Transport UDP Multicast Over Internet

Hello, I have the following scenario:

Multicast UDP Server—> Mikrotik —> EOIP—>IPSEC—> INTERNET ----> IPSEC ----> EOIP —> MIKROTIK ----> IP to RF modulator

At both ends, the EoIP tunnels are added to a bridge. I don’t have IPv4 addressing in the tunnels.

The problem I’m having is pixelation on the client side.
My question is, is there another way to transport UDP multicast over the internet other than the one I’m using, and if not, what optimization could I use in my configuration?
Best Regards
fherp

More generally you want to look at the MTU on EoIP… If it’s 1500, your UDP multicast video may be getting fragmented, and if lower you could be effecting the bridge MTU. So it bit complex “what’s right MTU” here. A few sniffer traces likely show what was happening on the video framing, and that guide what to tweak.

If it’s MPEG-TS stream on the UDP sending side, you might want to look for a setting to control the number of TS frames per UDP packet to 6 in your video encoder… so it fits with the reduced MTU. i.e. TS frames are 188 (no FEC) or 204 (with FEC), and they can be wrapped in RTP (or not) — at end you want the UDP multicast packet to “fit” with your tunnel, but encoding defaults often assume MTU is 1500 but with EoIP, it’s not.

Thank you for your kind response. This is the sniffer output on the server-side tunnel interface.
Captura de pantalla 2025-04-09 a la(s) 19.20.41.png
And This is from client side tunel.
Captura de pantalla 2025-04-09 a la(s) 19.20.41.png

Yeah that’s plain UDP MPEG-TS, no FEC/RTP, which should fit.

Is there any wi-fi in your chain?

I’d recommend you try the EoIP interface using 1450 MTU & see what happens. Although that’s going to have the side-effect of lowering your bridge MTU.

You shouldn’t need IGMP here, but that be another thing to try (you can enable on the /interface/bridge).

Also, if you control the multicast addresses using 224.0.0.0/24 is special range, so IGMP won’t work with those…

There’s no Wi-Fi, it’s all fiber optics.
I’ve tried IGMP, and the results don’t change.
Would it be a good idea to set a constant bit rate on the server? Would that help?

If it’s fiber and you have the bandwidth, then constant bit rate might be worth a shot. It’s less work on the decoder.

If you can enable FEC, I try that first.

How much data are you trying to get across that tunnel? What router(s) are you using? If they have hardware-accelerated IPSEC (I hope so!) are you sure the encryption settings match what is accelerate-able on your boxes? Look at “/ip ipsec installed-sa print” for the ‘H’ flag.

Why do you use EoIP and bridging, instead of a L3 tunnel like IPIP or GRE with the correct routes in place?

Hi,
150mbps

CCR 2004

Flags: S - SEEN-TRAFFIC; H - HW-AEAD; E - ESP
Columns: SPI, STATE, SRC-ADDRESS, DST-ADDRESS, AUTH-ALGORITHM, ENC-ALGORITHM, ENC-KEY-SIZE

SPI STATE SRC-ADDRESS DST-ADDRESS AUTH ENC-ALGORITHM ENC-KEY-SIZE

0 SHE 0x2D89B67 dying x.x.x.x:11785 x.x.x.x:4500 sha1 aes-cbc 256

Hi

I’ll try it and let you know.

The solution:
Remove L2TP IPSEC
Create EOIP with IPsec secret.

Tanks for the support.