defs.APIForwardDestStateForwarding,
 			OutboundBytes: 456,
@@ -126,10 +158,10 @@ func TestForward(t *testing.T) {
 
 	var item defs.APIForwardDest
 	httpRequest(t, hc, http.MethodGet,
-		"http://localhost:9997/v3/paths/forward/get?path=my%2Fnested%2Fstream&id="+whipID.String(), nil, &item)
-	require.Equal(t, "whip://localhost/live/stream/whip", item.Conf.Dest)
-	require.Equal(t, "mytoken", item.Conf.WHIPBearerToken)
-	require.Equal(t, defs.APIForwardDestProtocolWHIP, item.Protocol)
+		"http://localhost:9997/v3/paths/forward/get?path=my%2Fnested%2Fstream&id="+moqID.String(), nil, &item)
+	require.Equal(t, "moqt://localhost/live/stream", item.Conf.Dest)
+	require.Equal(t, conf.MoQTransportWebTransport, item.Conf.MoQTransport)
+	require.Equal(t, defs.APIForwardDestProtocolMoQ, item.Protocol)
 	require.Equal(t, defs.APIForwardDestStateForwarding, item.State)
-	require.Equal(t, uint64(456), item.OutboundBytes)
+	require.Equal(t, uint64(234), item.OutboundBytes)
 }

internal/conf/conf_test.go

@@ -904,6 +904,16 @@ func TestConfErrors(t *testing.T) {
 				"    source: rtsp://user@localhost/stream\n",
 			"username and password must be both provided",
 		},
+		{
+			"valid moq forward destination",
+			"paths:\n" +
+				"  mypath:\n" +
+				"    forward:\n" +
+				"    - dest: moqt://localhost/stream\n" +
+				"      destFingerprint: 0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\n" +
+				"      moqTransport: webtransport\n",
+			"",
+		},
 		{
 			"valid whip forward destination",
 			"paths:\n" +
@@ -921,7 +931,7 @@ func TestConfErrors(t *testing.T) {
 				"    forward:\n" +
 				"    - dest: http://localhost/stream\n",
 			"invalid 'forward': entry 0: unsupported scheme 'http', supported ones are " +
-				"rtmp, rtmps, rtsp, rtsps, srt, whip and whips",
+				"rtmp, rtmps, rtsp, rtsps, srt, moqt, whip and whips",
 		},
 	} {
 		t.Run(ca.name, func(t *testing.T) {

internal/conf/forward_dest.go

@@ -8,9 +8,10 @@ import (
 
 // ForwardDest is a destination to which a path is forwarded.
 type ForwardDest struct {
-	Dest            string `json:"dest"`
-	DestFingerprint string `json:"destFingerprint"`
-	WHIPBearerToken string `json:"whipBearerToken"`
+	Dest            string       `json:"dest"`
+	DestFingerprint string       `json:"destFingerprint"`
+	MoQTransport    MoQTransport `json:"moqTransport"`
+	WHIPBearerToken string       `json:"whipBearerToken"`
 }
 
 func validateForwardDest(dest string) (*url.URL, error) {
@@ -31,10 +32,10 @@ func (p *ForwardDest) Validate() error {
 	}
 
 	switch u.Scheme {
-	case "rtmp", "rtmps", "rtsp", "rtsps", "srt", "whip", "whips":
+	case "rtmp", "rtmps", "rtsp", "rtsps", "srt", "moqt", "whip", "whips":
 	default:
 		return fmt.Errorf(
-			"unsupported scheme '%s', supported ones are rtmp, rtmps, rtsp, rtsps, srt, whip and whips",
+			"unsupported scheme '%s', supported ones are rtmp, rtmps, rtsp, rtsps, srt, moqt, whip and whips",
 			u.Scheme)
 	}
 

internal/conf/moq_transport.go

@@ -23,6 +23,9 @@ func (d *MoQTransport) UnmarshalJSON(b []byte) error {
 	}
 
 	switch *d {
+	case "":
+		*d = MoQTransportQUIC
+
 	case MoQTransportQUIC, MoQTransportWebTransport:
 
 	default: