netflector available as plugin (mDNS, SSDP, DIAL, WSD, WoL reflector)

Started by UnicronHD, August 13, 2026, 02:44:16 PM

Previous topic - Next topic
Quote from: RamSense on September 21, 2026, 07:30:43 AMGreat, The plugin 0.1.6 with netflector 0.16.0 is installed and working perfectly here.

Thanks again for all the work and support!

Happy to help, thanks for the idea and all the testing.

Any chance for SSDP via wireguard? Adding peers did not help.

Quote from: mnaim on Today at 03:05:56 PMAny chance for SSDP via wireguard? Adding peers did not help.

SSDP over WireGuard should work, but peers are not the part that makes it work. Discovery over a tunnel depends on the client searching. When the phone's M-SEARCH arrives on the WireGuard interface, netflector relays it to the LAN and sends the devices' unicast replies back to the phone. That leg needs no peers. Peers only cover the devices' periodic NOTIFY advertisements, which reach a peer as unicast on port 1900. A client sees those only if it listens on that port, and most find devices by searching anyway.

Things to check:

  • Searches go from Source to Target. With the phones behind the tunnel, set the reflector up as:
    • Source: your WireGuard interface
    • Target: LAN
    • SSDP: checked
    • Source peers: the phones' tunnel addresses, e.g. 10.10.10.2
    With the WireGuard interface as Target and Bidirectional unchecked, the phone's searches are counted as skipped and never relayed.
  • Check that the search reaches the firewall at all. Run this in a shell while the app is searching, with your WireGuard interface's device name:
    tcpdump -ni wg0 udp port 1900The phone's WireGuard only sends to destinations in its AllowedIPs, so 239.255.255.250 has to be covered (0.0.0.0/0, or add 239.255.255.250/32). Some apps also search only on Wi-Fi whatever the VPN does. If tcpdump shows nothing, netflector has nothing to relay.
  • Once a device is found, the app connects to its LAN address, so the phone's AllowedIPs need the LAN subnet, and a firewall rule on the WireGuard interface has to let it reach the LAN. Some TVs refuse clients from another subnet; for casting, checking DIAL works around that.

If it still fails, please post /usr/local/etc/netflector.toml, the netflector and os-netflector versions, the client and app, the tcpdump output, and the log (Services > Netflector > Log File) with Log level set to Debug on the General tab. The line I'm looking for starts with "reflected SSDP search from 10.10.10.2".