Every service runs on the same node image and the same routing fabric. You pick which of them terminates a hostname; the rest of the stack stays identical.
Origin shield for HLS and DASH. Deployed in front of your packager or object storage, behind one or more public CDN operators.
Concurrent misses for the same segment are merged into a single upstream fetch. During a live event this is the difference between one origin read and several thousand.
Manifests, init segments and media segments get separate TTLs. Dynamic endpoints can be marked no-store so that a stale body is never replayed to a different session.
Two or more upstreams per resource with health checks and automatic demotion. Failover is per-resource, not per-node, so one broken bucket does not move all traffic.
Signed URL validation, referrer policy and per-resource IP allowlists. Rejections are counted separately from origin errors in the logs.
Typical resource definition:
| Field | Example | Notes |
|---|---|---|
| Origin | https://origin.example.net:443 | TLS required, SNI must match |
| Segment path | /media/hls/segment.ts | Must match the packager output exactly |
| Connect timeout | 10 s | Applies to the upstream handshake |
| Read timeout | 300 s | Raise for low-latency live |
| Cache | no-store / max-age | Per path prefix |
Regional gateway for mobile and desktop clients. Handles the chatty, small-payload part of an application so it never crosses the continent.
Encrypted blobs replicated between PoPs with last-writer-wins and per-device conflict logs.
Region-specific listings assembled once and served from memory until the upstream revision changes.
Versioned static bundles with immutable URLs, pinned to the release channel the client reports.
S3-compatible storage for VOD libraries. Optimised for long sequential reads rather than small random access.
| Tier | Redundancy | First-byte latency | Intended use |
|---|---|---|---|
| Hot | 3 replicas, single region | < 40 ms | Active catalogue |
| Warm | 2 replicas + parity | < 120 ms | Back catalogue |
| Archive | Erasure coded | minutes | Masters, compliance copies |