Network Configuration

WATCHOUT uses the network for service control, asset distribution, and time synchronization. Most service-to-service communication is HTTP over TCP; multicast and a few specific UDP protocols handle discovery and timing.

General recommendations

  • Dedicated network. Run WATCHOUT on a closed, dedicated LAN. Do not share the segment with the internet or general office traffic.
  • Wired Ethernet recommended. Wi-Fi works, but with reduced timing accuracy (NTP) and slower asset distribution.

Network hardware

Switches

For most installations, a quality unmanaged gigabit switch is sufficient. For larger or more demanding setups, use managed switches that offer VLANs and QoS.

TypeUse caseRecommended models
Unmanaged GigabitSmall to medium shows (2–8 displays)Netgear GS108, TP-Link TL-SG108, Cisco CBS110
Managed GigabitMedium to large shows, VLANs, QoSCisco CBS250, Netgear GS310TP, Ubiquiti UniFi Switch
10GbEHigh bandwidth (NDI®, 4K+, many outputs)Netgear XS508M, MikroTik CRS305, Ubiquiti UniFi 10G

Disable power-saving features. On managed switches, turn off Green Ethernet, Energy Efficient Ethernet (EEE), and any auto-sleep modes. They interrupt synchronization and cause stuttering.

SMPTE ST 2110

If you are deploying SMPTE ST 2110 (uncompressed video over IP), the switch is no longer a commodity decision. ST 2110 has specific requirements that most office or AV switches do not meet:

  • IGMP v3 with source-specific multicast (SSM) — for managing the many simultaneous multicast flows ST 2110 produces.
  • PTP boundary clock or transparent clock (IEEE 1588 PTPv2) — required for media clock distribution.
  • Line-rate, non-blocking switching — every port at full speed simultaneously.
  • Low, deterministic latency — typically cut-through forwarding.
  • High-bandwidth ports — usually 10, 25 or 100 GbE for production.

Network interface cards

Built-in motherboard NICs (Intel I211, I225, Realtek RTL8125) are typically adequate. For demanding workflows (10GbE, NDI sources), consider dedicated add-in cards:

  • Intel X550-T2 — dual-port 10GbE, excellent driver support.
  • Mellanox ConnectX-3 — high performance, common in broadcast environments.
  • ASUS XG-C100C — cost-effective 10GbE option for smaller budgets.

Multiple NICs

WATCHOUT supports multiple network interfaces on the same node. Each service uses the operating system's routing table to pick the right NIC automatically.

Do not connect two NICs to the same network. Multiple paths to the same subnet confuse the routing layer and can cause discovery and connection issues. Keep each NIC on a distinct network — for example, show control on one and NDI on another.

Cabling

  • Cat 5e — suitable for Gigabit Ethernet up to 100 meters.
  • Cat 6 / Cat 6a — recommended for 10GbE or runs approaching 100 meters with better shielding.
  • Fiber optic (SFP/SFP+) — essential for long runs (over 100 meters) or electrically noisy environments (near LED walls, dimmers).

Discovery

Nodes find each other automatically through multicast on group 239.2.2.2, UDP ports 3011 and 3012. For two nodes to see each other, they must share the same subnet. The subnet boundary depends on the subnet mask — for example, with a /16 mask (255.255.0.0), 192.168.0.34 and 192.168.1.54 are on the same subnet and discovery works between them.

If nodes on the same subnet cannot discover each other, verify that multicast traffic (239.2.2.2, ports 3011 and 3012) is not blocked by the switch or firewall. Some managed switches block multicast by default.

Example layout

  • Subnet mask: 255.255.255.0
  • Producer node: 192.168.1.10
  • Runner nodes: 192.168.1.11, 192.168.1.12, …

Ports and firewall

WATCHOUT Manager adds the necessary Windows Defender Firewall rules every time it starts, so manual firewall configuration is not normally required. The table below documents the ports for reference — for example, when running a third-party firewall or routing through a managed switch.

ServicePortProtocolNotes
Process Manager3017HTTPPer-node control surface
Runner3018HTTPPlayback engine
Operative (external)3019HTTPExternal-integration endpoint
Operative (internal)3020HTTPInternal use only (localhost)
Director3021HTTP + SSEShow state and Runner sync
Loki3022HTTPLogging
Asset Server3023HTTPAsset Manager
WATCHPAX Config3024HTTPWATCHPAX configuration service
NMOS Controller3025HTTPNMOS / ST 2110 control
OSC8000 / 8001UDP / TCPExternal OSC input (both transports)
Art-Net6454UDPDMX over Ethernet
NTP123UDPTime synchronization
PTP319, 320UDPHigh-precision time (IEEE 1588)
Multicast discovery3011, 3012UDP multicast239.2.2.2 — node discovery
mDNS5353UDP multicastService discovery

NDI® is a registered trademark of Vizrt NDI AB.