Authenticated CDN delivery for Cloudflare Stream: signed playback URLs, domain-based CDN matching, security domain replacement, and multi-domain configuration in Streamcake.
Streamcake's Cloudflare CDN service delivers authenticated stream playback through Cloudflare's global network. Stream host domains are matched against configured CDN entries; matched entries replace the origin host with a secure delivery domain and append a signed token query string to the playback URL. Multiple CDN entries per service instance support independent domain mappings and per-entry security overrides. CDN profiles are enumerable for dashboard selection. A pass-through mode returns the original stream URL unmodified when signing is disabled.
Not sure where to start?
Tell us your use case and we'll recommend the right MediaLive configuration for your workflow.
Features
Generate authenticated CDN playback URLs with signed tokens appended as query parameters, ensuring only authorised viewers can access Cloudflare-delivered streams.
Automatically match stream origin hosts against configured CDN entries to select the correct signing configuration without manual routing logic.
Replace Cloudflare origin hosts with configured secure delivery domains in the output playback URL, enforcing authenticated delivery paths for all viewers.
Support multiple CDN entries per service instance, each with an independent domain mapping and per-entry security settings for multi-property and multi-tenant deployments.
Enumerate all configured CDN profiles for display and selection in the Streamcake operator dashboard, enabling production teams to pick the right CDN entry per stream.
Configure token validity duration per CDN entry or rely on a service-level fallback, giving operators precise control over how long signed playback URLs remain valid.
Return the original stream URL unmodified when CDN signing is disabled, allowing the same workflow to handle both authenticated and open delivery paths without reconfiguration.
Enforce a minimum key length requirement for token signing — requests with under-length keys are rejected before signing begins, preventing silent delivery failures.
Ready to go live with broadcast-grade reliability?
Provision a Cloudflare CDN in minutes. No infrastructure to manage — Streamcake handles everything end-to-end.
Use Cases
Deploy Cloudflare CDN alongside other delivery tiers using per-entry CDN configurations for geo-optimised routing, failover, and cost management across delivery paths.
Target Audience
Target Audience
- Multi-CDN operators
- large broadcasters
- Multi-Domain CDN Configuration
- CDN Bypass Mode
- CDN Profile Management
Expose CDN profiles through the Streamcake dashboard for production team selection, letting operators choose the right Cloudflare CDN entry per stream or live event.
Target Audience
Target Audience
- Production teams
- NOC operators
- platform engineers
- CDN Profile Management
- Multi-Domain CDN Configuration
- Domain-Based CDN Matching
Deliver live streams through Cloudflare's global network with token-signed playback URLs, ensuring only authenticated viewers can access the stream from any edge location.
Target Audience
Target Audience
- Broadcasters
- OTT platforms
- live event producers
- Signed URL Generation
- Security Domain Replacement
- Domain-Based CDN Matching
Operate multiple Cloudflare CDN configurations with independent domain mappings and signing settings, routing each stream to the correct security configuration automatically.
Target Audience
Target Audience
- Enterprise media
- multi-brand operators
- Multi-Domain CDN Configuration
- Domain-Based CDN Matching
- CDN Profile Management
Enforce authenticated delivery for enterprise broadcast workflows — signed domains, configurable token lifetimes, and signing key validation ensure a compliant and auditable delivery chain.
Target Audience
Target Audience
- Enterprise broadcasters
- corporate streaming teams
- Signed URL Generation
- Token Expiration Control
- Signing Key Validation
Protect subscription and pay-per-view streams with time-limited signed playback URLs that prevent unauthorized redistribution and hotlinking of Cloudflare-delivered content.
Target Audience
Target Audience
- Rights holders
- premium OTT platforms
- pay-per-view
- Signed URL Generation
- Token Expiration Control
- Security Domain Replacement
