---
title: Origin Advanced Settings
description: "You can configure advanced Origin settings, such as custom ports, timeouts, and additional security options, under **Advanced Settings**. Please note that not all CDN providers support every advanced setting. #### Editing Origin Advanced Settings To edit the advanced settings of…"
url: "https://www.flumotion.com/docs/multiCDN/origin-advanced-settings/"
updated: "2026-09-01"
category: Guides / Origins
---

# Origin Advanced Settings

You can configure advanced Origin settings, such as custom ports, timeouts, and additional security options, under **Advanced Settings**.

Please note that not all CDN providers support every advanced setting.

#### Editing Origin Advanced Settings

To edit the advanced settings of an Origin:

1. Navigate to your **Service**.
2. In the sidebar, under **Origin Management**, select **Origins**.
3. Identify the Origin you want to update and click the **Edit** icon.
4. In the Origin form, click **Advanced Settings**.
5. Configure the advanced settings as required:

- **HTTP PORT** and **HTTPS PORT** – Define custom ports for the HTTP and HTTPS protocols. The default values are `80` for HTTP and `443` for HTTPS.
- **Timeout** – Set a custom timeout for requests to the Origin.
- **Verify TLS** – Enable or disable TLS certificate verification for the Origin.
- **Private S3** – Configure access to a private S3 bucket. See **Private S3 Bucket Origin** below.

#### Private S3 Bucket Origin

To restrict public access to your content, you can configure your Origin as a **private S3 bucket**. In this case, the CDN requires an **Access Key** and **Secret Key** to retrieve content from the bucket.

#### Configuring a Private S3 Origin

1. Enable **Private S3** in the Origin Advanced Settings as described above.
2. Click **Update Credentials**.
3. Enter your **Access Key** and **Secret Key**, then click **Save**.

##### Notes

- The provided **Access Key** and **Secret Key** must have permission to access the private S3 bucket.
- When using an AWS S3 bucket, the bucket domain must include the region in the following format: `<bucket-name>.s3.<aws-region>.amazonaws.com`. For example: `my-bucket.s3.us-east-1.amazonaws.com`.
- If you are using **CloudFront**, you also need to define a **bucket policy**, as described below. CloudFront only supports private **AWS S3** buckets, not other types of S3-compatible storage.

#### Setting Up a Bucket Policy for CloudFront

To allow CloudFront to access a **private S3 bucket**, you must configure an **access policy** for the bucket.

You can grant access at either:

- **Distribution level** – Restricts access to a specific CloudFront distribution.
- **AWS Account level** – Allows access for all **Flumotion Smart Multi CDN** services under a specific AWS account.

##### Example Policy

Replace `BUCKET_NAME` with your S3 bucket name and `ACCOUNT_ID` with the AWS account ID of your CloudFront distribution.

```
{  "Version": "2008-10-17",  "Id": "PolicyForCloudFrontPrivateContent",  "Statement": [    {      "Sid": "AllowCloudFrontServicePrincipal",      "Effect": "Allow",      "Principal": {        "Service": "cloudfront.amazonaws.com"      },      "Action": "s3:GetObject",      "Resource": "arn:aws:s3:::BUCKET_NAME/*",      "Condition": {        "StringLike": {          "AWS:SourceArn": "arn:aws:cloudfront::ACCOUNT_ID:distribution/*"        }      }    }  ]}
```