How StreamCatch Works

Explore the technical pipeline behind our high-velocity stream resolution engine, anti-SSRF defense firewall, and ephemeral signed CDN streaming gateway.

URL Ingestion & Protocol Sanitization

Input Validation & Strict HTTPS Enforcement

When an authorized public URL is submitted, the ingestion gateway performs structural schema validation via Zod. Non-HTTPS protocols, direct IP hostnames, malformed characters, and internal cloud metadata requests are blocked at the perimeter.

Anti-SSRF Pre-Flight & Socket Pinning

Deterministic DNS Resolution & RFC 1918 Filtration

StreamCatch executes a DNS pre-flight resolution over IPv4 and IPv6. Every resolved IP address is classified against loopbacks (127.0.0.0/8, ::1), private subnets (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and link-local metadata (169.254.169.254). The verified socket IP is pinned to prevent DNS Rebinding attacks.

Native Stream Inspection & Codec Discovery

Master Framerate & Container Parameter Extraction

The adapter pipeline queries upstream media clusters to inspect original bitrates (up to 18,000 kbps), resolutions (4K UHD, 1080p, 720p), framerates (60fps), and audio codecs (320kbps MP3, 24-bit FLAC, Opus). No generational transcoding degradation is applied.

Cryptographic 5-Minute Ticket Issuance

HMAC-SHA256 Token Binding & Zero Disk Storage

Rather than storing large video files on local disks, StreamCatch generates a cryptographically signed HMAC-SHA256 ticket bound to the verified streamUrl, format, and 5-minute expiration ceiling. Zero user media persists on server disks.

High-Velocity Edge Streaming & Range Support

HTTP 206 Partial Content & CDN Acceleration

Your download streams directly from upstream content delivery networks through our secure streaming gateway. Full HTTP Range requests (206 Partial Content) are supported, enabling instant seeking, pausing, and multi-threaded download acceleration on all devices.

Zero Storage Policy

Downloaded audio and video streams are never written to permanent disk storage. All data is piped ephemerally in transit between upstream CDNs and your browser.

Anti-SSRF v3 Firewall

Pre-flight DNS inspection combined with Undici socket-pinning prevents DNS Rebinding, loopback probes, and unauthorized cloud metadata access.

Bit-Identical Master Codecs

Streams are extracted at native source resolution (1080p, 4K UHD, 60fps, 320kbps MP3) preserving full optical framing and sound fidelity.

Ready to Download?

Paste any public URL, pick your format, and start streaming.