Origin Advanced Settings

You can configure advanced Origin settings, such as custom ports, timeouts, and additional security options, under Advanced Settings.

Please note that not all CDN providers support every advanced setting.

Editing Origin Advanced Settings #

To edit the advanced settings of an Origin:

1. Navigate to your Service.
2. In the sidebar, under Origin Management, select Origins.
3. Identify the Origin you want to update and click the Edit icon.
4. In the Origin form, click Advanced Settings.
5. Configure the advanced settings as required:

• HTTP PORT and HTTPS PORT – Define custom ports for the HTTP and HTTPS protocols. The default values are 80 for HTTP and 443 for HTTPS.
• Timeout – Set a custom timeout for requests to the Origin.
• Verify TLS – Enable or disable TLS certificate verification for the Origin.
• Private S3 – Configure access to a private S3 bucket. See Private S3 Bucket Origin below.

Private S3 Bucket Origin #

To restrict public access to your content, you can configure your Origin as a private S3 bucket. In this case, the CDN requires an Access Key and Secret Key to retrieve content from the bucket.

Configuring a Private S3 Origin #

1. Enable Private S3 in the Origin Advanced Settings as described above.
2. Click Update Credentials.
3. Enter your Access Key and Secret Key, then click Save.

Notes #

• The provided Access Key and Secret Key must have permission to access the private S3 bucket.
• When using an AWS S3 bucket, the bucket domain must include the region in the following format: <bucket-name>.s3.<aws-region>.amazonaws.com. For example: my-bucket.s3.us-east-1.amazonaws.com.
• If you are using CloudFront, you also need to define a bucket policy, as described below. CloudFront only supports private AWS S3 buckets, not other types of S3-compatible storage.

Setting Up a Bucket Policy for CloudFront #

To allow CloudFront to access a private S3 bucket, you must configure an access policy for the bucket.

You can grant access at either:

• Distribution level – Restricts access to a specific CloudFront distribution.
• AWS Account level – Allows access for all Flumotion Smart Multi CDN services under a specific AWS account.

Example Policy #

Replace BUCKET_NAME with your S3 bucket name and ACCOUNT_ID with the AWS account ID of your CloudFront distribution.

{
  "Version": "2008-10-17",
  "Id": "PolicyForCloudFrontPrivateContent",
  "Statement": [
    {
      "Sid": "AllowCloudFrontServicePrincipal",
      "Effect": "Allow",
      "Principal": {
        "Service": "cloudfront.amazonaws.com"
      },
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::BUCKET_NAME/*",
      "Condition": {
        "StringLike": {
          "AWS:SourceArn": "arn:aws:cloudfront::ACCOUNT_ID:distribution/*"
        }
      }
    }
  ]
}