Relay01.pop.dfw.plex.bz Can Someone Explain this? PMS over NGINX

Server Version#: 1.15.3.876

I am running PMS on a Linux system with NGINX set up as a reverse proxy tunneling through OpenVPN. My VPN provider allows port forwarding, so just running everything over the VPN works fine, but I don’t want nor need my whole system running through the VPN. I just want PMS going through it. I have read every article and post on the subject of reverse proxy with Nginx and Plex, I have tried every configuration I can find to get it to work. Most cases it seems like it works, till I run a iftop on my tun0(vpn) and eth0. I can see the request for the media come through tun0, but then relay##.pop.dfw.plex.bz pops up on my eth0 and starts streaming the file.

Can someone Please tell me what relay##.pop.dfw.plex.bz is, and how I can push it through my vpn interface.

Thank you for your time,
TxCrudeHauler

It is Plex’s relays for Indirect Connections when PMS is unable to provide a direct connection.

To add to Achilles, Plex has no control over the outbound adapter.

The value you set in Settings - Server - Network only affects the INBOUND port.
It is not a true bind() library call when it opens the socket to the destination IP (which the stack would then route correctly over the appropriate adapter)

Thank you for such a quick response.

On the Settings-Server-Network-Interface connection, it only list the eth0 interface. I never could get it to sense the tun0 interface. I actually had to write a script that grabs the ip address of the vpn and then set static routes for the tun0 interface directing anything that goes to the ip address for plex.tv to use the tun0 device. Then I start my PMS and it picks up the vpn address under Settings-Remote Access-Public IP.
Doesn’t the program use the ip addresses with plex.tv to send out the request to the relays? If not, what domain are they running through? I tried to resolve the plex.bz thinking the requests were going there, but it wouldn’t come back with any ip addresses, so i am thinking it has to be some other domain that is used for the outgoing request.

Thank you again for your time.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.