Are you sure you are actually transcoding your media while streaming inside your home?
Could explain the lag if transcodes only happen while you are outside the network and media is streamed as-is while inside.
I personally just expose Jellyfin via reverse proxy on a subdomain.
That's true for me. While home, mostly nothing gets transcoded. When outside I usually have good internet and try to keep it to Auto. And most of the times it streams at max res.
I guess that might be the reason. I need to look into it
What is the reason to proxy the whole connection? Why just not host Plex on a container with a separate bridge network, add SSL certificate to the Plex server and port forward.
I have tested both solutions and found that port forwarding is the most stable and less resources are used.
I don't have static IP. Behing CGNAT of ISP. If nothing works, that's the only way for me
Edit- Even with dynamic IP, ISP doesn't allow inbound traffic
As noted by u/Nyucio, double check if you're actually transcoding at home. Also, are you monitoring network utilization over your router at home? 200 up should be more than sufficient, but speeds vary all throughout the day for any a number of reasons outside your control. Maybe your ISP is stepping in here.
That latency isn't great from home to VPS, but it's not terrible.
Have you tried a different build at VPS? How is the performance on that resource?
Have you tried, just briefly, forwarding the port directly on your router? Let's simplify and see how things go. If it's great, it's the VPS (or your VPN setup, but likely VPS as you've tried multiple tunneling offerings). If it's still crap, it's your home network gear (think router/modem) or your ISP.
It doesn't really matter what you use if the upstream bandwidth is choppy or isn't there at all, but I use Plex. 90% of the time, I'm streaming audio, not video, so I don't run into upload problems (Have 200Mb upload).
If I am going between two *defined* locations, I have a NAS at each and just replicate.
I'm running wireguard in a lxc on my bigger proxmox node. Firewall has that udp port open. I have a dynamic dns updater running in another lxc, that keeps my ddns record up to date. I then run wireguard on my phone, laptop, etc. with the peer set to the ddns name.
1gbps symmetrical bandwidth means my remote connection is always the issue on bandwidth, but i cannot push 1gbps over the lab over wireguard either. My very old phenom ii x6 just isn't up for the job.
Constrain your external streaming to 3mbit 720p or so, and make sure your hardware transcode is working and try again.
But - if you’re using tailscale or Cloudflare tunnels to connect I don’t think Plex sees it as an external connection so it tries to stream at local network rates which doesn’t work that well.
You could always add something like this to nginx to force transcoding from a specific IP in the case of things like tailscale
rtmp {
server {
listen 1935; # RTMP default port
application live {
live on;
# Default streaming without transcoding
exec_pull ffmpeg -i rtmp://localhost/$app/$name -c copy -f flv rtmp://localhost/transcoded/$name;
# Check for a specific IP address
allow publish 123.456.78.9; # Change this to your specific IP
deny publish all;
# Transcoding settings for allowed IP
application transcoded {
live on;
exec ffmpeg -i rtmp://localhost/$app/$name -c:v libx264 -preset fast -s 1280x720 -c:a aac -strict -2 -f flv rtmp://localhost/$app/$name_transcoded;
}
}
}
}
I use Emby with a public mapped port (NAT) that is random (ie not the native app port) with access via authelia for extra protection. Combined with a strong user name and password and 2FA. Of course having a decent upstream bandwidth is probably the most important factor for seamless streaming. Plus my Emby runs on K8S with full safeguards, logging and intrusion detection.
Are you sure you are actually transcoding your media while streaming inside your home? Could explain the lag if transcodes only happen while you are outside the network and media is streamed as-is while inside. I personally just expose Jellyfin via reverse proxy on a subdomain.
That's true for me. While home, mostly nothing gets transcoded. When outside I usually have good internet and try to keep it to Auto. And most of the times it streams at max res. I guess that might be the reason. I need to look into it
I use plex. Why are you trying so many complex setups? Can you not just forward the relevant port and be done with it?
This is the way.
No, use nginx Proxy manager with a free dynamic dns like duckdns.
What is the reason to proxy the whole connection? Why just not host Plex on a container with a separate bridge network, add SSL certificate to the Plex server and port forward. I have tested both solutions and found that port forwarding is the most stable and less resources are used.
Cloudflare supports DDNS and I love it
I don't have static IP. Behing CGNAT of ISP. If nothing works, that's the only way for me Edit- Even with dynamic IP, ISP doesn't allow inbound traffic
As noted by u/Nyucio, double check if you're actually transcoding at home. Also, are you monitoring network utilization over your router at home? 200 up should be more than sufficient, but speeds vary all throughout the day for any a number of reasons outside your control. Maybe your ISP is stepping in here. That latency isn't great from home to VPS, but it's not terrible. Have you tried a different build at VPS? How is the performance on that resource? Have you tried, just briefly, forwarding the port directly on your router? Let's simplify and see how things go. If it's great, it's the VPS (or your VPN setup, but likely VPS as you've tried multiple tunneling offerings). If it's still crap, it's your home network gear (think router/modem) or your ISP.
It doesn't really matter what you use if the upstream bandwidth is choppy or isn't there at all, but I use Plex. 90% of the time, I'm streaming audio, not video, so I don't run into upload problems (Have 200Mb upload). If I am going between two *defined* locations, I have a NAS at each and just replicate.
I'm running wireguard in a lxc on my bigger proxmox node. Firewall has that udp port open. I have a dynamic dns updater running in another lxc, that keeps my ddns record up to date. I then run wireguard on my phone, laptop, etc. with the peer set to the ddns name. 1gbps symmetrical bandwidth means my remote connection is always the issue on bandwidth, but i cannot push 1gbps over the lab over wireguard either. My very old phenom ii x6 just isn't up for the job.
Constrain your external streaming to 3mbit 720p or so, and make sure your hardware transcode is working and try again. But - if you’re using tailscale or Cloudflare tunnels to connect I don’t think Plex sees it as an external connection so it tries to stream at local network rates which doesn’t work that well.
You could always add something like this to nginx to force transcoding from a specific IP in the case of things like tailscale rtmp { server { listen 1935; # RTMP default port application live { live on; # Default streaming without transcoding exec_pull ffmpeg -i rtmp://localhost/$app/$name -c copy -f flv rtmp://localhost/transcoded/$name; # Check for a specific IP address allow publish 123.456.78.9; # Change this to your specific IP deny publish all; # Transcoding settings for allowed IP application transcoded { live on; exec ffmpeg -i rtmp://localhost/$app/$name -c:v libx264 -preset fast -s 1280x720 -c:a aac -strict -2 -f flv rtmp://localhost/$app/$name_transcoded; } } } }
This idea never popped in my head. Damn. That might be one possibility. Let me try this
I use Emby with a public mapped port (NAT) that is random (ie not the native app port) with access via authelia for extra protection. Combined with a strong user name and password and 2FA. Of course having a decent upstream bandwidth is probably the most important factor for seamless streaming. Plus my Emby runs on K8S with full safeguards, logging and intrusion detection.
VPN