Required HTTP Headers (CORS)

• Access-Control-Allow-Origin: *

This header allows viblast.com to access the video stream. Otherwise it would be inaccessible due to the same origin policy enforced by modern web browsers. This is called Cross Origin Resource Sharing (CORS). You can read more about it and how to enable it for your server at enable-cors.org

• Access-Control-Expose-Headers: Content-Length
• Access-Control-Allow-Headers: Range

These two headers are not required but highly recommended. They allow viblast to split a single HLS segment into multiple smaller chunks and this leads to higher optimization ratios.

Please note that these headers are required only for the web viblast client. The native clients (iOS, Android) don't require them.

You can use our online validator to check if the requirements are met.

Information regarding how to configure popular HTTP servers to add these headers can be found here.

A Note about MPEG-DASH: Media servers that create DASH streams typically have these headers pre-enabled.