[Feature Request] Implement two versions of secure connections, internal and external

I love how plex has the option to set secure connections to disabled preferred or required! However, I think a great feature would to be to have two editions of this option. One will control secure connections when the connection is from a part of the server’s LAND, and one will control secure connections for when the connection is outside the server’s LAN.

I personally like to have my secure connection option set to “Required”, but that stops me from using it on my Vizio TV. However, since my TV is in the same LAN, I wouldn’t much care about the connection not being secure since it is never external. This would be a great addition for anyone like me that is waiting for secure connections on certain devices!

Thanks for your consideration!

@jason.lyle88@gmail.com said:
I love how plex has the option to set secure connections to disabled preferred or required! However, I think a great feature would to be to have two editions of this option. One will control secure connections when the connection is from a part of the server’s LAND, and one will control secure connections for when the connection is outside the server’s LAN.

I personally like to have my secure connection option set to “Required”, but that stops me from using it on my Vizio TV. However, since my TV is in the same LAN, I wouldn’t much care about the connection not being secure since it is never external. This would be a great addition for anyone like me that is waiting for secure connections on certain devices!

Thanks for your consideration!

We just picked up a Vizio D48-D0 that doesn’t connect unless the server is set to Preferred for Secure Connections. What model are you using?

I’m pretty new to Plex and I ran into the very same problem as Jason. For increasing security of remote connections, I configured my Plex server to “Secure connections required”. However, now some local clients are no longer able to connect to my Plex server, e.g. my Sony Bravia TV. The Plex client of this Sony TV suggests to reconfigure the server to “Secure connections preferred”, but that would also affect remote connections. And to be honest, I dislike the idea of supporting unencrypted connections coming from the Internet.

I would like to support the suggested feature request. But since I cannot find this request in any top-lists, I assume that mosts users are fine with the status quo.

So I’m wondering if there’s a plan B… Would it be possible to set “secure connections” to preferred, but to filter all unencrypted remote connections by a proxy?

@mhovestadt Have you tried setting the TV to static ip and put that ip in “List of IP addresses and networks that are allowed without auth”. Settings> Server> Network> Show Advanced

@astrofisher There’s no way setting a manual server IP in that Sony TV client. At server side I added “http://serverip:port” to “Custom server access URLs” and 192.168.1.0/24 to “List of IP addresses and networks that are allowed without auth”, but still the client is unable to connect to the server, suggesting to reconfigure the server to “Secure connections preferred”.

Any idea?

You could go into your router and use DHCP Reservation to reserve the IP Address for the TV. Then put that address into “List of IP addresses and networks that are allowed without auth”.

If you wanted all ip’s on the local network to have access, you would not add anything to Custom server access URLs.
192.168.1.0/255.255.255.0 would be what you would put into “List of IP addresses and networks that are allowed without auth”

@astrofisher Thanks for your response, but neither adding the IP of my TV nor the adding the subnet to “List of IP addresses and networks that are allowed without auth” is solving the issue. The client on my Sony TV still suggests to reconfigure the server to “Secure connections preferred”.

But anyway… Even if your hint would be working, it’d still be a dirty workaround. Why should I allow local clients to connect without authentication if I would just want to permit unencrypted connections? Forcing the client to authenticate itself allows me to adjust its access to local media files (e.g. limiting access of my child’s client to G-rated content only).

Hence, I still second the proposed feature request. Is it still on the table?

Of course your request is still on the table - I have no affiliation with Plex. I’m just a user like yourself and was trying to help come up with workaround to your situation. So far you’ve go 5 likes on your feature request. That’s more than I’ve got on all my feature requests combined. :’(

My Vizio TV just decided to stop connecting securely, so take my vote :slight_smile: I’m on the verge of running two Plex servers to work around this problem…

My last post is some months ago, but I wanted to let you know that I found a (very very very dirty) workaround for my problem. This “solution” should be applicable to everybody who wants to have encryption mandatory for remote users but optional for local users.
My Plex server is running on a Synology NAS. I hoped that there is a way to convince this server to accept local clients without encryption, but the only way would be to make encryption optional for remote users as well.
I finally solved my issue by starting a second Plex server on the same Synology NAS system. I used a docker image for this purpose (linuxserver/plex:latest), using the same directories as the primary Plex server. Setting up this docker image took less than five minutes and has a footprint of 250MB RAM usage (which is no problem on my Synology).
I configured this secondary Plex server as local-only (remote access is not enabled, no ports are forwarded from external to this server) and accept unencrypted connections.
Since both primary and secondary Plex server are using the same directories, both servers provide the same content. My Sony TV recognizes both servers and automatically connects to the secondary Plex server.
Yes, I know, it’s a dirty workaround, but at least it’s working.

Early 2021 clean-up: duplicate