API calls to external sources not processed behind VPN(Surfshark)

[lexisdude 145]

Hello

I had made a past request as this being a problem, and thinking I had it figured out I did not. I know you all cannot really provide any vpn support so this is a question and possibly a callout to anyone else that is/has/have had this issue. 

First, let me start by saying that I can reach Emby from the web, and also from the mobile app. As far as I can see, everything is playable and I do not have any issues in that regard. The issue is the server scraping metadata. Whether that be people, series, show, movie, or music metadata. All API calls out behind the VPN fails. 
I had similar issues with Plex , but when I bypassed the executables, and the corresponding web pages that the executables were interfacing with I no longer had that problem.

With Emby, I have every executable in the emby package in the same bypass of the vpn, and have also put bypasses in for every site that I could find with callouts going to http , in the logs. If I disable the VPN, it pulls in the data without a hitch. With it on, it pulls nothing. 
 
So, if the APIs are routing their requests in a different way other than through the .exe files, this would explain my dilemma, but not the solution. I am hoping that someone has a answer for this issue. 

Thank you

Edited August 25, 2024 by lexisdude

[js28194 36]

This may not be ideal for you, but one option (not a very good one) is put your Emby server in DMZ, but you better be ready.....

Or very complicated setup (mine) is VPN client is installed on Router (Asus with Merlin FW) utilizing VPN Director where server routes out of VPN, HOWEVER, all connections inboud is handled via reverse proxy (caddy).  Only port 443/80 are forwarded to internal caddy and no port forwarding on port 8096.  Also, Allow remote connections to this Emby Server is unchecked as caddy handles this.

[rbjtech 5284]

setup some tooling such as ProcMon to see what processes are being called during the http request.   I'm pretty sure emby will be just using existing http libraries for web requests - so it's probably that sub-process that also needs routes on your vpn.

[lexisdude 145]

8 hours ago, rbjtech said:

setup some tooling such as ProcMon to see what processes are being called during the http request.   I'm pretty sure emby will be just using existing http libraries for web requests - so it's probably that sub-process that also needs routes on your vpn.

Brilliant , I had not thought to do that before. Ended up tracing the problem back to windows firewall getting changed due to vpn app.. This is a DOH moment for me, but thank you for steering me in the right direction.

[oneseventhree 2]

On 8/26/2024 at 10:56 AM, lexisdude said:

Brilliant , I had not thought to do that before. Ended up tracing the problem back to windows firewall getting changed due to vpn app.. This is a DOH moment for me, but thank you for steering me in the right direction.

I am having yuour exact issue - how did you fix it ?