Access Control with Caching and CDN

Hi,

Is there any way that you can have GeoIP, Domain & IP access control restriction when running a proper Kaltura Setup with Cache-Control Caching, and a CDN (Cloudfront)?

The whole Access-Control Service seems to stop working when a Kaltura Instance is put behind a CDN with proper caching.

Obviously having the players and Manifest requests not caching and getting every single player and manifest request sent to our system is not an option as this would kill our servers.

I would really appreciate a reply.

Kind Regards,
Andrew