Remote Access | Unraid Docs (2024)

The Remote Access featureallows you to access your Unraid WebGUI from the Internet. If you needaccess to Docker containers, network drives, or other devices on yournetwork, you'll want to setup a VPN instead.

Note: Before enabling remote access, consider your root password. Isit sufficiently complex? Update your root password on the Users page.

Also note: Remote Access is an optional feature, and is not requiredto use the rest of Unraid Connect.

Initial Setup​

1. From Unraid WebGUI Navigate to Settings → Management Access
2. Note the HTTPS port, it defaults to port 443. If you have Dockercontainers running on this port, choose an unused port over 1000such as 3443, 4443, 5443, etc.
3. If you changed any of the above settings, hit Apply for them totake effect.
4. In the CA-signed certificate file area, click Provision

Choose Remote Access Type​

There are two kinds of Remote Access provided through Unraid Connect:Dynamic Remote Access and Static Remote Access

Dynamic Remote Access enables access to your WebGUI from theinternet only when needed, and leaves the WebGUI inaccessible from WANotherwise. This feature works with both UPNP as well as static portforwarding and uses an API call through the Unraid Connect plugin toopen your WebGUI to internet traffic, closing it automatically when notneeded. This helps to prevent automated attacks.

Static Remote Access enables your server to listen to WAN traffic atall times, allowing your server to be accessed from the internet.

Dynamic Remote Access​

To use Dynamic Remote access, first set the type you would like to usein the Settings → Management Access → Unraid Connect settings page. Choose oneof the Dynamic settings in the Remote Access dropdown:

1. Dynamic - UPNP
   • This option enables dynamic access through the Connect dashboard,as well as automatically opening and closing a random port onnetwork with UPNP. To use this option your router must have UPNPenabled.
2. Dynamic - Manual Port Forward
   • This option enables dynamic access through the Connect dashboard,but requires manual port forwarding.

Dynamic Remote Access Usage​

1. Navigate to Unraid Connect, then toeither the management page or the server details view

2. You will be presented with a new Dynamic Remote Access card,with a button that will be enabled if your server is not accessiblefrom your currentlocation.

   

3. Clicking the button will trigger your server to enable wan access,and if using UPNP, create a new UPNP port forward lease on yourrouter. This can take up to a minute to complete

   • When using UPNP, a 30 minute lease will be created, which will berenewed automatically while Dynamic Remote Access is enabled.

4. After enabling, the card will report the status of the enablingprocess, and what the current state of UPNP is.

5. After ten minutes of inactivity, or clicking "Disable RemoteAccess", your server will automatically turn off access from WANtraffic.

   • When using UPNP, your server will also attempt to remove the UPNPlease from your router.

Configuring UPNP (Applies to Dynamic - UPNP / Always On - UPNP)​

1. Ensure your router supports UPNP and has it enabled.
2. Navigate to Settings → Management Access and set "Use UPnP" toYes.
3. On the Unraid Connect settings page, set the remote access option toUPNP (either Dynamic or Always On) and Apply.
4. (Always on Forwarding Only) : Press the Check button. If theport is forwarded correctly you will see a message saying "YourUnraid Server is reachable from the Internet"
   • Note: When using Dynamic forwarding, you will not be able toaccess your server from this manual port forward unless you clickthe Enable Dynamic Remote access button inUnraid Connect.
5. Note: If the setting changes from UPnP to "Manual Port Forward" whenyou reload the page, then we were not able to communicate with yourrouter to enable UPnP. It may need to be enabled on your router, orperhaps the router needs a firmware update to use it.

Configuring Manual Port Forwarding (Applies to Dynamic - Manual Port Forward / Always On - Manual Port Forward)​

1. Set the WAN port you want to use. We highly recommend you choosea random port over 1000 rather than using the default of 443. i.e.something like 13856, 48653, etc
2. Click Apply
3. Setup your router to port forward the WAN port you specified tothe HTTPS port used by the server. There is a note on the screentelling you the exact ports and IP to use.
   • Note: some routers require that the WAN port match the HTTPSport. In that case, we'd recommend setting both to the same highrandom number.
4. (Always on Forwarding Only) : Press the Check button. If theport is forwarded correctly you will see a message saying "YourUnraid Server is reachable from the Internet"
   • Note: When using Dynamic forwarding, you will not be able toaccess your server from this manual port forward unless you clickthe Enable Dynamic Remote access button inUnraid Connect
5. To access your server using Remote Access, login toUnraid Connect and click the Manage link

Optional step for secure local access​

If you want to use securehttps for local access to your server as well, navigate toSettings → Management Access. In the CA-signed certificate area, if there are nowarnings about DNS Rebinding then go ahead and set Use SSL/TLS toStrict. If there are warnings about DNS Rebinding seeA note regarding DNS Rebinding Protection.

Note that once SSL is set to Strict, your client computers will needaccess to DNS in order to access your server. This means if yourInternet connection drops you will likely lose access to your server'sWebGUI. See How to access your server when DNS is down.