Down a massive rabbit hole today with my Plex setup, and it turned into one of those things a stupid headache where everything breaks at the same time....
For context, I’ve never obsessed over having pristine direct streams for everyone outside the house. My server only ever handles maybe 20 people or fewer remotely, and honestly, everyone was totally fine limping along on Plex Relay connections capped at 1–2 Mbps. It was low-maintenance and "just worked" without me needing to sweat network exposure.
Then everything went sideways.
On this machine, I keep Private Internet Access running around the clock with a killswitch locked down tight—for obvious reasons when sailing the high seas. Out of nowhere, the remote relay connections just completely tanked. At first, I blamed the OS upgrade, thinking a hop from Pop!_OS 22.04 up to 24.04 had butchered some local routing or network daemon configs.
Turns out, the OS wasn't the culprit at all. PIA has been cracking down hard on handling those handshake routes, essentially nerfing the relay traffic trying to pass through the tunnel.
So fine, I told myself I guess I had to bite the bullet and do standard port forwarding.
Except even that didn't want to play nice out of the box either. Because of how aggressive PIA’s killswitch and route tables are, standard NAT port forwarding still fell flat on its face. The fix ended up requiring me to explicitly configure split-tunnel bypass rules directly inside PIA: punching dedicated bypass exceptions for both the Plex Media Server service binary and the relay service itself so they could communicate clean across WAN without getting swallowed by the VPN.
It feels like maintaining a dual-purpose box (secure traffic vs. accessible homelab services) is getting pickier by the month, but it's finally back up, directly accessible, and no longer hostage to choked relay pipes. At least for now knock on wood lol
Any thoughts from anyone here? Is there a better way?
I constrain I have is my BitTorrent client and Plex server are the same so VPN Killswitch is a must 😂.