High-density Wi-Fi for events: an architecture that holds the load
How to size a Wi-Fi able to absorb 500 to 5,000 simultaneous users on an event site. Hardware, segmentation, supervision.
The Wi-Fi at an event venue has a problem the office Wi-Fi never sees: density. A 100-person open space carries a predictable, stable load. A corporate evening for 800 guests, a wholesale fashion presentation with 200 international buyers photographing and uploading their selections in real time, or a 1,500-person conference with everyone using their phone simultaneously — that’s a different craft. Here is how we design those networks.
The base rule: density ≠ surface
A classic mistake is sizing Wi-Fi by m². At an event, the right indicator is devices per square meter, and it varies wildly by format. A wholesale show runs at one device per 1.5 m². A corporate conference, one per 1 m². An evening pushes to 2 or 3 devices per attendee (phone + smartwatch + occasional tablet).
Result: a venue you cover comfortably with 4 access points in office mode may need 12-16 in event mode. It’s not just a number — it’s a design: closer placement, reduced per-AP transmit power to limit overlap, prioritized 5 GHz and 6 GHz channel allocation (2.4 GHz is saturated in urban environments and unusable at high density).
The hardware we use
Three main families, depending on context:
- Aruba Instant On / AP25-AP35 / AP-635 — excellent value, cloud configuration via Aruba Central, real-time monitoring. Our default for fixed event venues that also host daily corporate use.
- Cisco Meraki MR46/MR86 — the reference for organizations already running Meraki elsewhere (management consistency). Expensive, premium, reliable.
- Ubiquiti UniFi U7 Pro / Enterprise — economical, excellent on Wi-Fi 7, ideal for small sites or temporary deployments. Less “enterprise” on support, but quality has improved a lot since 2023.
For purely temporary deployments (festivals, short-form productions), we often work with white-label MikroTik kits or rental packs from AV partners — different logic: battery autonomous, deployment in hours, fast tear-down.
Segmentation, mandatory
On an event site, you never serve a single SSID. At minimum:
- Staff SSID (venue teams, catering, AV): strong auth, internal resource access.
- Production SSID (organizing brand’s teams): isolated from staff, fast internet for visual uploads, captures, etc.
- Guest SSID — captive portal, isolated from the other two, throttled bandwidth (10 to 20 Mbps is enough for most use).
- Control room / IoT SSID — for IP cameras, LED wall controllers, Dante audio. Priority bandwidth, no outbound internet to reduce attack surface.
Segmentation runs as VLANs on the switch and separate SSIDs at the Wi-Fi layer. The firewall (FortiGate, Aruba CX, or pfSense in a lightweight setup) enforces inter-VLAN rules.
Outbound bandwidth
A recurring question: “how many Mbps upstream for an X-person event?”. The answer depends on usage. For a “social-media” event (people post on Instagram, run live stories), count 1-2 Mbps upload per active concurrent user, i.e. 200-400 Mbps for 200 highly active guests. For an event with professional video streaming (live YouTube, Twitch, internal broadcast), the streaming alone takes 5-25 Mbps depending on quality.
In practice, we size the internet link from expected usage × 1.5 buffer. A symmetric 1 Gbps fiber covers the vast majority of cases up to 1,500 people. Very large events move to 10 Gbps links with a different-operator secondary.
The 5G comeback
A smart event deployment plans 5G failover in addition to the primary fiber. Modern multi-WAN routers (Peplink Balance, FortiGate with 5G module, Teltonika RUTX series) automatically fail over to 5G if the fiber drops. At an event, that redundancy isn’t a comfort — it’s mandatory. An internet outage mid-broadcast breaks everything.
Real-time supervision
An event venue without active Wi-Fi supervision isn’t operationally serious. During major events, our techs continuously watch: connected devices per AP, real-time throughput, retransmission rates, RF channel state, abnormal behavior. Aruba Central and Meraki Dashboard provide that monitoring natively, UniFi via the controller. This lets us react in minutes to a saturating AP or a failing VLAN.
What ten years has taught
Recurring traps: under-estimating real density (always err high), forgetting 6 GHz channels when hardware supports them (huge gain in urban-saturated environments), ignoring RF environment quality (neighboring Wi-Fi APs, catering microwaves, massive AirPods Bluetooth signal), chasing perfect coverage and not enough capacity.
If you operate an event venue or are building a high-stakes event, the form at the bottom of the home is built to start the conversation.
Field-report context: Paris event venue, varied formats (anonymized)
Read next
More on modern SMB IT management.
Modernizing a corporate Mac fleet with Kandji and Apple Business Manager
Field report: moving from manual Mac management to a fully MDM-driven fleet. Zero-touch onboarding, hardened security, measurable time savings.
Read the post
Why replace your corporate VPN with Zero Trust Network Access (ZTNA)
The classic corporate VPN is a 25-year-old design that no longer fits. ZTNA (Cloudflare Access, Tailscale, Zscaler) offers a finer, safer, better-UX model.
Read the post
Opening a retail store: the IT checklist in two weeks
Network, segmented Wi-Fi, Shopify POS, payment, video surveillance, backups: what to plan so a new store is operational on day one.
Read the post