Can't Connect To Emby Externally - Puzzled...Help!?!?

[rudco 4]

 

Strange problem. I am a computer guy, but not strong on the networking side. Maybe someone can see what I'm doing wrong.

1) On my Windows 10 server, my Emby server has been working fine for years, from WITHIN my network, and EXTERNALLY, folks coming in over phones and their own networks.

2) A month ago, I bought a new Netgear Nighthawk R7000 router. Plugged it in, ran my PortForward software to make sure the Emby 8096 port was forwarded, and all was well. Again, at that time, INTERNAL and EXTERNAL connections worked fine.

3) 2 weeks ago, my Cox cable modem was unplugged and replaced with GoNetSpeed fiber optic internet. My complete network worked fine, and Emby worked fine INTERNALLY. HOWEVER, I CANNOT get the external connection working.

Any suggestions would be appreciated.  ONE QUESTION: One image #2, should I be using "Use Static IP" or am I okay using the "Get dynamically"?

I'm attaching some images...

1 --> Netgear router showing that the 8096, 8920 ports *are* forwarded.

2 -->  Netgear routing showing IP addresses

3 --> My McAfee screen showing the Emby port:

4 --> Emby dashboard up and running.  Again, the LAN access is working flawlessly. The WAN access, I cannot get there with my phone (with the Wi-Fi turned off) and neither can anyone else.

 

[rudco 4]

More information...

When browsing Emby support just now, I found this "Remote Setup" article:  https://support.emby.media/support/solutions/articles/44002137137-remote-setup

at the bottom of this article it states:

"You could also be blocked by your ISP in something known as a cgNAT (carrier grade Network Address Translation).  One way of spotting this is to open a command prompt and doing a trace route to 8.8.8.8.

On windows it would be: tracert 8.8.8.8

Ignore the first line which will be your own router.  What you want to see is if any of the next 3 or 4 lines start with 10., 192. or 172.  If the first number is a 172 we need to check the second number to see if it's between 16 to 31.  If any of these returned lines matches this you are likely being blocked by your ISP."

The screen shot below from the tracert I just did seems to say that I *am* being blocked by my ISP. Is tht what it looks like to you?

[Carlo 4561]

So 2 weeks ago you switched ISPs from Cox to GoNetSpeed correct?
Yes the 172.23.x.x address is a reserved/private IP that isn't routable over the Internet.

I would give your new service provider a phone call and ask them about this.  They may require you to get a static IP or worse might require a business class package.

 

[Luke 42081]

@rudco please let us know what they say. Thanks !

[rudco 4]

Well, I got my answer from GoNetSpeed:

"GoNetspeed uses Carrier Grade NAT (CGN) to service its customers. The IP addresses dynamically allocated to our customers via CGN are private IP addresses in the 10.x.x.x range and 100.x.x.x range. Those private IP addresses are then NATed to a public IP address. The 172.23.0.17 IP address in the traceroute below is just a hop in our gateway router. Your CGN dynamically assigned IP address is 100.66.20.74.

 This network architecture will not allow for port forwarding since the CGN process also performs port forwarding. If you need to open ports on your router, you will need to lease a static public IP address from GoNetspeed. The cost of the lease for this service is an additional $10/mo. This will remove your service from CGN and allow for port forwarding, hosting, inbound communication, etc. Please let me know if this is something you would be interested in and I will forward your request to our customer service folks. Thank you."

So, I'll have to decide if it's worth the extra $10 a month to keep the Emby external streaming going......

[Luke 42081]

Thanks for the update.

[Carlo 4561]

Just out of curiosity what kind of speeds to you get for both upload and download from speedtest.net on this connection?

The upload speed will give us a good idea how many streams you could handle.

[rudco 4]

I have a 1 GB connection.  This is 9:00 PM EST, so probably not the optimum time to test, as folks are watching TV, etc. GoNetSpeed just arrived in our area within the last few weeks.

[Carlo 4561]

That's quite fast and similar to my results (depends on time of day) so if you did opt for the $10 static IP you would basically be able to stream without bandwidth problems to family/friends. My son for example can stream full 4K media without issues from my server.

This is just personal opinion but your upload speed is mostly useless while behind a CGNAT so the $10 cost IMHO is worth it as part of your new "upgrade". Besides the removal of CGNAT it's just nice to have your own static IP as well.

[Q-Droid 989]

If you're feeling adventurous Cloudflare (Argo) Tunnel might be worth exploring. It should fit your use case. 

 

 

[Carlo 4561]

9 minutes ago, Q-Droid said:

If you're feeling adventurous Cloudflare (Argo) Tunnel might be worth exploring. It should fit your use case. 

 

 

That is actually a great idea @Q-Droid

[rudco 4]

Thanks for the input, everyone. I will investigate the Cloudflare, and give more thought to the $10.00 extra. Still would be paying less that what I was with Cox.