Network Configuration for Streambox Demos
Use this checklist before a Streambox demo to confirm the network path, permit the required traffic, and complete a realistic end-to-end test. Streambox Encoders and Decoders may be hardware or software products; the network requirements are the same.
Before the demo
☐ Use wired Ethernet where possible. Avoid competing uploads, Wi-Fi, VPNs, or proxies during the test.
☐ Give the receiving device a static or DHCP-reserved private IP address. For P2P Pull, reserve the Encoder's IP address too.
☐ Confirm the assigned destination hostname or IP address and UDP port for this demo.
☐ Verify that upload and download capacity exceed the planned bitrate, then test under realistic network load.
☐ Make sure someone with access to the firewall or router is available during the demo window.
Choose the workflow:
Direct Stream
How it works: The Encoder pushes the stream directly to the Decoder. Enter the Decoder's public IP address as the Encoder destination.
Firewall: In the Decoder network, Allow two-way traffic on 1770/UDP and Port-Forward 1770/UDP to the Decoder's stable private IP address.
Important: LDMP requires two-way UDP access. Plain UDP may use one-way access with reduced reliability. If a different UDP port is assigned, use that port instead.
Cloud / StreamON
How it works: The Encoder pushes the stream to a Streambox Cloud or StreamON Server, which provides session codes for the Decoders. The Decoder uses Session mode or Pull mode.
Firewall: Allow the assigned port in the 1770–1780/UDP range in both directions between the devices and the assigned server. Do not restrict the return source port. Allow the Decoder outbound 80/443 TCP for session setup.
Port-Forwarding: A stateful firewall normally does not require a Port-Forward for this workflow.
P2P Pull
How it works: The Decoder pulls the stream directly from the Encoder. Both devices contact the Streambox Broker, which helps establish the connection.
Encoder firewall: Allow two-way traffic on 1770/UDP and Port-Forward 1770/UDP to the Encoder's stable private IP address.
Both devices: Allow outbound 443/TCP to the confirmed Streambox Broker.
Decoder firewall: A Decoder behind a typical stateful firewall normally needs no Port-Forward. A strict or stateless firewall may require an explicit Allow rule.
Firewall Allow rules and Port-Forward rules are separate requirements. An Allow rule permits traffic through the firewall. A Port-Forward rule sends inbound traffic through NAT to the private IP address of the correct Streambox device.
Server addresses and firewall requirements
Use the hostname when the firewall supports FQDN rules. If the firewall requires fixed-IP allowlisting, confirm the address before the demo because service addresses can change.
Direct Stream destination
Destination: Decoder public IP address supplied by the customer
Used by: Direct Stream
Required rule: Allow the Encoder outbound on the configured UDP port (1770 default). At the Decoder site, Allow inbound on that UDP port and Port-Forward it to the Decoder's stable private IP address. LDMP requires two-way UDP; plain UDP may be one-way with reduced reliability.
Streambox Cloud
US: LiveUS.streambox.com — 44.227.70.150
Europe: LiveEU.streambox.com — 63.32.64.156
Used by: Cloud / StreamON
Required rule: Use only the server assigned for the demo. Allow the Encoder and Decoder 1770–1780/UDP in both directions to the assigned server; do not restrict the return source port. Allow the Decoder outbound 80/443 TCP for session setup. No Port-Forward is normally required with a stateful firewall.
These two Cloud IPs were confirmed on the Streambox service-health page on November 4, 2026. Other regional servers may be assigned.
Customer StreamON Server
Destination: Assigned hostname or IP address
Used by: Private StreamON
Required rule: Allow 1770–1780/UDP in both directions plus outbound 80/443 TCP. For administration, allow 443/TCP. Allow 22/TCP only when SSH is required, and restrict it to approved source IP addresses.
Streambox Broker
Destination: broker.streambox.com — 18.210.176.249
Used by: P2P Pull
Required rule: Allow both devices outbound 443/TCP to the Broker. At the Encoder site, also Allow two-way 1770/UDP and Port-Forward 1770/UDP to the Encoder's stable private IP address. The Decoder normally needs no Port-Forward with a stateful firewall.
Activation Server
Destination: as.streambox.com — 3.225.45.50
Used by: Online activation
Required rule: Allow outbound 80/TCP and 85/TCP. Some licenses reconnect periodically. Offline activation requires no activation-server rule.
Streambox support and updates
Destinations: 184.106.155.61 and 184.106.189.99
Used by: Optional support and updates
Required rule: Enable only when requested. Allow outbound 22/80/443 TCP, then remove temporary access after the support work is complete. Confirm the destination and ports before opening access.
Preflight test
- Confirm the device IP address, gateway, DNS, target address, UDP port, session or DRM code, and workflow mode.
- Run a test at the planned bitrate long enough to expose intermittent congestion.
- Confirm stable audio and video, acceptable delay, and minimal packet loss or recovery events.
- Test under normal network load. Record the working addresses, ports, and firewall rules, then remove temporary access after the demo.
If the test fails
Send Streambox:
— Product and software or firmware version
— Workflow type: Direct, Cloud / StreamON, or P2P Pull
— Source and destination device IP addresses, public IP addresses, and configured UDP port
— LDMP or plain UDP mode
— Configured bitrate, test time, and observed symptoms
— Available firewall or NAT logs
Contact your Streambox representative or support@streambox.com.