Stream from home while traveling — connect your Apple TV to your home network
You're at a hotel, a cabin, or staying with family abroad. You brought your travel Apple TV — but Plex, your NAS, your home cameras, and your iCloud-free photo library are all stuck behind your home router. Here's how WG Connect makes them feel local again.
The problem
Your home media setup — Plex, Jellyfin, an SMB share, a Synology NAS, Infuse pulling from a Linux box — works flawlessly when the Apple TV sits on your living-room Wi-Fi. The moment you leave the house, none of it can be reached. Public services like Plex Pass relay traffic through their own servers, but you pay a quality penalty (transcoding, lower bitrate, latency) and your private library is exposed to a third party.
You don't need a relay. You need your Apple TV to be on your home LAN, even when it's physically 2,000 kilometers away.
How it works
WireGuard is a modern VPN protocol designed to do exactly this. You run a WireGuard server on your home router (or on a small device like a Raspberry Pi behind it). Your traveling Apple TV runs WG Connect as the WireGuard client. The two establish a permanent encrypted tunnel:
┌──────────┐ ┌─────────────┐
│ Apple TV │ ── encrypted tunnel ──▶│ Home router │
│ (hotel) │ │ (WireGuard)│
└──────────┘ └──────┬──────┘
│
▼
┌──────────────────┐
│ Plex · NAS · Pi │
│ Cameras · Photos │
└──────────────────┘
From the Apple TV's perspective, it now has an IP address on your home network. Plex's server discovery finds your media server as if you were sitting on the couch. Infuse browses your SMB shares directly. Bonjour discovery (AirPlay, HomeKit) works on routers that support it across the tunnel.
Step-by-step setup
- Set up WireGuard on your home router. pfSense, OPNsense, UniFi (UDM/UDR), Firewalla, ASUS Merlin, GL.iNet, and Mikrotik all have one-click setups. If your ISP router doesn't support it, plug a Raspberry Pi running
wg-easyinto your LAN — that takes 15 minutes total. - Enable a dynamic DNS hostname if your home IP changes. Free options: DuckDNS, No-IP, or your router's built-in DDNS. Use that hostname (e.g.
home.duckdns.org:51820) as the WireGuard endpoint. - Generate a client config for the Apple TV. Set
AllowedIPs = 0.0.0.0/0, ::/0if you want all traffic routed home, orAllowedIPs = 192.168.1.0/24if you only want LAN access (split-tunnel). - Import into WG Connect. On your travel Apple TV: open WG Connect → Add Profile → Upload from Phone. Scan the QR code, upload the
.conffrom your phone over local Wi-Fi. No cables, no AirDrop friction. - Connect. Tap the profile. Within seconds the tunnel is up. Open Plex or Infuse — your home server appears in "Local servers" instantly.
Tip
If you want this to work automatically the moment your Apple TV boots in a hotel, enable always-on in WG Connect Settings. The tunnel reconnects automatically and survives reboots.
Split tunnel or full tunnel?
There are two ways to configure this, and which you pick depends on what you want:
- Split tunnel (
AllowedIPs = 192.168.1.0/24) — only traffic to your home network goes through the tunnel. Streaming from Netflix and YouTube uses the hotel's local connection directly. Lower latency for everyday streaming, but no privacy benefit for general traffic. - Full tunnel (
AllowedIPs = 0.0.0.0/0, ::/0) — everything goes through your home internet. You appear to be at home for geo-blocking purposes (your usual Netflix region works). Streaming bandwidth is limited by your home upload speed.
Most people doing this use full tunnel. A 100 Mbps home connection comfortably streams 4K Plex direct-play or Netflix 4K HDR.
Considerations
- Upload speed at home is the limit. Check your home upload (not download). 25 Mbps is enough for 1080p; 50–100 Mbps for 4K.
- Latency matters less than you think. Streaming buffers absorb 100ms+ of latency. Real-time things like FaceTime or gaming are not the use case here.
- WireGuard is silent when idle. The tunnel uses no bandwidth when you're not actively transferring. Leaving it always-on costs nothing.
Frequently asked questions
Will Plex and Infuse work over a WireGuard tunnel?
Yes. Both apps treat the tunnel as a regular network. Plex's local server discovery sees your home server as if you were on the LAN, and Infuse can browse your NAS via SMB or NFS. 4K HDR streams from a Plex direct-play work fine on most home upload speeds (50–100 Mbps).
Do I need a static IP at home?
No. Most consumer routers with WireGuard support have built-in dynamic DNS (DDNS). Use a free DDNS hostname like home.duckdns.org as your endpoint instead of an IP address.
Will my Apple TV reconnect automatically when I get back home?
Yes. WG Connect supports always-on with auto-reconnect. When the Apple TV is on your home Wi-Fi the tunnel is harmless — and when you travel, it engages automatically.
Which home routers support WireGuard?
pfSense, OPNsense, UniFi (UDM/UDR), Firewalla, ASUS Merlin, Mikrotik, GL.iNet travel routers, and any Linux box. If your ISP-issued router doesn't, put a small Raspberry Pi behind it as a WireGuard server — total cost under $50.