Without shielding, every CDN POP that misses its cache asks origin directly. For a popular live segment, dozens or hundreds of POPs may all miss at the same time and all stampede origin with the same request — origin sees N parallel requests for one file. Origin shielding inserts a smaller pool of regional cache servers between edges and origin: each region's POPs only ever ask one shield POP, the shield asks origin once, and the shield then fans out to all the edges in its region.
The architectural pattern reduces origin RPS dramatically. A live event with 5,000 edge POPs and 8 shield regions sees 8 simultaneous origin requests per segment instead of 5,000. The shield POPs are themselves big edge nodes with deep cache, so even if the shield misses, it usually only misses once per segment per region rather than once per POP.
Every major CDN supports shielding as a feature. CloudFront calls it "Origin Shield"; Cloudflare uses "Tiered Cache"; Akamai has "Tiered Distribution"; Fastly calls it "Shielding". For live streaming with high concurrent viewership, shielding is mandatory — without it, even a moderately popular event will hammer origin. For VOD, shielding helps with traffic spikes around new releases. Almost every production OTT streaming service in 2026 runs with some form of shielding enabled.
The book · Volume 3 of 7
Video Streaming: A Complete Guide to Video Delivery: From ABR and CDNs to Players, WebRTC, DRM, and the Economics of Streaming
Origin shielding collapses hundreds of simultaneous edge misses into one request, which is what keeps origin alive during live spikes. This volume covers origin shielding in detail together with CDN cache hierarchies, request collapsing, multi-CDN delivery and the egress costs that shielding changes. Written by Nikolay Sapunov, CEO at Fora Soft.
Live segment requests stampeding your origin on every popular event?
We will review your CDN tiering and give you an origin shielding plan with shield placement, collapsing settings and the expected drop in origin requests and egress. 250+ video products shipped since 2005.
