Ably FAQs

Back to home

Ably FAQs

Ably architecture, transports, and security

Ably architecture, transports, and security

Details on how Ably works and what makes us reliable and secure

Transports and connections

Connection state recovery

Do you support multiplexing and channel groups?

Which TLS Version does the ably-js library use?

Which transports are supported?

Why is the Realtime SDK always establishing Comet connections for long polling rather than using it as a fallback for WebSockets?

See more

Security

Cross-platform symmetric encryption offered by the libraries

DOS attack prevention

Is it secure to send the access_token as part of the websocket url query params?

Can a client emulate any client ID i.e. authenticate using a wildcard client ID?

Recommendations for incrementally authorising new capabilities

When I change a key's capabilities in the dashboard, will existing connections get those capabilities immediately?

Using capabilities to manage client access privileges on channels

How can you restrict which channels a client can access?

Token and Basic authentication

Are messages sent to and received from Ably securely using TLS?

Authenticated and identified clients

If I need to whitelist Ably's servers from a firewall, which ports, IPs and/or domains should I add?

How do I report a security or privacy vulnerability on Ably

Transport Layer Security (TLS) Version Support

See more

Protocol support and protocol adapters

What are Ably protocol adapters and how do they work?

Do you support MQTT? Are you protocol agnostic?

Data centres

Where are Ably's servers and datacenters located around the world?

Ably architecture design

How do I avoid hitting the Max Channel Message Rate Limit by sharding messages across channels?

Why does Ably have concurrent channel limits?