this post was submitted on 24 Nov 2023
2 points (100.0% liked)

Homelab

371 readers
3 users here now

Rules

founded 11 months ago
MODERATORS
 

I can't host PLEX in my DMZ because their app sucks on some clients, hiding or not allowing finding the server via IP so it does the local scan junk. It's virtually bridged to 2 VLANs as a result. Also this would become a 10G upgrade for my router if I did this but different topic.

This means direct port forwarding is off the table. Is there a service I can use to act as a middleman (ideally hosted in my DMZ) to access the client, without directly exposing PLEX to the WAN but that also doesn't involve directly exposing my media server full of "Linux ISOs" to a cloud?

Before you tell me to use Jellyfin I am holding off for more feature parity, but this is the eventual plan.

top 12 comments
sorted by: hot top controversial new old
[–] Nightcinder@alien.top 2 points 10 months ago (1 children)

plex has a built in remote proxy..

[–] Zyrt@lemmy.ml 1 points 10 months ago

He’s trying to do it for free. That’s only in the paid.

[–] MyTechAccount90210@alien.top 2 points 10 months ago (1 children)

You're doing something wrong or you have an incompatible isp. If you want to have it in your dmz, great poke firewall rules for 32400 and set up the internal subnet as an approved lan subnet.

[–] Alex_2259@alien.top 1 points 10 months ago (1 children)

Many clients including the mobile app hide, don't have or otherwise have the function to add a server via IP broken.

Why would I route through the internet and back to handle local traffic? That's the reason PLEX isn't in a DMZ

[–] MyTechAccount90210@alien.top 1 points 10 months ago

You don't add it from the app. You add it in server settings. And you wouldn't hairpin, you'd have the firewall rules. Having it in dmz would segregate it from your internal network so outside users could hit it .... If you so choose.

[–] dasunsrule32@alien.top 1 points 10 months ago

Like others have said VPN, but you can setup remote with Plex directly using their proxy as well.

[–] c-h-i-b-b-s@alien.top 1 points 10 months ago

Tailsacle on both clients and plex server works fine for my setup. Im behind CGNAT on my isp and Tailscale still manages to tunnel properly

[–] isademigod@alien.top 1 points 10 months ago (2 children)

Plex pass lifetime is $89.99 on black friday right now. 100% worth it if youre sharing your library

[–] Just-a-waffle_@alien.top 2 points 10 months ago

This, just pay for it if you want to use it outside your home. It’s absolutely worth it, ports are outbound so nothing to open up on your firewall, and can use yourself or share with other’s Plex accounts as needed

[–] Alex_2259@alien.top 1 points 10 months ago

I have PLEX Pass but haven't set this up yet, not so sure about exposing my library to their service.

If this is the meta and worth it I will simply use it

[–] Elpardua@alien.top 1 points 10 months ago (1 children)

You can set up a free cloudflare tunnel on your DMZ, then expose the 32400 service vía an application in the zero trust dashboard. That would give you fine control about who can access your server (you can add security policies filtering by country, source ip, and other traffic selectors)

[–] superdupersecret42@alien.top 2 points 10 months ago

Cloudflare terms clearly state their tunnels are not for streaming media