# Plex behind Reverse Proxy

**URL:** <https://forums.plex.tv/t/plex-behind-reverse-proxy/696618>\
**Category:** General Discussions\
**Created:** [March 3, 2021, 4:18pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618 "2021-03-03T16:18:39Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![EnfoCC](https://avatars.discourse-cdn.com/v4/letter/e/df788c/32.png) [@EnfoCC](https://forums.plex.tv/u/EnfoCC)\
**Post date:** [March 3, 2021, 4:18pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/1 "2021-03-03T16:18:39Z")

</div>

I am thinking of putting my Plex Media Server behind a reverse proxy (where I will terminate SSL), and only reach the server via this proxy.

In that case, can/should I disable Remote Access in my Plex server settings?

Can I also set Secure Connections to Disabled, or is there any reason to keeping it set to Preferred/Required?

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 6:04pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/2 "2021-03-03T18:04:41Z")

</div>

The remote access in Plex Settings is just to publish your server into plex.tv.  
This allows you to connect to Plex server just by logging into your account, from any device.

You will still be able to reach your server with that option disabled, but you would need to configure the client to connect to that server in the client’s settings.

No, you won’t need to configure “Secure Connections” to required, as the SSL connection will end at the reverse proxy, then be forwarded to your local server, port 32400, with or without encryption.

---

<div class="post-metadata">

**Author:** ![EnfoCC](https://avatars.discourse-cdn.com/v4/letter/e/df788c/32.png) [@EnfoCC](https://forums.plex.tv/u/EnfoCC)\
**Post date:** [March 3, 2021, 7:05pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/3 "2021-03-03T19:05:51Z")

</div>

Thank you for your reply.

Are you sure that clients would need to manually configure the server IP if I disable Remote Access? I just tried it and am still able to connect to the server. Maybe only _new_ clients need to be configured manually?

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 7:19pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/4 "2021-03-03T19:19:41Z")

</div>

You will be able to connect to it, but it won’t be a direct connection to the server.  
You are going to connect to it through a relay.

> **[Accessing a Server through Relay | Plex Support](https://support.plex.tv/articles/216766168-accessing-a-server-through-relay/)**
>
> One of the most important features of Plex is the ability to let you access your content whenever you want...

To connect directly to it and don’t be bandwidth limited, or you publish it in plex.tv through the plex server, or you make a direct connection to it through the client’s configuration, specifying the server address and port.

---

<div class="post-metadata">

**Author:** ![EnfoCC](https://avatars.discourse-cdn.com/v4/letter/e/df788c/32.png) [@EnfoCC](https://forums.plex.tv/u/EnfoCC)\
**Post date:** [March 3, 2021, 8:11pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/5 "2021-03-03T20:11:16Z")

</div>

I have unchecked “Enable Relay” in the settings also, so I’m pretty sure the clients are connecting directly.

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 8:15pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/6 "2021-03-03T20:15:13Z")

</div>

that is strange…

Note, if you don’t enable “Remote access”, to publish your server in Plex.tv, how the users will be able to know the server IP address and port to connect to?  
You need to enable remote access, so users can reach your server directly, by just logging into the plex account.

Let’s suppose you change the port from 32400 to 32401, how the users would know that, if it’s not published?

There is something weird happening there, or things changed since I checked it…

---

<div class="post-metadata">

**Author:** ![EnfoCC](https://avatars.discourse-cdn.com/v4/letter/e/df788c/32.png) [@EnfoCC](https://forums.plex.tv/u/EnfoCC)\
**Post date:** [March 3, 2021, 8:27pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/7 "2021-03-03T20:27:09Z")

</div>

I guess I should note that I have filled in my custom domain ([https://plex.domain.com](https://plex.domain.com)) under “Custom server access URLs”, so maybe this URL gets announced to plex.tv - even though I have Remote Access disabled?

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 8:32pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/8 "2021-03-03T20:32:29Z")

</div>

hmm…

[https://support.plex.tv/articles/200430283-network/](https://support.plex.tv/articles/200430283-network/)

> ### Custom server access URLs
> 
> A comma-separated list of URLs (either HTTP or HTTPS), which will be published to plex.tv for server discovery. This can be very useful in a few cases: if you’re using a VPN to get back home, if you’re using a reverse proxy in front of the media server, or if your networking configuration is otherwise unique. For instance, if you have your own custom domain with subdomain, you might add:
> 
> ```auto
> https://plex.mycustomdomain.com:32400
> 
> ```
> 
> **Tip!** : If you don’t specify a port, the port from your Remote Access page will automatically be used.

---

<div class="post-metadata">

**Author:** ![Volts](https://avatars.discourse-cdn.com/v4/letter/v/a5b964/32.png) [@Volts](https://forums.plex.tv/u/Volts)\
**Post date:** [March 3, 2021, 10:26pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/9 "2021-03-03T22:26:29Z")

</div>

Edited to confirm a few things:

I believe:

- Plex always obtains a \*.plex.direct SSL certificate.
- When Remote Access is disabled, Plex doesn’t try to use UPnP/NAT-PMP to establish an inbound port mapping.
- When Remote Access is disabled, Plex disables the Relay. (Confirmed)
- When Remote Access is disabled, Plex doesn’t perform (some) remote connectivity tests.
- When Remote Access is disabled, Plex doesn’t register discovered connectable Internet IP addresses with the Plex Cloud.

I’m (was) unsure about (but I’ve now confirmed):

- When Remote Access is disabled, does Plex still register LAN addresses with the Plex Cloud for LAN discovery purposes? (Answer: Yes)
- When Remote Access is disabled, does Plex still register the Custom Server Access URLs with the Plex Cloud? (Or to put it another way, are the Custom Server Access URLs _always_ published?) (Answer: Yes)

Curious. Following. 🙂

---

<div class="post-metadata">

**Author:** ![EnfoCC](https://avatars.discourse-cdn.com/v4/letter/e/df788c/32.png) [@EnfoCC](https://forums.plex.tv/u/EnfoCC)\
**Post date:** [March 3, 2021, 10:28pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/10 "2021-03-03T22:28:16Z")

</div>

> [@Volts](#):
>
> When Remote Access is disabled, does Plex still register the Custom Server Access URLs with the Plex Cloud? (Or to put it another way, are the Custom Server Access URLs _always_ published?)

From my testing so far, it seems so.

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 10:31pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/11 "2021-03-03T22:31:40Z")

</div>

I suppose that statement is correct…

Custom Server Access URLS publishes even with the Remote Access feature disabled…

---

<div class="post-metadata">

**Author:** ![mcury](https://avatars.discourse-cdn.com/v4/letter/m/34f0e0/32.png) [@mcury](https://forums.plex.tv/u/mcury)\
**Post date:** [March 3, 2021, 10:40pm UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/12 "2021-03-03T22:40:26Z")

</div>

> [@Volts](#):
>
> When Remote Access is disabled, Plex disables the Relay.

Now that you said it, I’ll have to perform a test to find out…

I’ll disable my remote access to confirm it…

Edit:

[https://support.plex.tv/articles/216766168-accessing-a-server-through-relay/](https://support.plex.tv/articles/216766168-accessing-a-server-through-relay/)

It seems that you don’t need to enable remote access to get the proxy relay working…

---

<div class="post-metadata">

**Author:** ![Volts](https://avatars.discourse-cdn.com/v4/letter/v/a5b964/32.png) [@Volts](https://forums.plex.tv/u/Volts)\
**Post date:** [March 4, 2021, 1:06am UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/14 "2021-03-04T01:06:59Z")

</div>

I’ve verified a couple of things by looking at what Plex is registering with the Plex cloud.

If `Remote Access` is **not** enabled, Relay is also **not** enabled.

- When `Remote Access` is enabled, Plex attempts to register the Public IP & Port with the Plex cloud.
- When `Remote Access` and `Enable Relay` are both enabled, Plex also registers a Relay connection with the Plex cloud.

However:

- When `Remote Access` is **not** checked, even if `Enable Relay` **is** checked, Plex does **not** register a Relay connection.
- Plex also ignores attempts to access the Relay, and the Relay service isn’t started.

* * *

I agree, like y’all said: `Remote Access` is NOT a prerequisite for `Custom server access URLs`. `Custom server access URLs` are always registered with the Plex cloud, whether they’re reachable or not.

If you configure an accurate `Custom server access URL` for your reverse proxy configuration, remote clients will be able to discover your server.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [June 2, 2021, 1:07am UTC](https://forums.plex.tv/t/plex-behind-reverse-proxy/696618/15 "2021-06-02T01:07:23Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
