+- Jellyfin Forum (https://forum.jellyfin.org)
+-- Forum: Support (https://forum.jellyfin.org/f-support)
+--- Forum: Troubleshooting (https://forum.jellyfin.org/f-troubleshooting)
+--- Thread: Unable to set reverse proxy - IP doesn't seem routable (/t-unable-to-set-reverse-proxy-ip-doesn-t-seem-routable)
Pages:
1
2
Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-14
Hello,
I have been following the Quick Start guide (https://jellyfin.org/docs/general/quick-start/windows/), but I have been unable to setup a reverse proxy using Caddy.
Worth noting: I have essentially no networking knowledge or experience.
Not sure which info is needed, so; I am running Windows 11, latest Jellyfin & Caddy versions, my router is a tp-link EC220-G5 v2.
https://jellyfin.org/docs/general/quick-start/windows/#router-settings
I couldn't find anything referring to a WAN address in my router's page. All I did find, on the index is "IP Address" (from what I could tell it is the same thing), which did not match the IP from step 5. On no other pages within the router did I find an IP which matched this one from step 5 either. The rest I think I did successfully (i.e. port forwarding and Caddy installation).
I continued until https://jellyfin.org/docs/general/quick-start/windows/#test-if-http-is-routable, where I could not access the page using my phone's mobile data. I could if using WiFi or my PC, but I'm assuming that's meaningless.
I didn't proceed past this point.
One point of confusion I do have, is in step 3 of the above, the guide says to use the IP from https://ipv4.icanhazip.com/, but I thought you should be using the static IP assigned earlier in the guide? Am I misunderstanding? Don't think it would make a difference in my case, but wanted to ask regardless.
I am going to bed now, this has given me a headache, lol. Any other required details I will provide tomorrow.
RE: Unable to set reverse proxy - IP doesn't seem routable - TheDreadPirate - 2025-02-15
There are two IPs you need to track for this process. Your PUBLIC IP address, which the "icanhazip" site shows you, and your servers PRIVATE IP address. The private address is usually something like 192.168.#.# or 10.#.#.#.
Setting a static PRIVATE address ensures that the rule you create in step 10, creating a port forwarding rule, will always go to the correct host. So you'd use the private IP you statically assigned in step 8 for setting up the port forwarding rule in step 10.
The IP address you got from "icanhazip" will be used when you setup your DDNS farther down the walkthrough.
https://jellyfin.org/docs/general/quick-start/windows/#ddns
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-16
(2025-02-15, 07:14 PM)TheDreadPirate Wrote: There are two IPs you need to track for this process. Your PUBLIC IP address, which the "icanhazip" site shows you, and your servers PRIVATE IP address. The private address is usually something like 192.168.#.# or 10.#.#.#.
Setting a static PRIVATE address ensures that the rule you create in step 10, creating a port forwarding rule, will always go to the correct host. So you'd use the private IP you statically assigned in step 8 for setting up the port forwarding rule in step 10.
The IP address you got from "icanhazip" will be used when you setup your DDNS farther down the walkthrough.
https://jellyfin.org/docs/general/quick-start/windows/#ddns
I think I understand... I will give it another try now.
Thanks! Will report back.
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-16
I am fairly sure my IP isn't routable. Found it difficult to find any useful information on my particular router, but from this page, it seems my WAN IP is the same as IP Address in the Status page;
https://www.tp-link.com/us/support/faq/1105/
https://static.tp-link.com/res/upfile/faq/20160407054106.png
And for my case they do not match.
"If it doesn't, you do not have a routable IP address. In this case, you should stop following this guide and look for other options for remote access."
What are my other options for secure remote access? Are there any?
Would contacting my ISP for guidance be a good idea or waste of time? Would they be able to "fix" the issue of my IP being unroutable?
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-16
From what I can tell I have a CGNAT IP. Apparently you can ask to be assigned a static IP, usually for a charge. Is this true? I would ask my ISP but their public lines are closed until tomorrow.
RE: Unable to set reverse proxy - IP doesn't seem routable - TheDreadPirate - 2025-02-16
I wouldn't be surprised if they charged a fee for a real IP. There are other options, but we can explore those if your ISP can't give you a real IP or charge a ridiculous fee for one. Having a real IP is ideal over the options I am thinking of.
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-16
I thought so... Well, let's hope I can obtain one. I won't mind paying a fee as long as it's not silly.
Hopefully I can report back with some good news soon.
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-17
Just got through to my ISP, was given a static IP after a 5 minute call for free! Excellent. I will give the setup another try later tonight.
RE: Unable to set reverse proxy - IP doesn't seem routable - yepitsmealright - 2025-02-18
Working! Was a lot easier once I had a working IP, haha.
One little hiccup I did have was with setting the Caddy scheduled task.
13. Enter "C:\Program Files\caddy\caddy.exe" in the Program/script field, run in the arguments field and "C:\Program Files\caddy" in the Start in field, then click Next. The parenthesis are required as the path contains a space.
This is actually wrong. For the Start in field, the quotation marks need to be removed, otherwise it won't work. Once removed it worked as expected. Perhaps I interpreted the guide too literally.
Thank you for the guidance.
Are there any recommended security-related steps to take after finishing the quick-start guide? For customization I'll find my way, but my knowledge of network security is basically non-existent.
Crap! Marked the wrong post as a solution. Sorry
RE: Unable to set reverse proxy - IP doesn't seem routable - TheDreadPirate - 2025-02-18
Caddy has pretty secure defaults. The only thing I can think of off the top of my head is to hide user names from the login screen. This will need to be turned off for all users. This would result in users having to type in their user name, but this means that an attacker trying to get in doesn't have a starting point.
Also make sure that your Jellyfin users have a max password failure attempts value set.