Network and Firewall Setup for Streambox Encoders and Decoders


Streambox Encoders and Servers will stream, by default, using port 1770 UDP, and the Decoder will receive on the same port. Data must be allowed through any firewalls in the network path between Encoder and Decoder.

IP Addressing

Encoders and Decoders are not required to have their own dedicatedPublic IP addresses when the stream is crossing the Internet.

Streambox hardware products ship with their network adapters in DHCP mode, which means they will request an address from any network they are connected to.

  • Encoders (hardware and software) are recommended by Streambox to have a local static or reserved IP address, but it is not required. (Encoders using WiFi/3G/4G/BGAN wireless technologies will likely need to be assigned addresses by the WiFi, Mobile, or Satellite Networks.)
  • Decoders (hardware decoders and media players) are required to have a static or reserved IP address, whether local or public, for most workflows.
  • Private Servers such as StreamOn Server or Private Cloud Server must be accessible via the UDP port (usually 1770) used for streaming, as well as web access (TCP Ports 80 and 443).

Firewall Settings for Video Streaming

Firewall settings required can be different for different workflows, so here are some common workflows and their required settings:

1A) Cloud Streaming with Sessions

Typically no firewall setup is required; the Encoder streams out to the Streambox Cloud Server or StreamOn Server on some UDP port in the 1770-1780 range, with metadata set to include the Session DRM (aka Encoder DRM) generated by the Server. The Session ID generated by the Server is put into the Decoder or Media Player, which causes that software to request the stream from the Cloud or StreamOn Server.

1B) StreamOn Server Streaming with Sessions

Typically no firewall setup is required; the Encoder streams out to the StreamOn Server on some UDP port in the 1770-1780 range, with metadata set to include
the Session DRM (aka Encoder DRM) generated by the Server. The Session ID generated by the Server is put into the Decoder or Media Player, which causes that software to request the stream from the StreamOn Server.

In the latter case, both Server and Decoder will need to contact the helper server Broker.streambox.com to facilitate the connection of the stream.

2) Direct Streaming

This is our legacy mode in which the stream is "pushed" from Encoder to Decoder/Player. The Encoder user puts the public IP of the Decoder in their settings as the Destination. The stream goes out through a UDP port, usually our default of 1770.

The firewall at a receiving location (Decoder/Media Player) should be set with a port forward (a.k.a. port filter) so that all traffic received from the internet that's been sent to port 1770 UDP must be forwarded to the private IP of the decoder. This setting must allow both incoming and outgoing traffic. Port Forwarding tends to require that the receiving machine (Decoder/Server/Media Player) must have a static IP address on its private network. Alternatively, Network Address Translation (NAT) may be used so that a decoder may reliably be contacted through a public IP address.

NOTE: Port Forwarding/Filtering is required in addition to allowing a Port through the firewall. The Firewall must not only allow the data through, but it must be told where to send the data inside the private network.

For example: a Decoder has a static private IP address of 192.168.10.10. In the firewall settings, the user (or IT person) must set port-forwarding in the firewall so all UDP packets sent from Any address on the internet to Port 1770 on the firewall will be forwarded to 192.168.10.10 on port 1770/udp.

3) P2P Point-to-Point

Starting in 2023, Streambox released the new Point-to-Point (P2P) technology which combines the simplicity of Streambox Sessions with the direct stream workflow.

In this case, it's the Encoder that will need the Port Forwarding setup described above. The firewall at a sending location should be set with a port forward (a.k.a. port filter) so that all traffic received from the internet that's been sent to port 1770 UDP must be forwarded to the private IP of the Encoder. This setting must allow both incoming and outgoing traffic. Port Forwarding tends to require that the sending machine must have a static IP address on its private network. Alternatively, Network Address Translation (NAT) may be used so that a decoder may reliably be contacted through a public IP address.