WHEP Gateway v1.10.1

Stream live video to any web browser via WebRTC/WHEP. 30-day Pro trial unlocks NDI, SRT and WHIP ingest, NDI/OMT output and RTMP/SRT restream. Upgrade to Ultra for DeckLink, AJA capture and DVR recording.

Dashboard on a customer's Intel Ultra 9 285 + RTX 2000E + AJA Corvid 88 workstation — AJA SDI on NVENC, two NDI channels on NVENC and Intel QSV, Ultra tier, full stack in the footer

PRO vs Ultra

Both tiers ship on the same ISO. PRO covers full broadcast ingest and output. Ultra adds capture cards, DVR recording, and Broadcaster. A 30-day trial unlocks every PRO feature so you can decide which tier fits.

Ultra is a superset of PRO — all PRO features are included in Ultra.

---

What It Does

The WHEP Gateway bridges video sources to standard WebRTC/WHEP, so anyone with a web browser can watch live streams — no plugins, no apps, no downloads.

• OMT, SRT, WHIP & NDI Ingest: PRO Receive OMT sources auto-discovered on your network plus SRT streams, WHIP ingest, and NDI streams
• DeckLink & AJA Capture: ULTRA Blackmagic SDI/HDMI and AJA Kona/Corvid capture cards
• DVR Recording & Playback: ULTRA Record channels to disk with configurable retention. Viewers can rewind and scrub backwards from the watch page with 1x/2x/4x playback speed and instant seek (~50ms). Setup wizard offers software RAID (0/1/5/10) when multiple disks are detected
• WHEP Browser Playback: Each channel gets a shareable watch URL that works in any modern browser
• WHIP Push Output: Push channels to WHIP-compatible CDNs and ingest endpoints
• RTMP & SRT Restream: PRO Push to YouTube, Twitch, or any RTMP/SRT endpoint
• NDI & OMT Output: PRO Send channels back to the network as NDI or OMT streams
• Multi-Codec Transcoding: H.264, HEVC, AV1 with software encoding and GPU hardware acceleration (Intel QSV/VAAPI, NVIDIA NVENC, AMD AMF)
• Web Dashboard: Channel management, live preview, multiview grid, real-time CPU/RAM/network stats
• Cloudflare Tunnel: Stream to remote viewers with zero port forwarding — no account required
• WebSocket Relay: Automatic fallback for viewers behind strict firewalls
• Email Alerts: Get notified when channels fail or sources disappear

Channel cards with the outputs and recording wired up — AJA capture with NDI output and a live DVR window, NDI source with OMT output. Every action (preview, watch link, REC, STOP DVR, REWIND, EDIT, LOG, DEL) is one click from here.

Create Channel — full options panel: Discovered Sources / SRT Ingest / WHIP Ingest tabs, every encoder, bitrate up to 100 Mbps custom, keyframe interval, Opus audio, WHEP viewer password, WHIP push output. Advanced encoding settings collapsible at the bottom.

Edit Channel — same panel populated with an active channel. Adds RTMP/SRT restream outputs, NDI & OMT network output, and DVR recording (Ultra) further down.

Scrolling further in the same dialog — NDI Output and OMT Output are simple checkbox + name fields (zero encoding overhead, raw frames forwarded). Same panel also holds WHIP push, RTMP/SRT restream, DVR recording ULTRA and AJA SDI playout ULTRA.

DVR Recording & Playback ULTRA

Enable DVR on any channel to record a rolling buffer of video and audio to disk. Viewers can rewind the live stream directly from the watch page — no separate VOD system needed.

• Instant rewind: drag the timeline to scrub back through recorded footage with ~50ms seek latency
• Variable speed: play back at 1x, 2x, or 4x speed — audio is muted at fast speeds
• Seamless live return: click the LIVE button to switch back to real-time WebRTC with sub-second latency
• Configurable retention: set how many minutes of video to keep per channel (default 30 min)
• One-click recording: hit the REC button on the dashboard to save an MKV file to local storage
• Software RAID: setup wizard offers RAID 0/1/5/10 when multiple disks are detected, recommended for recording workloads

Watch page — live WebRTC with DVR timeline visible, 1x/2x/4x speed controls, LIVE indicator

DVR rewind — timeline scrubbed back ~56 minutes, playing recorded footage via WebSocket + WebCodecs

Use Cases

Multiview — 2x2 monitoring wall on Kevin's box with four live tiles: AJA SDI on H.264 NVENC, NDI via AV1 NVENC, NDI via Intel QSV, NDI via libx264. 1, 3x3 and 4x4 layouts also available.

Live hardware telemetry

The Hardware tab gives you live thermals, CPU, GPU encoder utilisation, fan, power, clocks, NIC throughput and NVMe stats — with five-minute sparklines on every reading. Useful for confirming the right hardware path is in use and for catching thermal trouble before it bites.

Hardware telemetry — Intel Core Ultra 9 285 (24 threads), NVIDIA RTX 2000E Ada Generation with live encoder utilisation (NVENC busy), Intel Arrow Lake-S iGPU detected for QSV/VAAPI

---

1 Install the Appliance

The gateway ships as a bootable Linux ISO. Flash it to a USB drive and boot on any x86_64 PC, NUC, or server.

Flash the ISO

• Download the ISO (1.6 GB)
• Flash to a USB drive using Rufus (Windows) or balenaEtcher (Windows/Mac/Linux)
• Boot your target machine from USB

Live Boot & Setup

The ISO boots into a live environment. A setup wizard runs on the console to configure hostname, admin password, GPU encoding, TLS mode, and optional disk RAID.

Install to Disk

To install permanently, run install-to-disk from the console (or use the setup wizard). This copies the live system to a local disk so settings persist across reboots.

If multiple disks are detected, the setup wizard offers software RAID configuration before installation:

• RAID 0 — striping across 2+ disks for maximum write speed (no redundancy)
• RAID 1 — mirroring across 2 disks for full redundancy
• RAID 5 — striping with parity across 3+ disks (survives 1 disk failure)
• RAID 10 — striped mirrors across 4+ disks for speed and redundancy

RAID is recommended for DVR recording workloads. GRUB is installed on all member disks so the system can boot from any surviving disk.

First-Boot Services

After setup, the appliance will:

• Auto-detect your GPU (Intel VAAPI, NVIDIA NVENC, AMD AMF)
• Generate a self-signed TLS certificate
• Start the gateway service and display the dashboard URL on the console

---

2 Open the Dashboard

Open a web browser on any device on the same network and go to:

---

3 Configure HTTPS

Open Settings → TLS / HTTPS in the dashboard. Choose one of these modes:

The Settings tabs

One left-nav, every operator surface — in the same order as on the appliance. Settings reload live unless the panel says otherwise.

Connectivity — gateway status, external reachability probe, multi-NIC management (mark NDI-only NICs as “never default” so DHCP can’t steal the internet route), and a one-click firewall.

TLS / HTTPS — pick a mode in one click. Cloudflare Tunnel is the shown selection (zero-trust, no port forwarding); Let’s Encrypt Auto + DNS-01 also covered for public servers and wildcards.

Cloudflare — quick tunnel (no account required) or managed tunnel with your own domain, plus optional TURN relay credentials for viewers behind strict NATs.

Email Alerts — SMTP server, sender, comma-separated recipients, and triggers for channel failure or source loss.

AJA ULTRA — NTV2 driver status (v17.6.0 detected on this box, Corvid 88 found) and a drag-and-drop .deb installer when you need to load the AJA driver package.

NDI Network — pick which NICs NDI uses, add a Discovery Server or cross-subnet remote sources, set send/receive groups, and choose transport (Reliable UDP, Multi-TCP, Unicast UDP, Multicast).

System — runtime version, FFmpeg build, sidecar status, source and channel counts, tunnel state, plus a quick-reference for the API and watch URLs.

---

4 Add a Channel

Click + Add Channel on the dashboard. Choose a source type:

• Discovered — OMT sources auto-discovered on your network
• SRT Ingest — receive an SRT stream on a specified port
• WHIP Ingest — receive a WHIP push from a browser or encoder
• NDI PRO — receive NDI streams from the network
• DeckLink ULTRA — capture from Blackmagic SDI/HDMI cards
• AJA ULTRA — capture from AJA Kona, Corvid, and IO 4K cards via V4L2

Channel Settings

Codec Recommendations

---

5 Start & Watch

Click the Start button on your channel. The gateway begins encoding and you can:

• Preview — Click PREVIEW on the channel card to watch in the dashboard
• Watch Link — Click LINK to copy the watch URL. Opens a full-screen player.
• Multiview — Click the grid icon in the header to open a multi-channel monitoring wall

Preview — live video playing directly in the dashboard with LIVE badge, codec stats, mute/fullscreen controls

Watch URL Format

---

6 Outputs & Restreaming

Each channel can push to multiple output destinations simultaneously:

---

7 Remote Access (Cloudflare Tunnel)

To share streams with viewers outside your local network without opening firewall ports:

• Go to Settings → Cloudflare
• Click Enable Cloudflare Tunnel and save
• A public URL (*.trycloudflare.com) is generated automatically — no account required
• Share the tunnel URL with remote viewers

Persistent Tunnel (Optional)

For a permanent URL with your own domain:

• Create a tunnel in the Cloudflare Zero Trust dashboard
• Point the tunnel to http://localhost:5290
• Paste the tunnel token in Settings → Cloudflare → Tunnel Token

Cloudflare TURN Relay (Optional)

For improved WebRTC connectivity behind strict firewalls:

• In the Cloudflare dashboard, go to Calls → TURN Keys
• Create a key and copy the Key ID and API Token
• Paste into Settings → Cloudflare → TURN Relay

---

8 Email Alerts (Optional)

Get notified when channels fail or OMT sources disappear. Go to Settings → Email Alerts:

• Enter your SMTP server details (host, port, username, password)
• Set a sender address and recipient list
• Enable Channel failure and/or Source loss triggers
• Click Send Test Email to verify

---

9 Pricing & License

A license key is required to use the gateway. Contact us to request a trial.

• Enter a PRO or Ultra license key in Settings → License → Activate
• PRO: £45/mo or £900 lifetime — Ultra: £75/mo or £1,500 lifetime — 30-day Pro trial included

Same ISO for both tiers — your license key determines PRO or Ultra. Start with a free 30-day Pro trial. Contact us if you need an extended trial.

Already purchased? Retrieve your license key.

Bought a Standard license before v1.10? It keeps working forever — contact us about upgrade pricing to PRO.

---

API Reference

The gateway exposes a REST API at https://<host>/api/ for programmatic control.

Channels

Sources & System

WHEP (WebRTC Playback)

---

Network & Ports

---

SSH Access

The appliance has SSH enabled for administration:

Useful commands:

• show-ip — Display dashboard URL, API endpoint, version
• sudo systemctl status whep-gateway — Check service status
• sudo systemctl restart whep-gateway — Restart the gateway
• sudo journalctl -u whep-gateway -f — Follow live logs

---

Troubleshooting

• No sources found? Ensure the OMT encoder is on the same network/subnet. Check that UDP 5353 (mDNS) is not blocked.
• Channel starts but video is black? Check the FFmpeg log (click LOG on the channel card). Common causes: wrong source selected, source not actively sending.
• High CPU usage? Switch to hardware encoding (VAAPI, QSV, NVENC) if you have a supported GPU.
• Viewers see "ICE gathering timeout"? The player automatically falls back to WebSocket relay after 4 seconds. If using Cloudflare Tunnel, this is expected.
• Certificate warning in browser? Install the CA certificate: http://<ip>/api/ca.crt. Or switch to Let's Encrypt in TLS settings.
• Audio not working? Check that audio is enabled in the channel settings. The player starts muted by default — click the unmute button.
• "License required" — channels stopped? Enter a valid license key in Settings → License. Contact us if you need help.
• NDI not showing? NDI ingest requires a PRO or Ultra license. Check Settings → License for your current tier.
• DeckLink/AJA not showing? Capture card support requires an Ultra license. Install drivers in Settings → DeckLink or Settings → AJA.

---

System Requirements

ULTRA DVR recording buffers frames in memory per active channel. We recommend 16 GB RAM and 120 GB+ NVMe storage minimum when using DVR, especially with multiple channels or high-bitrate sources (4K/HEVC). For best performance, use NVMe SSDs in Linux software RAID: RAID 0 for maximum write throughput, RAID 1 for redundancy, RAID 5 for parity protection, or RAID 10 if you have enough disks for both speed and redundancy. The setup wizard includes built-in RAID configuration — just connect multiple disks and the installer will offer RAID options automatically. Disk space for DVR is configurable via retention time and storage quota (default: 60 min / 10 GB).

Hardware Encoding Support

---

Need Help?

Contact us at contact@sebiulabs.co.uk

Website: sebiulabs.co.uk