Domains and Ports that Must Be Accessible to Video Cloud

Note on managed player releases

Brightcove generally allows about a week for customers to try a pre-release before a managed release begins. Managed release is the process of running a controlled A/B test across production web sites. The managed release system allows loading the new version of the player on a small percentage of page loads for a short period - usually a few hours. During this time, Brightcove collects data so the performance of the old and new versions can be compared. The distribution of number of errors, number of minutes viewed, number of ad starts, and several other metrics are all examined. Brightcove looks at distributional counts and summaries of the data, but also at outliers, sites that have greater than average differences in the tracked metrics. After careful review of all the data, either the update is committed or rolled back. If it is decided to roll it back, small updates may be made to fix an identified problem and then the managed release is re-run.

The list of key URLs for Video Cloud operations are (all over http port 80 and https port 443):

Key domains - wildcards

The table below list key domains for Brightcove with wilcards.

Protocols for Live

Specific domains

If wildcarding is not possible, individually list the following domains (all over http port 80 and https port 443):

Please understand that specific IP addresses are not available, as they may change at any time without notice. In addition, as we add new features or modify existing features, this list may change.

Content security policies

Brightcove's current set of CSPs:

default-src 'self';
script-src 'self' players.brightcove.net vjs.zencdn.net;
connect-src 'self' *.boltdns.net players.brightcove.net edge.api.brightcove.com *.akamaihd.net;
img-src 'self' players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com;
style-src 'self' players.brightcove.net 'unsafe-inline' ;
frame-src 'self' players.brightcove.net;
media-src 'self' blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; 
font-src  'self' data: players.brightcove.net 'unsafe-inline';
worker-src blob:;