✦ SELF-HOSTED INFRASTRUCTURE PLATFORM

O w n   y o u r   I n f r a s t r u c t u r e
D e l i v e r   w i t h o u t   L i m i t s

OllaNode is a self-hosted infrastructure platform for video, CDN, storage and edge compute — giving developers complete control over how their applications are built, delivered and scaled.

TRUSTED BY TEAMS BUILDING MODERN EXPERIENCES
✓ Full Control ✓ High Performance ✓ Cost Efficient ✓ Built for Scale ✓ Developer First

One platform. Every layer you need.

Everything works together. Everything runs on you.

WHY OLLANODE

Own your Infrastructure.
Deliver without Vendor limits.

Building modern video and media applications shouldn't mean stitching together a dozen expensive SaaS vendors or surrendering control of your data and bandwidth. OllaNode provides a unified, self-hosted platform where video processing, CDN delivery, storage, DNS, and edge compute run directly on hardware you control.

Self-Hosted Platform Self-Hosted • Apache-2.0 Licensed Apache-2.0 • API & Agent Native API Native
01 UNIFIED ARCHITECTURE

One control plane for your entire media & edge stack

Replace fragmented SaaS vendors with a unified DDD Rust core. Transcoding, storage, CDN delivery, DNS, and edge isolates work together natively without third-party API dependencies or sync delays.

Compiled Rust coreEvent-driven coreDurable SQL store
02 INFRASTRUCTURE OWNERSHIP

Zero metered markup & predictable infrastructure costs

Run on your own bare-metal or cloud servers. OllaNode is self-hosted software with no billing system, no per-minute transcoding fees, and no per-gigabyte bandwidth surcharges.

Self-HostedNo Metered PlansYour Hardware
03 DEVELOPER & AGENT FIRST

Built for automated workflows & AI-agent execution

API-first architecture with OpenAPI 3.1 definitions, Model Context Protocol (MCP) support, approval-gated actions, capability maps, and tamper-evident audit logging.

OpenAPI 3.1MCP ServerAudit Hash-Chain
04 OPEN SOURCE FOUNDATION

100% Permissive Apache-2.0 open-source dependencies

Engineered on battle-tested, permissively-licensed open source — every component is auditable, with no AGPL and no vendor lock-in.

Apache-2.0No AGPLFull Auditability
ARCHITECTURE & WORKFLOW

How OllaNode works. From ingest to edge.

A unified control plane that orchestrates media transcoding, storage, and global CDN delivery on your own infrastructure — with zero third-party vendor lock-in.

SYSTEM TOPOLOGY ACTIVE v1.0 REST + MCP
Explore Docs →
01 INGEST

Your Application

Web, Mobile & Backend

POST /v1/videos TUS Resumable
REST / SDK
02 CONTROL PLANE

OllaNode Core

Rust Orchestration Hub

Async Event Bus
Job Dispatcher
HMAC Security
Dispatches
YOUR INFRASTRUCTURE FABRIC
Self-Hosted / Cloud Agnostic
Transcoder 360p→4K HLS
➔
S3 Storage AVIF Optimizer
➔
DNS & Routing Port :53 UDP
Edge Pull
03 DELIVERY

Global CDN

Edge Pull Zones

< 150ms Purge Signed Tokens
Stream
04 CONSUMERS

Viewers & Agents

4K Playback + MCP

Instant Buffer MCP Native
PIPELINE EXECUTION LOG
$ System initialized. Awaiting video ingest payload...
event upload_completed
→
step validate
→
step extract_metadata
ready mark_ready
step emit_webhook
4K Natural Alpine Scenery Video Stream
H.264 / AV1 4K @ 60fps 14.8 Mbps
MUTE / SILENT HLS 1080p LIVE ENCODE
00:00 / 00:10
encode transcode
encode generate_hls
step store_assets
←
step transcript
←
step thumbnails
THE VOD PIPELINE

One upload. A full pipeline.

All long-running work is async and runs in worker pools, never in request handlers. Once an upload completes, OllaNode automatically validates media integrity, extracts metadata, transcodes video into adaptive HLS ladders, generates thumbnails and word-level transcripts, stores assets in your object storage, and emits HMAC-signed webhooks.

PIPELINE STAGE 00 / 10
READY TO EXECUTE
DELIVERY & EDGE

Deliver Faster.
Everywhere.

A global edge network and powerful infrastructure to store, optimize and deliver your content with ultra-low latency.

CLICK HEADING TO FLIP CARD ↓
GLOBAL EDGE CDN
01 Flip ↺

CDN Pull Zones

Multi-tenant pull zones at the edge, routed by Host with origin shielding.

request → edge → MISS → HIT · Per-zone TTL · Origin Shielding
FULL DETAIL CDN Pull Zones
Back ↺
  • Multi-tenant routing by Host header with origin shield
  • Instant full cache purge bumping zone cache version
  • Path-granular TTL rules and custom CORS policies
  • Hotlink token signing with expiring HMAC keys
OBJECT STORAGE & ASSETS
02 Flip ↺

Storage + Image Optimizer

Object-storage zones with presigned upload and signed on-the-fly image optimizer.

39 KB JPEG → 2.9 KB WebP · 2000px → 640px (-52% bytes)
FULL DETAIL Storage + Image Optimizer
Back ↺
  • S3-compatible API & TUS multipart direct uploads
  • On-the-fly AVIF & WebP image transformation
  • Up to -52% file size reduction with zero quality loss
  • Expiring HMAC presigned direct upload URLs
DIRECT :53 ENGINE
03 Flip ↺

Authoritative DNS

Serves your zones and records (A/AAAA/CNAME/TXT/MX/NS) straight from the database.

dig demo.ollanode.com · ; SOA · NS · A · HTTPS :53
FULL DETAIL Authoritative DNS
Back ↺
  • High-speed UDP/TCP DNS service on port :53
  • Sub-second cluster database sync with zero lag
  • SOA, NS, A, AAAA, CNAME, TXT, MX record engine
  • Integrated BGP Anycast global routing support
ISOLATE COMPUTE
04 Flip ↺

Edge Functions

Deploy JS/TS and run it at the edge in a sandboxed isolate — no cold container.

GET /_fn/<id> → your code · Sandboxed isolate · 200 OK
FULL DETAIL Edge Functions
Back ↺
  • Lightweight V8 isolates with <5ms cold starts
  • Standard Web APIs (Fetch, Request, Response)
  • Per-request memory isolation & execution limits
  • Low-latency access to edge cache and KV storage
CACHE INVALIDATION
05 Flip ↺

Smart Caching & Real-Time Purging

Multi-tenant caching with sub-150ms instant worldwide cache invalidation.

PURGE /v1/zones/:id/cache · <150ms global propagation
FULL DETAIL Smart Caching & Real-Time Purging
Back ↺
  • Sub-150ms global purge propagation
  • Intelligent stale-while-revalidate caching
  • Zero-downtime cache rollover without stampedes
  • Header-level bypass rules for authenticated calls
EDGE SECURITY
06 Flip ↺

DDoS & WAF Protection

Automated Layer 3/4/7 threat mitigation with rate limiting and origin cloaking.

WAF inspection: 0.8ms · Block · Allow · Rate-limit
FULL DETAIL DDoS & WAF Protection
Back ↺
  • OWASP Core ruleset executed directly at the edge
  • Sliding window IP & token rate limiting
  • Origin shield prevents direct byte requests to backend
  • Cryptographic HMAC headers on upstream calls
AGENT-NATIVE INFRASTRUCTURE

AI agents with human-in-the-loop guardrails.

Agents are API-first citizens with built-in governance. They discover their own capabilities via /v1/whoami, run standard actions freely, but route destructive operations through human approval — backed by a tamper-evident audit trail and a project kill-switch.

Standard Product Actions 200 OK

Agents run read & standard write requests freely within scope (GET /v1/videos, POST /v1/uploads) without human intervention.

Human-Gated Destructive Actions 202 ACCEPTED

Destructive mutations (DELETE /v1/videos, POST /v1/functions) return 202 Pending Approval and require human sign-off with an X-Approval-Id digest.

Tamper-Evident Audit Chain & Kill-Switch

Every mutation logs prev_hash/entry_hash integrity in an immutable chain (/v1/audit/verify), with instant project-wide revocation (/v1/admin/disable-agents).

Awaiting Human Sign-Off
Slack #infra-ops
REQUESTED ACTION · 202 ACCEPTED

DELETE /v1/videos/vid_8f92a1bc & Purge Edge CDN Cache?

Triggered by Transcoding AI Agent (mcp_video_optimizer). Requires human authorization digest (X-Approval-Id) before executing destructive mutation.

Target: api.ollanode.com/v1/videos · Risk Tier: High (Destructive Delete)
FREQUENTLY ASKED QUESTIONS

Got questions? We've got answers.

Clear answers on platform boundaries, licensing, pricing, and infrastructure architecture — straight from the official source.

No — it's a VOD pipeline only. There's no live / RTMP ingest. OllaNode is purpose-built for rock-solid on-demand transcoding, asset generation, private origin shielding, and edge delivery.

HLS today. Segments are already CMAF/fMP4 (DASH-ready packaging); a DASH manifest is the remaining piece. It delivers an adaptive resolution ladder from 360p up to 4K.

It's self-hosted software you run on your own hardware. There's no billing system and no metered plans — the cost is your infrastructure.

AI metadata, speaker diarization, GPU-accelerated H.265, loudness normalization and an AV1 tier are all real but config/hardware-gated and off by default.

Apache-2.0, with permissive-OSS-only dependencies (no AGPL) — every component is permissively licensed and auditable.

Machine-readable at GET /openapi.json (OpenAPI 3.1), with MCP (Model Context Protocol) for agents and full /v1/whoami capability inspection.

Ownership-first software. You bring the VMs and storage, OllaNode provides the platform control plane.

No — agent keys are structurally prevented from holding admin, managing credentials, or accessing billing. Destructive mutations require explicit human approval.

Still have questions?

Can't find what you're looking for? Reach out or dive straight into our technical guides.