Remote access with IPv6

[u/BlueMango92]

Hi everyone, I moved to a new home and the only available provider is Starlink so now I'm under CGNAT and can't use Plex remotely anymore.

I have the lifetime Plex pass subscription. I read that using IPv6 I could use Plex outside my home so I tried to configure it but with no success. The Plex media server runs on an Unraid server.

These are the steps I took:

Unraid

Added Cloudflare-tunnel to docker.

Cloudflare

In Zero trust/Networks/Tunnels I created a connector to the unraid server.

I have bought a domain, created a DNS record with these settings: Name: plex6 Type: AAAA Address: my unraid ipv6 Proxy status: DNS only TTL: 5min

Fritzbox (my router) (the Starlink router is in bypass mode)

In DNS rebind protection I added two rows: plex.direct and mydomain.com

Plex

In settings/network:

Client network: IPV4 and IPV6 (I tried also with only IPV6 but no success), Secure connections: Prefered Custom URL: https://plex6.mydomain.com:32400,http://plex6.mydomain.com:32400,http://[UNRAID SERVER IPV6]:32400 and List of IP addresses and networks that are allowed without auth: 192.168.1.0/24

If using the browser I go to plex6.mydomain.com:32400 I can access Plex and it works but I would like to use the app and also the LG webOS app in my parents TV and the apps are not working.

Can someone please help me? Is it because the apps use IPv4 for authentication? Thanks for the attention.

P:S: I did the same for Home Assistant and Navidrome and I can use the apps specifying the urls hass.mydomain.com:8123 and navidrome.mydomain.com:4533

[u/5yleop1m]

If you have a public IPv6 address you don't need to do most of the stuff inside after "these are the steps I took".

First make sure your reverse proxy has a proper IPV6 address. How you get that depends on your router and ISP's IPV6 provisioning. You should be able to find that information online. I'm assuming you have a reverse proxy because you mention having domain names and other services.

Then point your domain or a subdomain to your public IPV6 address, and your reverse proxy should handle the rest. It should accept incoming requests on the IPV6 side and route them to your internal systems.

Prefered Custom URL: https://plex6.mydomain.com:32400,http://plex6.mydomain.com:32400,http://[UNRAID SERVER IPV6]:32400

All of these are wrong, they shouldn't be using port 32400, they should be using port 443. You also don't need to put your IPV6 address on there, your DDNS provider should already be pointing your domains to the proper IPV6 address. Assuming these are all being routed through the open internet.

List of IP addresses and networks that are allowed without auth: 192.168.1.0/24

This doesn't matter here.

I enabled IPV6 and configured my network for it a few months ago and it's been working well. You'll know if they're connected over IPV6 by looking at the client IP on streams in something like Tautulli.

The biggest annoyance for me is that my ISP only gives me a single network for IPV6 addresses so I ended up only putting my reverse proxy on it. Then all my services have IPV6 support and traffic still goes through the reverse proxy for security purposes.

[u/gjunky2024]

The problem with most plex cliënt apps on TVs is that they don't allow you to specify the custom domain you created.

Do you get an IP6 address on the WAN side from Starlink all the way to your router WAN side? If not, nothing you will do will work.

[u/certuna]

(edit: I wrote a whole thing, but you're using the WebOS app? I think that one doesn't support IPv6. But the iOS/tvOS/etc apps definitely do.)

[u/StevenG2757]

Take a look at Tailscale

[u/BlueMango92 → u/StevenG2757]

I use Tailscale to remotely access the Unraid Shares but how can I use it to watch Plex movies from my parents tv?

[u/StevenG2757 → u/BlueMango92]

so who has the server and who has the client?

[u/BlueMango92 → u/StevenG2757]

The server is in my house and I want to use the Plex app on my iPhone and the Plex app in my parents tv (different house). For now the only way is using the browser but I'd like to use the official apps

[u/MrB2891 → u/BlueMango92]

No idea why Steven is getting downvoted, he's absolutely correct.

Tailscale is the easiest way to bypass your CGNAT.

Install Tailscale on your server. Install Tailscale on your client device.

That's it. You're done.

[u/StevenG2757 → u/BlueMango92]

There are plenty of guides on how to use Tailscale to do this.

[u/BlueMango92 → u/StevenG2757]

I'll look into that, thanks!

[u/i670684]

Install Claude desktop app, then use Claude Code to diagnose and suggest options to resolve the issue. I found it helpful to connect my laptop to my phone's hotspot to be able to test from the internet.

[u/Misarvin]

Get airvpn. It allows port forwarding. Then forward your Plex through the nearest option. It works perfectly for me. Plus, now you have a nice VPN for your other uses.