Digital Signage Network Requirements
Connect Your Displays Reliably
Proper network configuration is essential for reliable digital signage. This guide covers bandwidth requirements, firewall ports, proxy settings, and enterprise network considerations to ensure your displays stay connected and content stays current.
Bandwidth Requirements
Per-Player Bandwidth
| Content Type | Peak Bandwidth | Average Daily |
|---|---|---|
| Images only | 5 Mbps | 50-200 MB |
| Mixed (images + video) | 10-20 Mbps | 200-500 MB |
| Video-heavy (1080p) | 25-50 Mbps | 500 MB - 2 GB |
| 4K video | 50-100 Mbps | 1-5 GB |
| Live streaming | Continuous 5-25 Mbps | N/A |
Bandwidth Calculation
Total Bandwidth = (Content Size × Update Frequency) / Time Window + Overhead
Example: 10 players, 500 MB daily update, 2-hour sync window
Per-player: 500 MB ÷ 7,200 sec = 0.55 Mbps average
Total: 0.55 Mbps × 10 players = 5.5 Mbps minimum
Add 50% overhead: 8.25 Mbps recommended
Content Sync Strategies
| Strategy | Bandwidth Pattern | Best For |
|---|---|---|
| Immediate sync | Burst on update | Few players, small content |
| Scheduled sync | Off-peak hours | Large content, many players |
| Staggered sync | Spread over time | Enterprise, bandwidth limits |
| Differential sync | Changes only | Frequent updates |
Network Architecture
Basic Deployment
┌─────────────────────────────────────────────────────────────────┐
│ BASIC NETWORK SETUP │
│ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ INTERNET │ │
│ └────────────────────────┬────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ ROUTER / FIREWALL │ │
│ │ Ports: 443 (HTTPS), 80 (HTTP) │ │
│ └────────────────────────┬────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ SWITCH │ │
│ └───────┬────────────┬────────────┬───────────────────────┘ │
│ │ │ │ │
│ ▼ ▼ ▼ │
│ ┌──────────┐ ┌──────────┐ ┌──────────┐ │
│ │ Player 1 │ │ Player 2 │ │ Player 3 │ │
│ │ Display │ │ Display │ │ Display │ │
│ └──────────┘ └──────────┘ └──────────┘ │
│ │
└─────────────────────────────────────────────────────────────────┘
Enterprise Deployment
┌─────────────────────────────────────────────────────────────────┐
│ ENTERPRISE NETWORK │
│ │
│ ┌─────────────────┐ ┌─────────────────────────────────┐ │
│ │ INTERNET │ │ SIGNAGE CLOUD │ │
│ │ Connection │◄──►│ • CMS │ │
│ └────────┬────────┘ │ • Content CDN │ │
│ │ │ • API Services │ │
│ ▼ └─────────────────────────────────┘ │
│ ┌─────────────────────────────────────────────────────────┐ │
│ │ ENTERPRISE FIREWALL │ │
│ │ Outbound: 443, 80 │ DNS: 53 │ NTP: 123 │ │
│ └────────────────────────┬────────────────────────────────┘ │
│ │ │
│ ┌───────────────┼───────────────┐ │
│ │ │ │ │
│ ▼ ▼ ▼ │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │
│ │ VLAN 10 │ │ VLAN 20 │ │ VLAN 30 │ │
│ │ Lobby │ │ Offices │ │ Signage │ │
│ │ Displays │ │ Displays │ │ Dedicated │ │
│ └─────────────┘ └─────────────┘ └─────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────┘
Firewall Configuration
Required Ports (Outbound)
| Port | Protocol | Purpose | Required |
|---|---|---|---|
| 443 | TCP | HTTPS (primary communication) | Yes |
| 80 | TCP | HTTP (redirect to HTTPS) | Recommended |
| 53 | UDP/TCP | DNS resolution | Yes |
| 123 | UDP | NTP time sync | Recommended |
SignageStudio Cloud Endpoints
| Endpoint | Purpose | Port |
|---|---|---|
*.signage.me | Main application | 443 |
*.signagecdn.com | Content delivery | 443 |
api.signage.me | API services | 443 |
ws.signage.me | WebSocket (real-time) | 443 |
Firewall Rule Example
# Allow SignageStudio cloud access
ALLOW OUTBOUND TCP 443 TO *.signage.me
ALLOW OUTBOUND TCP 443 TO *.signagecdn.com
ALLOW OUTBOUND UDP 53 TO dns-servers
ALLOW OUTBOUND UDP 123 TO ntp-servers
Common Firewall Platforms
| Platform | Configuration Location |
|---|---|
| pfSense | Firewall → Rules → LAN |
| Cisco ASA | access-list configuration |
| Fortinet | Policy & Objects → IPv4 Policy |
| Palo Alto | Policies → Security |
| Windows Firewall | Outbound Rules |
| UFW (Linux) | ufw allow out to any port 443 |
Proxy Configuration
Supported Proxy Types
| Type | SignageStudio Support |
|---|---|
| HTTP Proxy | Full support |
| HTTPS Proxy | Full support |
| SOCKS5 | Limited (Windows only) |
| Transparent Proxy | Works automatically |
| Authenticated Proxy | Supported |
Player Proxy Settings
Windows Player:
Settings → Network → Proxy Configuration
- Proxy Host: proxy.company.com
- Proxy Port: 8080
- Username: (if required)
- Password: (if required)
Linux/Raspberry Pi:
# /etc/environment
HTTP_PROXY=http://proxy.company.com:8080
HTTPS_PROXY=http://proxy.company.com:8080
NO_PROXY=localhost,127.0.0.1
Proxy Bypass
Content that should bypass proxy:
| Address | Reason |
|---|---|
localhost | Local services |
127.0.0.1 | Loopback |
*.local | Local network |
| Internal IPs | On-premise servers |
Network Security
Recommended Network Isolation
| Approach | Security Level | Complexity |
|---|---|---|
| Shared network | Low | None |
| Separate VLAN | Medium | Low |
| Dedicated network | High | Medium |
| Air-gapped (offline) | Highest | High |
VLAN Configuration
VLAN 100 - Digital Signage
- IP Range: 10.100.1.0/24
- Gateway: 10.100.1.1
- DHCP: 10.100.1.100-200
- Outbound: HTTPS only
- Inbound: None (or management only)
Security Recommendations
| Recommendation | Implementation |
|---|---|
| Isolate players | Dedicated VLAN |
| Outbound only | Block inbound connections |
| Limit destinations | Whitelist cloud endpoints |
| Use HTTPS | All communication encrypted |
| Disable unused ports | Physical port security |
| Monitor traffic | Alert on anomalies |
DNS Requirements
Required DNS Resolution
| Hostname | Purpose |
|---|---|
*.signage.me | Cloud services |
*.signagecdn.com | Content CDN |
time.google.com | NTP (or equivalent) |
8.8.8.8 / 1.1.1.1 | Public DNS (fallback) |
Internal DNS
If using internal DNS, ensure:
- External domains resolve correctly
- No split-horizon issues with cloud services
- DNS caching configured appropriately
DNS Troubleshooting
# Test DNS resolution
nslookup signage.me
nslookup cdn.signagecdn.com
# Test with specific DNS server
nslookup signage.me 8.8.8.8
Quality of Service (QoS)
Traffic Classification
| Traffic Type | Priority | DSCP Marking |
|---|---|---|
| Content sync | Normal | CS0 (Best Effort) |
| Real-time commands | High | CS3 / AF31 |
| Live streaming | Highest | EF |
| Reporting/telemetry | Low | CS1 |
Bandwidth Allocation
Total Signage Bandwidth: 50 Mbps
Priority Queue (25%): 12.5 Mbps
- Live streaming
- Real-time updates
Standard Queue (60%): 30 Mbps
- Content downloads
- Standard sync
Background Queue (15%): 7.5 Mbps
- Telemetry
- Reporting
- Logs
Offline Operation
Local Caching
SignageStudio players cache content locally:
| Player | Cache Location | Typical Size |
|---|---|---|
| Windows | C:\ProgramData\SignageStudio | 5-50 GB |
| Android | /data/data/com.signage | 2-16 GB |
| Raspberry Pi | /home/pi/.signage | 2-32 GB |
| Linux | /var/signage | 5-50 GB |
Offline Duration
| Scenario | Player Behavior |
|---|---|
| Brief outage (minutes) | Continues normally from cache |
| Extended outage (hours) | Plays cached content |
| Long outage (days) | Expires based on schedule |
| Permanent offline | Requires offline configuration |
Offline Content Strategy
| Strategy | Configuration |
|---|---|
| Cache everything | All scheduled content downloaded |
| Essential only | Only default/fallback content |
| Time-based | Content for next X days |
| Size-limited | Most recent until limit |
Troubleshooting
Connectivity Tests
# Test basic connectivity
ping signage.me
# Test HTTPS connection
curl -I https://api.signage.me/health
# Test WebSocket
wscat -c wss://ws.signage.me
# Check firewall (from player)
nc -zv signage.me 443
# Trace route
traceroute signage.me
Common Issues
| Issue | Cause | Solution |
|---|---|---|
| Can't connect | Firewall blocking | Add port 443 rule |
| Slow downloads | Bandwidth limited | Schedule off-peak sync |
| Intermittent | WiFi interference | Use wired Ethernet |
| Proxy errors | Auth required | Configure proxy credentials |
| Certificate errors | SSL inspection | Add exception or bypass |
Frequently Asked Questions
Next Steps
- Security Best Practices - Network security
- Troubleshooting - Connectivity issues
- Player Specifications - Hardware requirements
- API Reference - Integration endpoints
Network requirements current as of February 2026. Check with your IT team for specific enterprise requirements.