I'm running a Plex media server on Linux Mint and want to let people access it remotely. My T-Mobile connection appears to use Carrier-Grade NAT, so normal port forwarding does not work. I found a Packetriot guide about creating a tunnel for Plex, but I'm having trouble understanding the setup. Could someone explain the process in simpler terms or suggest an easier alternative?
4 Answers
PiVPN is another option if you mainly want your own phone, laptop, or tablet to reach your home network. It creates a WireGuard or OpenVPN connection and walks you through generating client profiles. However, everyone using Plex would generally need VPN access, so it may not be the most convenient solution for sharing with friends or family.
An overlay VPN such as Tailscale can connect your devices through CGNAT without manually configuring a tunnel. It’s relatively beginner-friendly, but make sure the access method supports the people you want to share Plex with—having your own devices on the VPN is different from publishing Plex for general remote users.
NetBird can also create a private mesh network through CGNAT. When direct peer-to-peer connectivity is unavailable, it may relay traffic through its servers, which can be slower on lower-tier plans. That can work for personal access, but check the relay performance and whether its setup provides the public-facing Plex access you need.
The relay is the part I’m concerned about. I was wondering whether a paid plan would improve that, but I’m specifically trying to support remote Plex viewers rather than only connect my own devices.
Ask T-Mobile whether your plan can receive a dedicated public IPv4 address or another non-CGNAT option. If they offer it, that would let you use Plex’s normal remote-access setup with port forwarding. Availability depends on the plan and region, and it’s worth confirming how it affects any other VPN or torrent setup before changing anything.
Would getting a dedicated address interfere with my existing VPN or torrent configuration, or would it mainly change how inbound connections reach the server?

That distinction helps. I’m hoping to let other people use Plex without requiring each of them to configure a VPN.