Manage HLS playback over SSL for Wowza CDN on Fastly in Wowza Streaming Cloud

When you broadcast an HLS live stream using the Wowza Streaming Cloud™ service, you have control over whether or not Secure Sockets Layer (SSL) is used to encrypt the HTTP connections that deliver the stream to viewers. For a stream that passes through Wowza CDN on Fastly stream targets, you can specify whether the stream must be played over HTTPS or whether it can be played over HTTP or HTTPS.

Note: This article applies to Wowza CDN on Fastly stream targets only. To manage HLS playback over SSL for Wowza CDN on Akamai stream targets, see Manage HLS playback over SSL for Wowza CDN on Akamai in Wowza Streaming Cloud.

About SSL playback from Wowza CDN on Fastly stream targets

Live streams delivered from Wowza Streaming Cloud travel across the Internet in two stages to reach their audiences. After Wowza Streaming Cloud transcodes (or passes through) the encoded live source video, it sends the stream to geographically distributed servers called stream targets. Those Wowza CDN on Fastly targets then deliver the live stream to viewers, such as through a hosted webpage or a direct playback URL.

Wowza Streaming Cloud uses the HTTP protocol to make these two outbound network transfers, delivering streams for playback over HLS. For this HTTP delivery, Wowza Streaming Cloud generates a relative playlist, which means that the stream can be viewed over HTTP or HTTPS. The viewer is not restricted to the secured or unsecured protocol.

When you choose to deliver a live stream via Wowza CDN on Fastly stream targets, you can enjoy the default flexibility of relative playlists, or you can control whether the viewer has to use HTTPS to watch the stream.

HLS stream target SSL playback cheat sheet

The following table summarizes how to configure the type of playback you want to support.

Tip: Click the desired result to jump to instructions on how to configure the target with these settings.

Desired result: Force SSL Playback: Relative playlists:
Play HLS over HTTP or HTTPS False (default) True (default)
Play HLS over HTTPS True False

Deliver an HLS live stream that can be played over HTTP or HTTPS

The easiest option is to create a live stream that plays HLS  over HTTP or HTTPS and uses Wowza CDN on Fastly stream targets.

  1. Sign in to Wowza Streaming Cloud.
  2. Click the Live Streams menu, and then click Add Live Stream.
  3. On the Live Stream Setup page, enter a Live Stream Name, choose a Broadcast Location, and then click Next.
  4. On the Video Source and Transcoder Settings page, select the encoder or camera you want to use to connect to Wowza Streaming Cloud.
Note: If your source is Wowza Streaming Engine, you must select No, I want Wowza Streaming Cloud to transcode this stream and/or deliver it to multiple stream targets.
  1. Specify other video source settings, click Next, and complete the steps to finish creating the live stream.
Note: For more information about live stream settings, see the Help panel on the right side of each page.

Wowza Streaming Cloud creates the live stream and displays the Overview tab of the live stream detail page.

  1. Depending on how you want to make the stream available, do one of the following:
  • Use the HLS playback URL to play the stream in a browser or player that supports HLS. Although the playback URL appears as HTTPS, the playback URL can also be accessed using HTTP.
  • If you created a hosted page, click the Hosted Page tab to access and share the hosted page URL. Although the hosted page URL appears as HTTPS, the page can also be viewed using HTTP.
  • If you want to include the stream on an external website (HTTP or HTTPS), use the embed code, which uses a relative URL in the JavaScript call for the player. For example:


Deliver an HLS live stream that can only be played over HTTPS

You can require SSL for live stream HLS playback, if desired.

  1. Create a live stream.
  2. Click Advanced on the menu bar, click Stream Targets, and then select the target for the live stream. It appears as [Live-stream-name] / Stream Target.
  3. Click the Security tab, and then click Edit.
  4. Select Force SSL Playback.
  5. Click Save.
  6. Click the Properties tab, and then click Edit.
  7. Under Playlist, select Enabled for Relative playlists and specify False.
  8. Click Save.