Tautulli - Loopback Question

Hello all, just wondering why user history in Tautulli displays loopback ip 127.0.0.1 when user plays content remotely via SSH tunnel.

Thank you in advance!

Because that is how they set up the tunnel to appear as if on the local machine.

Is there any reason why it was done like this? I feel like I’m missing something here because the packets should still include public IPs, correct?

That is just how ssh tunnels work when using the local host . Some folks use it to connect to a remote server as if on the local machine because some things for set up due to security only work on the localhost.

We provide encryption for free so it is not really necessary.

So the method of SSH used here shows the source IP as loopback to bypass firewalls? Sorry, just want to better understand.

The Plex Server and Tautulli have no idea where your friend is connecting from. A far as they are aware your friend is literally on the same computer the server is on.

I’m not an expert on SSH so don’t want to tell you something incorrect but it is used for encryption and can be used to get through firewalls.

I understand they are basically just creating a remote session on the server but thought I may ask why Plex/Tautulli may be trimming this info off. SSH creates encryption but no way to hide IPs because the packets would not be able to traverse through multiple networks.

Thank you for your replies,
Cheers.

They are not trimming anything off. They think the connection is on the same machine. They are reporting what they know.

SSH is handling the rest of it.

Could be that ssh is not feeding this info to plex. I’ll do some packet sniffing and get back to you.

Noticed port forwarding wasn’t on.
After enabling port forwarding I was able to see public IPs.

Wondering if UPNP was hiding the public IP?

Anyways port forwarding resolved my issue.
Closing ticket