(> 10 Gbps): Envoy + distributed cache (e.g., NFS/Alluxio) + TLS offload NICs Bottom line: An SSL video proxy is powerful for control and caching but adds complexity and latency. Start with nginx, test with a single HLS stream, then scale cache and SSL termination separately. Always monitor TLS handshake overhead – it can kill live video performance.
server listen 443 ssl http2; server_name proxy.mycompany.com; ssl video proxy
# Proxy certificate (signed by corporate CA) ssl_certificate /etc/nginx/ssl/proxy.crt; ssl_certificate_key /etc/nginx/ssl/proxy.key; (> 10 Gbps): Envoy + distributed cache (e
(1–10 Gbps): HAProxy + Varnish cache + automated cert renewal test with a single HLS stream