Atrium — Hotel Network & Firewall Requirements

One-page allowlist for the hotel's IT department: what the Atrium in-room TV system needs from the network — and what it does not need.

1. Internet allowlist — outbound from the TV VLAN (TCP 443 unless noted)

Plus the basics every Android device needs: outbound DNS (UDP/TCP 53) and NTP (UDP 123) — usually already open.

1a. Streaming service domains (TCP 443)

2. You do NOT need to open these

All guest-information data feeds — weather, traffic / airport drive time, live flight arrivals & departures, and currency exchange rates — are delivered by our cloud platform. The TVs never contact any third-party data provider directly, so no firewall rules are needed for these feeds.

3. Inbound / remote access

None. All management (remote commands, screenshots, log capture, OTA updates) rides on connections the TV itself opens outbound to our servers. No inbound NAT rules, no exposed ports, no remote-desktop software.

4. LAN / VLAN requirements (only for the features you use)

5. Guest casting (CastBridge appliance)

Guest casting lets a guest cast YouTube and other Google Cast apps from their own phone to their room's TV. It runs through a small on-site appliance (CastBridge) with one network leg on the guest Wi-Fi and one on the TV network. Guest phones never talk to TVs: the phone talks only to the appliance, and the appliance talks to the TV on that guest's behalf. Casting therefore needs no router rules, no VLAN changes and no firewall changes. The checklist below is about wireless controller behaviour, not firewall openings.

Guest Wi-Fi checklist (controller settings, not firewall rules)

• Client isolation / AP isolation / peer blocking: must exempt the appliance's guest-leg IP (or MAC address). Guests never need to reach each other, only the appliance.
• mDNS and multicast filtering: UDP 5353 to and from 224.0.0.251 must pass between guest clients and the appliance, in both directions. Controller features named "multicast optimisation", "mDNS snooping", "mDNS gateway" or "broadcast filtering" commonly absorb this traffic; exempt the guest SSID or the appliance.
• No web-only port policy for guests: a cast session opens additional high TCP ports to the appliance after it starts. A policy limiting guests to ports 80/443 lets casting begin and then kills the video seconds later.

TV network checklist

• Multicast between the TVs and the appliance is preferred but not required: where APs or switches drop multicast between wireless and wired devices (common in hotels), the appliance automatically falls back to direct unicast mDNS queries (UDP 5353 to each TV).
• The appliance must reach the TVs on TCP 8008, 8009, dynamic high ports and TCP 5555 (ADB) within the TV segment.

6. Sizing — how much bandwidth do the TVs actually need?

Streaming is the only load that matters (idle TV traffic is a heartbeat every ~2 minutes; app updates can come from a LAN mirror). Netflix's commercial spec of 4 Mbps is per active stream, not per room — it assumes every room streams simultaneously, which never happens. What actually matters:

• Occupancy — only occupied rooms stream.
• Concurrency — at prime time (19:00–22:00) typically 40–50% of occupied rooms are streaming; the rest of the day is far lower.
• Per-stream rate — Atrium TVs are 1080p panels, so streams settle at 3–5 Mbps (no 4K pulls). Plan on 4 Mbps.

Worked example — 100 rooms at 60% occupancy (60 occupied):

Recommendation: add ~30% headroom to the prime-time peak, then add the hotel's own budget for guest Wi-Fi and operations on top — the line should cover that total. For a 100-room property that means 200 Mbps for the TV side at ~60% occupancy (~155 Mbps target) and 300 Mbps for full-occupancy cover (~260 Mbps target). 100 Mbps is a workable floor at ~60% occupancy with a per-TV QoS cap (~5 Mbps per room on the TV VLAN) — adaptive bitrate then steps every stream down gracefully in a freak all-rooms moment instead of anyone buffering. Guest personal devices (phones/laptops on guest Wi-Fi) are usually a larger load than the TVs — the portal's bandwidth calculator takes the hotel's Wi-Fi figure and sizes the whole line.

Appendix A — Free-to-air channel pack (only if used)