Why architecture matters here
Video CDN architecture matters because video is uniquely demanding. Bitrate ladders mean cache misses cost seconds; DRM key delivery must be fast and available; ad insertion must be seamless. Specialized video CDNs price higher but package these concerns as first-class features.
Cost matters because video is bandwidth-heavy. Cache hit rates matter directly to bill; multi-CDN gives negotiating leverage.
Reliability comes from RUM-based routing. Real user data drives which CDN serves each region; problems detected fast.
The architecture: every layer explained
Walk the diagram top to bottom.
Player. hls.js / dash.js / Shaka / native. Requests manifest + segments; ABR picks rung.
Edge PoP. Video-tuned cache — larger disk, video-specific hit rate optimizations.
Mid-tier / Shield. Regional cache coalescing so origin sees few requests.
Just-in-time packaging. One source (fMP4 CMAF); PoP serves HLS or DASH depending on player. Avoids storing every combination.
SSAI ad insertion. Server-Side Ad Insertion stitches ads into the manifest so ad blockers can't stop them. Handles user-specific ad decisions.
DRM Key Delivery. License server for Widevine / FairPlay / PlayReady. Low-latency key delivery.
Signed URLs / Tokens. Prevent hotlinking. Time-boxed access.
Analytics. Player-side beacons for QoE (startup, rebuffer, bitrate); ad decisioning telemetry.
Multi-CDN routing. RUM (Real User Monitoring) drives DNS or manifest-level routing to best-performing CDN per region.
Origin storage + transcode. Source of truth. Feeds mid-tier which feeds edges.
End-to-end playback flow
Trace a playback. User taps a video. Player requests manifest URL. DNS returns CDN edge (multi-CDN routing picks best for user's region).
Edge PoP returns manifest (JIT packaged from CMAF source). Player parses; picks 720p starting bitrate.
Requests first segment. Edge cache hit; delivered in 30ms.
SSAI ad break: manifest contains ad segments dynamically inserted based on user profile. Player plays through seamlessly.
DRM: player requests license from license server (redirected from manifest). Server returns encrypted key for this session.
Segments continue; ABR ramps to 1080p when bandwidth allows.
Analytics beacons stream QoE: startup time, rebuffer count, average bitrate, ad completion. RUM data drives future routing decisions.
Regional CDN A degrades; RUM detects rebuffer spike in eu-west; multi-CDN router shifts new sessions to CDN B for that region within minutes.