Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Plex through surfshark wireguard pfsense vpn

    Scheduled Pinned Locked Moved General pfSense Questions
    77 Posts 6 Posters 9.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      No, pfSense is the client here. As long as it's WAN side subnet is routed by tailscale a remote client will be able to access it.

      jhmc93J 1 Reply Last reply Reply Quote 0
      • jhmc93J
        jhmc93 @stephenw10
        last edited by

        @stephenw10 how do I add the wan side in pfsense then?

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          As @Gblenn showed above. You need it to advertise that subnet to other tailscale clients that same as it's doing for the LAN.

          But unless you really need this I would wait until you're on-site to revert any changes you might make accidentally.

          jhmc93J 2 Replies Last reply Reply Quote 0
          • jhmc93J
            jhmc93 @stephenw10
            last edited by

            @stephenw10 ok will have a go

            1 Reply Last reply Reply Quote 0
            • jhmc93J
              jhmc93 @stephenw10
              last edited by

              @stephenw10 I have indirect connections on plex I don't know whether it's pfsense is causing it or not my setup is same as above

              G 1 Reply Last reply Reply Quote 0
              • G
                Gblenn @jhmc93
                last edited by

                @jhmc93 What do you mean with "indirect connections"?
                I tried reading through the thread to get back into the thinking here... Are you still running two separate networks with your wifi on the WAN side of pfsense?? Or have you cleaned it up so that you have everything on the correct side of pfsense??

                1 Reply Last reply Reply Quote 1
                • P
                  Patch @jhmc93
                  last edited by

                  @jhmc93 said in Plex through surfshark wireguard pfsense vpn:

                  my ISP router is also my modem, so it’s gotta be running to provide my internet. Also my pfsense only has LAN ports but no WiFi access, so I use my WiFi devices on my ISP/ Modem router and my pfsense for my proxmox clusters that run my media servers.

                  You are making your life hard imo.
                  Your system would be more maintainable if you

                  • Put your ISP Modem/Router in bridge mode, so it functions purely as a Modem

                  • Use pfsense as your router / firewall for all your LAN

                  • Use a dedicated device / Access point for your wifi

                  jhmc93J 1 Reply Last reply Reply Quote 1
                  • jhmc93J
                    jhmc93 @Patch
                    last edited by

                    @Patch pfsense doesn’t have a WiFi device to broadcast WiFi. Pfsense is a side step as it also ran off a power line network plug for just my media servers, so I narrowed it down so when I connect to my isp WiFi my Plex shows indirect connections but if I join my VPN program through my laptop it goes back a normal connection.

                    P G 2 Replies Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      That seems expected if the Plex server is behind pfSense and the clients are in front of it.

                      1 Reply Last reply Reply Quote 0
                      • P
                        Patch @jhmc93
                        last edited by Patch

                        @jhmc93 said in Plex through surfshark wireguard pfsense vpn:

                        @Patch pfsense doesn’t have a WiFi device to broadcast WiFi.

                        My recommendation is you use a dedicated WiFi access point.
                        Doing so will give you a more capable and maintainable system

                        I use UniFi access points with the controller running as a VM on Proxmox but there’s several good options

                        1 Reply Last reply Reply Quote 1
                        • G
                          Gblenn @jhmc93
                          last edited by

                          @jhmc93 said in Plex through surfshark wireguard pfsense vpn:

                          @Patch pfsense doesn’t have a WiFi device to broadcast WiFi. Pfsense is a side step as it also ran off a power line network plug for just my media servers, so I narrowed it down so when I connect to my isp WiFi my Plex shows indirect connections but if I join my VPN program through my laptop it goes back a normal connection.

                          Yes, that ^ otherwise what is the point of having pfsense at all?
                          If you are looking to improve network safety/security and perhaps add more functionality, you really need to move everything over to be on the LAN side of pfsense.
                          Right now you are just making life difficult for yourself.

                          The best, and also cheapest solution would be if you can connect pfsense directly to the incoming cable (ISP WAN cable in pfsense instead of ISP router). Then turn off DHCP in the ISP modem, and connect one of it's LAN ports to pfsense LAN. This turns it into an AP and you are good to go...

                          Otherwise check if the ISP router has bridge/passthrough mode. If not you need to place pfsense in a DMZ, which the router probably has.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.