Networking LAN vs WAN question

[Batt 0]

I have been using emby for a few years and have just been connecting via my computer. I recently set up a web server with a certificate and want to connect through my iphone. With the help of chatgpt, I was able to set up the proxy so that I can connect to the server via the website. When I connect my phone to the server through https, it works, only when I am off my local network. When I connect to the internal IP, it works, but only when I am on the wifi. I understand why this is happening, I am attempting to connect to my external IP from within the network.

I have attempted to add two servers so I could easily switch between internal and external, but the app only seems to allow for one server to be configured. I am looking for a way to be able to easily connect through the phone app and still use https. is there any way to do this?

I apologize for my sever lack of networking knowledge.

[Painkiller88 249]

most routers are not able to use loopback, means going outside from the internal network and enter the same internal machine again with the own public ip.

You can configure DNS/Host entries to solve this problem.

Again, not 100% sure if your router can do it and allows it but you can give it a try

On the other side, you are not insecure when using your internal ip from the internal network, because all your traffic comes from internal and stays internal.

but i understand you wan't to do it just for the eye so it looks better than the ip.

Edited April 22, 2025 by Painkiller8818

[pwhodges 2012]

I don't know the exact logic, but my experience is that when on the same network Emby client and server will find the direct route and use it.

As was said, there is unlikely to be any security benefit to using https internally.

Paul

[Lessaj 467]

I use the same domain name internally and externally, when within my home network (either directly or via VPN) my internal DNS will resolve to the internal address and everywhere else it will return the remote address. I want all traffic to go through my reverse proxy on 443 so I block traffic intended directly for the server to 8096 since I do see the apps still try to connect to that address directly. I know I don't need https on my local network but it centralizes the traffic flow for statistics and monitoring.