valkyre09

Yes in zero trust > access controls > applications you can specify a web site and then tell it how you want it protected. In its most basic form you can have it email you a login code, but if you link it to either google or Microsoft you can have users of those services use them allowing you to sso straight through.

You can also specify a wildcard *.mydomain.net and then by default anything that is in your domain will be protected. Means when you’re testing something new you won’t forget to lock it down.

You’re correct about media, I use nginx proxy manager for emby, but everything else goes through the tunnels

Cloudflare tunnels is a great way to expose services on your network to the web.

You run a program in your server, it makes a tunnel, then you configure it on the website to visit the internal link in your network, eg

If you’re hosting a web server at home, you could have something like:

www.mydomain.net > 192.168.1.55:8080

You can also have cloudflare protect access to that website with email verification, google / Microsoft accounts etc.

It’s a lot to learn, but it’s very handy once you get the hang of it.

Here’s a YouTube video on the basics: youtu.be/Q5dG8g4-Sx0?is=J7KvNZoyjsEq33fO

Let’s see, first we had Highlander. Then we had The Quickening, which some people still don’t like to talk about. Then we had The Sorcerer. Around that time things split into the TV Series and soon after we had End Game.

After that I got too old to keep track, but I hear they’re doing a new one.

So to answer your question, despite the claim of there can be only one, there are in fact many.

It was Plex that did the IP range ban because people were selling access to their boxes.

There are two types connection in this scenario

1. Direct - no additional cost to Plex, using the port forwarding instructions you mentioned. No limit on bandwidth - the best (and most common) option
2. Relay - for whatever reason your client cannot reach the server (CGNAT / port forwarding not possible / firewall on client side etc), Plex will act like a man in the middle & limit the connection to 2mbit. (Yup, megaBIT).

I switched away from Plex last year because they wouldn’t let me connect with my box in Hetzner. I’m now using Emby, ironically I’m also paying for Emby’s monthly subscription. Not because I believe I need to, but because I want the developer to continue to work on it.