Layer-7 platform

Cachivo L7

High-performance Layer-7 protection for streaming infrastructure. A distributed reverse-proxy platform for high-bandwidth services, streaming, APIs, portals and applications that need their real servers kept hidden and flexible traffic routing.

Open the panel See the architecture
Sits between your customers and your production infrastructure — keeping your backend servers isolated from direct public access.
Pricing

Three prices, and what each one buys

Everything is prepaid from your balance. There is no contract, no setup fee and no per-request charge — you fund a balance, and the platform draws from it.

Base plan

€1,500 per server, per month

  • One protected server: a hostname on our edge, with your backends behind it.
  • Multiple backends per server, load-balanced, with a failing one taken out automatically.
  • Layer-7 filtering, WAF, per-IP rate limits, country and user-agent rules.
  • Credential-sharing and concurrent-stream limits.
  • 1 Gbps of aggregated traffic included, renewed with the server every month.
  • Up to 25 of your own domains (BYOD) included, with the certificates issued and renewed for you.
  • Traffic, viewer and channel analytics.

Paid from your balance. The server starts automatically as soon as the first month is covered, and renews every month the same way. If the balance is short at renewal it pauses — it is not deleted — and turns back on by itself once you top up.

Add-on · Aggregated traffic

€60 per extra 1 Gbps, per server, per month

  • Every server already includes 1 Gbps; add more when your audience needs it.
  • Bought per server and held by that server — it cannot be shared with another.
  • It is a ceiling, not a meter: nothing is used up as video flows — it is the most that server may carry at once. Up to 10% over is tolerated; beyond that, a 15-minute countdown starts and then new connections are refused until you add more.
  • Renews monthly together with the server. Buy it mid-month and you only pay for the days left until that server's renewal date.

All traffic through our network counts as aggregated traffic — playlists and API calls included. You buy bandwidth for everything your servers send through us.

Add-on · Iron Shield

€0 per server, per month

  • Your subscribers' credentials are never exposed in their playlists.
  • A link shared or leaked out of a playlist stops working — the account stays yours.
  • Compromised-account detection, and blocking of DMCA operators and anti-piracy companies across our network.
  • Renews with the server. Added mid-month, you pay only for the days left.
How protection is priced

Three modes, and only two of them cost bandwidth

Redirect only

Free. Viewers are sent straight to your own stream servers. We carry no video, so there is nothing to charge for — but your stream servers' addresses are visible to players.

Full protection

Uses bandwidth. Every viewer's video goes through our protection network, so your stream servers are never reachable by a player. Size the server's bandwidth to the traffic it actually serves.

ASN filter only

Uses bandwidth, for a slice. Everyone is redirected by default; only viewers on the networks you list are relayed through us. Protect the networks causing you trouble without paying to relay everybody.

Worked example

What a month actually costs

Three servers, one of them fully protected at 3 Gbps and the others running on their included 1 Gbps:

  • 3 × base plan — €4,500/month
  • 2 extra Gbps on the protected server (1 Gbps is included) — €120/month
  • The other two servers — €0 extra, 1 Gbps each included

€4,620 every month, with up to 75 of your own domains across the three servers. Bandwidth added part-way through a month costs only the days left in that server's month.

Before you start

One thing we ask for

A working M3U link directly from your server, with the FULL package, before a server is activated. We fetch it once to see how many channels you run and how many origins sit behind them — which is what decides how much bandwidth a server needs and which networks are worth protecting. We cannot size or route streams we have never seen.

Create an account How the platform works