What is IP Lock vs Multi-Device Connections?
Protocol Definition & Architecture: Troubleshooting And Fixes
Technical Definition
IP lock restricts a subscription line to a single public IP address, while max_connections limits simultaneous streams regardless of IP. Panels expose both so resellers can sell household lines (2-5 connections) or locked single-device lines.
How It Operates Under the Hood
With IP lock, a stream request from a new IP returns 403 until the lock is cleared or the previous session ends; VPN exit changes trigger this. max_connections counts active sessions (active_cons) and rejects the N+1th stream with 403 / 458.
Troubleshooting Checklist
When IP Lock vs Multi-Device Connections misbehaves, confirm the player version, clear cache, re-run the player_api.php handshake in a browser, and compare results on a second device. Most faults trace back to timeouts, mismatched identifiers, or ISP interference rather than the mechanism itself.
Protocol Engineering Specifications
| Stream Engineering Metric | Reference Specification | Governing Standard |
|---|---|---|
| IP lock | One public IP per line |
Panel flag |
| max_connections | 1-5 typical |
player_api user_info |
| Error on excess | HTTP 403 / 458 |
Server response |
| Transport Container | MPEG-TS (188 bytes: 4 B header + 184 B payload, 0x47 sync) |
ISO/IEC 13818-1 |
| Manifest Specification | Extended M3U8 playlist / LL-HLS 0.5 s parts |
IETF RFC 8216 |
| Decoder Pipeline | Hardware MediaCodec HEVC Main 10 (ExoPlayer / Media3) |
Android Media3 |
IP Lock vs Multi-Device Connections FAQ
What is IP Lock vs Multi-Device Connections in simple terms?
IP lock restricts a subscription line to a single public IP address, while max_connections limits simultaneous streams regardless of IP. Panels expose both so resellers can sell household lines (2-5 connections) or locked single-device lines.
Why does my stream stop when I enable a VPN?
The exit IP changed and the line is IP-locked; ask the reseller to disable the lock or keep one VPN server.
How do I know if my ISP is throttling IPTV streams, and how do I stop it?
Run a speed test on the same device while a stream buffers. If raw throughput is above 25 Mbps but the player reports a bitrate below 8 Mbps, your ISP is applying traffic shaping to the stream flow, usually triggered by deep packet inspection of the TLS SNI or by sustained UDP/TCP flows to known hosting ASNs. Stop it by routing the player through a WireGuard tunnel (which hides destination and SNI inside ChaCha20-Poly1305 encryption), switching DNS to 1.1.1.1 over HTTPS, and keeping a 5,000 ms player buffer so short shaping bursts never reach the decoder.
What buffer size should I set in TiviMate, Smarters, or XCIPTV for 4K sports?
Set the largest option (5,000 ms in TiviMate, "Large" in Smarters). Buffer time in seconds equals buffer bytes multiplied by 8, divided by the stream bitrate in Mbps: a 15 MB allocation on an 18.5 Mbps 4K feed yields 6.5 seconds of protection, which covers typical ISP shaping bursts of 2-4 seconds without a visible freeze.
Why is my EPG guide empty or showing programs at the wrong time?
Players fetch an XMLTV file from xmltv.php and match each channel by tvg-id. An empty guide means the player downloaded the file before the server finished its 15-minute refresh or the file exceeded the player size cap (set TiviMate EPG update to "never limit"). Wrong times are a timezone offset issue: XMLTV timestamps carry +0000 and the player must apply your local offset, so set an EPG shift of +1 or -5 hours in the channel settings rather than changing the device clock.
What is device MAC address binding and why does my MAG box or Smart TV app ask for it?
Stalker / Ministra middleware authenticates a set-top box by its 48-bit MAC address (MAG boxes use the 00:1A:79 OUI prefix) instead of a username and password. The reseller panel binds that MAC to a subscription line; apps such as IBO Player and Smarters on Samsung or LG TVs generate a virtual MAC that must be registered the same way. If you replace the device, the panel must re-bind the new MAC or the portal returns an "unregistered device" error.
WireGuard vs OpenVPN: which VPN protocol is better for 4K IPTV?
WireGuard. It runs in the Linux kernel, uses a 4,000-line codebase with ChaCha20-Poly1305 encryption, and adds roughly 1-3 ms of latency with 5-8% throughput overhead, so an 18.5 Mbps 4K stream passes untouched. OpenVPN in TCP mode suffers from TCP-over-TCP meltdown during packet loss and typically costs 20-35% throughput; use OpenVPN only in UDP mode with tls-crypt on networks that block UDP port 51820.
Every external citation on this page points to a primary source: telecommunications RFCs, ITU-T and ISO codec standards, manufacturer and developer documentation, national regulators, or official sports governing bodies. No commercial IPTV competitor is cited.