Skip to content

Industry · telco & ISP

Delivery that stays inside your own network

If you already own the network the viewer is on, paying a third party to deliver video across it is paying twice. In-network delivery is the clearest case there is for owning the edge — the traffic never has to leave.

Audience

Who this is for

Operators who already carry the traffic and would rather terminate it inside their own network than pay to fetch it from outside.

Telcos
Mobile and fixed-line operators launching or operating a video service for their own subscriber base.
Internet service providers
Networks where video is already the dominant traffic class and transit is the line item it drives.
Enterprise network operators
Organisations running their own AS and address space who intend to deliver from inside it.

The traffic is already on your network

For an operator, video is usually the largest single component of transit — and every gigabyte of it is content your own subscribers are pulling in from outside. Placing the edge inside the network turns an external transit cost into an internal one, and shortens the path at the same time. Cheaper and faster is a rare combination; this is one of the places it genuinely exists.

The second advantage is that you already know who the viewer is. Subscriber identity, entitlement and tiering can be integrated properly rather than bolted on, which makes bundled video an actual product rather than a reseller arrangement.

Detail

What an operator deployment has to get right

Placement

Edge where the subscribers are

Edge nodes placed against your topology and peering reality, so the common case is served from inside the network and transit carries only the misses.

  • Topology-aware placement
  • Peering and exchange awareness
  • Transit carries misses only

Identity

Subscriber entitlement, properly integrated

Your subscriber system stays authoritative. The platform consumes identity and tier rather than maintaining a second, competing customer record.

  • Your billing stays the source of truth
  • Tier-based entitlement
  • Bundled and standalone plans

Scale

Capacity that follows the network

Adding an edge site is adding a declared node, not a project. The estate is Terraform, so a new point of presence is a merge request and a rack visit.

  • New PoP is a declared node
  • Consistent configuration everywhere
  • One observability view across sites

Neutrality

The platform is yours, not a vendor's

No third party sits between you and your subscribers' viewing data, and no contract renewal decides whether you can keep operating your own service.

  • Viewing data stays in your estate
  • No per-gigabyte external meter
  • No renewal cliff

Reference architecture

The usual operator shape

Application tier wherever it is convenient; delivery firmly inside your network.

01Viewers

Untrusted — the public internet

  • Web playerHLS · AES-128
  • Mobile appsAndroid · iOS in development
  • TV appsAndroid TV · Tizen in development
  • DNScontrol and media names are disjoint

02AWS — control plane: small, spiky, rents well

No media byte is ever served from here

  • Load balancerpublic entry for control
  • Platform APIscatalogue · search · billing
  • session-authzsessions · entitlement
  • Managed databaseprimary application store
  • Object storagemasters and backups
  • CDNspillover only, not the default path

03Your edge — media plane: enormous, steady, ruinous to rent

Every media byte leaves from here

  • traefik-edgeTLS · host and path routing
  • CrowdSecWAF and behavioural bans
  • Live pathlow-latency HLS
  • VOD pathrange-aware cache

04Your metal — origin, encoding and the keys

The bytes never enter a metered path

  • live-transcodeFFmpeg, continuous
  • live-originHLS packaging
  • vod-transcode + GPUFFmpeg NVENC pool
  • vod-origin-cacheorigin pull and cache
  • MinIOS3-compatible origin of record
  • key-deliveryDRM keys, per segment
  • OpenBaosecrets and transit encryption
  • ClickHouseplayback telemetry, kept local

05One control plane, both estates

The same pipeline provisions AWS and the metal

  • Proxmox VEisolated guest per service
  • TerraformAWS and Proxmox providers
  • Ansibleapplication delivery
  • Cost controlsbudgets · right-sizing
  • Prometheusmetrics, both estates
  • Grafanaone view, not two consoles
  • Yours — hardware you own
  • Rented — public cloud
  • Edge — faces the viewer
The boundary is drawn where the money is. Control traffic — catalogue lookups, sign-in, billing — is small and elastic, so it rents well. Media traffic is enormous and steady, so renting it is the single most expensive decision a streaming service makes.

Questions

The things operators ask first

Can we run this as a white-label service for our subscribers?

Yes — the viewer-facing apps and web front end are branded to you, and subscriber identity comes from your systems.

How many edge sites do we need?

That is a topology question rather than a platform one. It follows where your subscribers concentrate and where your peering already is, and it is one of the outputs of discovery.

Does this work alongside a commercial CDN?

Yes, and that is often the sensible first step: serve the in-network baseline yourself and let the existing CDN handle overflow and out-of-network traffic.

Where does your video traffic exit today?

Transit volume, peering arrangements and subscriber count are enough to model what in-network delivery would change.