Viewer URL parameters & transport

Query parameters you can append to a Wallflower.tv watch or broadcast URL, and how the origin → edge transport hint (xport) works. Developer reference.

Watch / broadcast selectors

Parameter	Example	Meaning
`stream`	`?stream=ab5ki`	Broadcast as a given 5-char stream id (broadcaster path).
`node`	`?node=<52-char key>`	Watch a broadcast by its stream key — the broadcaster's Ed25519 public key rendered as `base32(publicKey)`, minted in the browser. Your browser resolves the key to a live origin off the public Mainline DHT (a signed pkarr record; no directory server). The key is itself the capability to watch (a legacy `?luke=` alias resolves the same DHT path). Access is token-gated at the relay, but the Worker auto-mints your subscribe token from the key — you never handle a token. This is distinct from the origin relay's own iroh EndpointId, which is a transport address, not the stream name.
`publish`	`?publish=1`	Go live as a node id: the browser mints an Ed25519 key, assigns an origin, and self-publishes a signed pkarr record to the Mainline DHT so `?node=` viewers can resolve it. The broadcaster connects with a publish-scoped token (`put:[key]`) — the origin is gated.
`geo`	`?geo=47.60,-122.33`	Testing override for the viewer/broadcaster location, forwarded to the broker as `hints.geo` so geo-nearest routing can be exercised from anywhere (normally derived from `request.cf`). Works on the origin-placement, fleet-watch, and `?node=` edge-placement paths. Since 2026-07-19 this drives real cross-fleet playback: geo-steering a fleet-watch (Model A) viewer to a fleet that isn't the broadcaster's origin makes that fleet cluster-pull the origin over `host:port` and play — so cross-fleet edge serving (Mode B) is automatic under geo routing, chosen by the broker per viewer with no override needed.
`origin`	`?origin=host:port`	Testing override on the fleet watch path: force the `host:port` origin the edge pulls from (normally derived by the Worker). The old `&origin=HOST:PORT` browser form of the retired luke directory gateway is gone; on the `?node=` path the origin comes from the signed DHT record, not this param.
`xport`	`?xport=iroh`	Selects the origin → edge transport. See below.

`xport` — origin → edge transport hint

On a cross-fleet (geo-routed edge) or enterprise watch URL, xport tells the moqcdn CDN how the edge should pull the stream from the origin:

Value	Effect
`iroh`	The edge pulls from the origin over iroh — mainline-DHT discovery, NAT-friendly, so the origin needs no public host:port.
(absent / any other value)	Default: the edge pulls over native QUIC by `host:port`. The request is byte-identical to a URL with no `xport` at all.

Gated-origin caveat (2026-07). Origins are now token-gated, and the edge's pull token reaches the origin only over the host:port QUIC connect. So on the live fleet a cross-box pull uses host:port even when ?xport=iroh is requested — the iroh transport does not yet carry the pull token to a gated origin. Iroh origin-pull stays the design target for NAT'd origins (the current fleet is publicly reachable); the fix is deferred.

How the hint travels (it is forwarded verbatim, never interpreted client-side):

Mode B (geo-routed cross-fleet edge):
  browser URL ?xport=iroh
    -> GET /api/streams/<id>/route?geo=…&xport=iroh          (player)
    -> Worker /route reads xport, forwards it to the broker with origin + pull
    -> broker hands the geo-nearest edge the origin + xport                (server-side)

Mode C (enterprise, on-net edge):
  browser URL ?xport=iroh
    -> GET https://<relay>/assign?broadcast=…&xport=iroh        (browser preflight)

Two things people get wrong:

The Connected: <edge>:<port> / Mode: WebTransport line is the browser ↔ edge hop, and it is always WebTransport — regardless of xport. It is not a fallback indicator. xport only affects the separate origin → edge hop.
xport is a non-secret transport hint. It changes no tokens and no auth. Access is still gated by the per-broadcast token, and xport never affects media encryption (the MoQplay fleet path stays end-to-end encrypted with a content key no relay ever sees — so a stream is watchable only from the app that created it; the ?node= path stays not media-encrypted).

"Origin link" stats line

For a cross-cluster watch, the player confirms the actual origin → edge transport by polling a public, read-only endpoint on the edge (~1.5 s after connect, re-polling every 5 s; the line is hidden on unknown or any error):

GET https://<edge-host>/edge_xport?broadcast=<rawBroadcastId>
  (port 443, no auth, CORS *; the broadcast id is substring-matched)

-> { "xport": "iroh" | "quic" | "unknown", "origin": "<host:port>" }

It renders one of:

`xport`	Stats line shown
`iroh`	`Origin link: iroh / DHT`
`quic`	`Origin link: <origin> (QUIC)`
`unknown` / error	(line hidden)

Viewer URL parameters & transport

Watch / broadcast selectors

xport — origin → edge transport hint

"Origin link" stats line

See also

`xport` — origin → edge transport hint