NAS/PLEX set up without Access to Router

[Yoda3647]

Hello, first post here is my problem, I do not have access to the router, My apartment complex has 1gig Xfinity Business WiFi, we have just a access point in each apartment which I have every thing plugged into the AP via ethernet. I with the research I have done I was led to believe if I got a my own Domain that I can somehow configure plex to use that so that I can remote access and share with family my Plex. 

 

I am open to use anything to make this happen what I need to to be able to have it where my PLEX is available outside my home, with my family able to use the Plex app so they can watch my PLEX on their TV without having to configure anything on their end. Problem is I do not have access to the router so I can not do any port forwarding. I heard a VPN could do it and was looking at Proton VPN if I need it but my QNAP does come with some of QNAPs apps.  

 

So I have: Domain - through Godaddy.com(if needed if not can cancel)

                 QNAP TS-1655(Intel Atom® C5125 8-core processor, 2.8GHz - I have maxed out the RAM to 128 GB, 2-1TB M.2 for SSD cache acceleration) - All my media Video, Music, and Pictures on it and will host the PLEX server.

 

I would prefer the KISS(Keep It Simple Stupid) method and I do know a little but would like it explained in laymen's terms.

[will0hlep]

40 minutes ago, Yoda3647 said:

Hello, first post here is my problem, I do not have access to the router, My apartment complex has 1gig Xfinity Business WiFi, we have just a access point in each apartment which I have every thing plugged into the AP via ethernet. I with the research I have done I was led to believe if I got a my own Domain that I can somehow configure plex to use that so that I can remote access and share with family my Plex. 

 

I am open to use anything to make this happen what I need to to be able to have it where my PLEX is available outside my home, with my family able to use the Plex app so they can watch my PLEX on their TV without having to configure anything on their end. Problem is I do not have access to the router so I can not do any port forwarding. I heard a VPN could do it and was looking at Proton VPN if I need it but my QNAP does come with some of QNAPs apps.  

 

So I have: Domain - through Godaddy.com(if needed if not can cancel)

                 QNAP TS-1655(Intel Atom® C5125 8-core processor, 2.8GHz - I have maxed out the RAM to 128 GB, 2-1TB M.2 for SSD cache acceleration) - All my media Video, Music, and Pictures on it and will host the PLEX server.

 

I would prefer the KISS(Keep It Simple Stupid) method and I do know a little but would like it explained in laymen's terms.

So the point of a Domain is to point to a given IP address. So instead of saying the plex server is at 142:83:92:7:25252 or whatever, you say it is at plexdomain.gg:25252 of whatever.

 

The problem is you'd still need the port forwarding part (the :25252)

 

As for the VPN strategy, it involves setting up your own VPN (which routes traffic through your network), not using someone elses (which only routes through the providers warehouse). This also requires port forwarding.

 

If possible the simple strategy would be to put the plex server at your parents place, where you can control the router. You could then use a domain to connect and watch plex from anywhere, and setup a VPN to use if you wanted to manage your library.

[johnt]

You cannot have external/WAN access to Plex without direct access to the router. You have to open a port and you are unable to do that with any device internal to their router. Even with a VPN, you still need to open a port so your router knows how to direct traffic.

 

I think you have two options: 

 

1) Consider placing the system in a family's house that has a direct modem and you can use their internet/network for control. You could use several programs to SSH, VPN, RDC, etc. so the device from your house. You open the ports on their modem and you access it remotely. Although be careful with opening ports left and right. I recommend the VPN approach for RDC needs and just open a port only for Plex.

 

2) Purchase a 5g modem and service for your house that can run independent of your building's internet. This is obviously an expensive option.

[Yoda3647]

Thanks for both responses. I do not know if this helps but I was able to use  my Router right after the Apartment switched to the business wifi and family was still able to connect and see my PLEX, until Xfinity blocked my router. Also I was able to use Tailscale and connect to my mom and another friend of mine but they could only access my plex from their PC not TV, so not everybody in my family is that computer smart or would want to watch on PC instead of their TV. 

 

My mom was also able to access my QNAP through the QNAP cloud service and download I file that was to big to email, would that be of any help

 

I am also using TeamViewer to access my family's PC's to help them out and I am able to log in to their PC without port forwarding. 

[Yoda3647]

Hey I just cam across this post do you think it would work?????

RONIXwake

•1y ago•Edited 1y ago

 

 

You could use Tailscale Funnel.

First, Tailscale needs to be installed on the device hosting your Plex server.

Tailscale Serve is needed to open the Plex service to devices within your Tailnet and forward one of the available Funnel ports (i.e. 443, 8443, 10000) to your Plex server (port 32400 by default). Serve documentation: https://tailscale.com/kb/1312/serve

tailscale serve https:10000 / http://localhost:32400

Next, enable Tailscale Funnel to open this service to the web. (Note that you will need to enable HTTPS and Funnel within the Tailscale admin console.) See Funnel documentation: https://tailscale.com/kb/1223/funnel

tailscale funnel 10000 on

Finally, on the Plex web interface go to Settings>Network>Custom server access URL. Paste the Funnel URL into this box.

Congrats! You should have direct access to your Plex server from any device outside your local network without opening any ports on your router.

[johnt]

TeamViewer is different. Tailscale would require opening ports or port forwarding (same thing, different names) on the main router connected to your building.

[will0hlep]

29 minutes ago, johnt said:

TeamViewer is different. Tailscale would require opening ports or port forwarding (same thing, different names) on the main router connected to your building.

Ah, but it doesn’t need to be done manually, do it is almost a full work around.

 

the issue is tailscale is PC/phone only. No TV app exists.

 

if you want it to work on TVs your best bet it to put the server at your parents place.

[Yoda3647]

https://mythofechelon.co.uk/blog/2024/1/7/how-to-set-up-free-secure-high-quality-remote-access-for-plex

 

However, I’ve found a new solution:

Option	Pros	Cons
Port forwarding via Cloudflare Zero Trust Access Tunnels	• Quite secure, due to tunnel-based reverse proxy, Web Application Firewall (WAF) with Managed Ruleset which can be upgraded, bot mitigation, anti-DDoS, etc. • Original quality. • Fast. • Free. • All types of devices can connect.	• Still not risk-free, as your Plex server could still be discovered (although more difficult) and Cloudflare's defenses could be bypassed. • Somewhat complex / difficult to set up (which this guide resolves). • Cloudflare inspect the HTTPS traffic. • Requires Cloudflare be authoritative for your custom domain's DNS (which is not the same as transferring the domain registration).

[Nathanaell]

On 5/20/2025 at 5:53 PM, Yoda3647 said:

https://mythofechelon.co.uk/blog/2024/1/7/how-to-set-up-free-secure-high-quality-remote-access-for-plex

 

However, I’ve found a new solution:

Option	Pros	Cons
Port forwarding via Cloudflare Zero Trust Access Tunnels	• Quite secure, due to tunnel-based reverse proxy, Web Application Firewall (WAF) with Managed Ruleset which can be upgraded, bot mitigation, anti-DDoS, etc. • Original quality. • Fast. • Free. • All types of devices can connect.	• Still not risk-free, as your Plex server could still be discovered (although more difficult) and Cloudflare's defenses could be bypassed. • Somewhat complex / difficult to set up (which this guide resolves). • Cloudflare inspect the HTTPS traffic. • Requires Cloudflare be authoritative for your custom domain's DNS (which is not the same as transferring the domain registration).

I personally use Cloudflare zero trust tunnels for my entire server and have never had an issue at all. I 100% recommend using it if you can't port forward on your router. Or just for the added security in general.

[Yoda3647]

Thanks, Now I am just trying to figure out the set up.