Architecture
Content flows through three tiers: users request from edge nodes, which pull from the origin shield, which pulls from origin storage. Cache hits at any tier return content immediately without hitting the next tier.Edge caching
Popular content is cached at 200+ edge locations closest to users:- Cache duration: Based on content popularity and freshness
- Purge on update: Automatic invalidation when content changes
- Regional optimization: Popular content stays at regional edges
Origin shield
A mid-tier cache layer reduces origin load:- Aggregates requests from multiple edge nodes
- Prevents origin overload during traffic spikes
- Reduces egress costs
Branded domains
Configure custom CNAME domains for CDN delivery:Setup
Create DNS CNAME record
Create a CNAME record pointing to shortkit’s CDN:
| Type | Name | Value |
|---|---|---|
| CNAME | video | cdn.shortkit.dev |
Signed URLs
All CDN URLs are signed with time-limited tokens to prevent unauthorized access.How it works
- Feed API returns content with signed streaming URLs
- URLs include expiry timestamp and signature
- CDN validates signature before serving content
- Expired tokens return 403; SDK automatically refreshes
URL format
Token expiry
Configure in Admin Portal (Settings → CDN URL Expiry) or via API:| Setting | Default | Range | Description |
|---|---|---|---|
urlExpiry | 6 hours | 1-24 hours | Token validity duration |
Key rotation
Signing keys rotate automatically every 90 days with overlap periods to prevent playback interruption.Playback restrictions
Restrict video playback to authorized domains.Domain allowlist
Only requests from allowed domains can play video content:Configuration options
List of allowed domains. Supports exact matches and wildcards (
*.example.com).Whether to allow requests with no referrer header. Some mobile apps and direct URL access don’t send referrers.
Whether to allow requests from known scraping/bot user agents.
Development environments
localhost and 127.0.0.1 are automatically allowed in staging/development environments.
Admin Portal
Configure in Settings → Playback Restrictions.Streaming manifests
The platform generates optimized manifests for each protocol:HLS (HTTP Live Streaming)
Master playlist with variant streams:DASH (Dynamic Adaptive Streaming over HTTP)
MPD manifest with adaptation sets:Multi-codec manifests
When AV1 is available, manifests include both codec options:Performance metrics
Target metrics
| Metric | Target |
|---|---|
| Edge cache hit ratio | > 95% |
| First byte (cache hit) | < 50ms |
| First byte (cache miss) | < 200ms |
| Global availability | 99.99% |
Monitoring
View CDN performance in Admin Portal (Analytics → Playback Quality):- Cache hit ratio over time
- Regional latency breakdown
- Bandwidth usage by rendition
- Error rates by region
Geographic distribution
Content is served from the nearest edge location:| Region | Edge Locations |
|---|---|
| North America | 50+ |
| Europe | 40+ |
| Asia Pacific | 35+ |
| South America | 15+ |
| Africa | 10+ |
| Middle East | 10+ |
