How to Self-Host Your Media Library Without Port Forwarding
Benefic lets you stream your personal media from anywhere using WebRTC peer-to-peer connections — no port forwarding, no VPN, no exposed services. Install it, point it at a folder, and stream.
Yes, you can self-host your media library and stream it from anywhere — without opening a single port on your router. Benefic makes this possible using WebRTC peer-to-peer connections.
Why Port Forwarding Is a Problem
Traditional self-hosting tools like Plex, Emby, and Jellyfin require you to:
- Open ports on your router
- Configure dynamic DNS or a static IP
- Manage TLS certificates for remote access
- Expose your home network to the internet
This creates attack surface and operational complexity that most people shouldn’t have to deal with.
How Benefic Solves This
Benefic uses WebRTC — the same technology that powers video calls in your browser — to establish direct, encrypted connections between your devices.
Here’s what that means in practice:
- No ports to open — WebRTC’s ICE/STUN protocol handles NAT traversal
- No VPN needed — connections work across networks automatically
- No cloud relay — your media streams device-to-device
- End-to-end encrypted — DTLS-SRTP protects every session
Get Started in 5 Minutes
1. Install Benefic
Download the CLI for Linux or macOS and install ffmpeg:
# macOS
brew install ffmpeg
# Ubuntu / Debian
sudo apt install ffmpeg
2. Sign Up and Log In
benefic login
3. Start Your Library
benefic run -d ~/Movies/
Name your files like Movie Name (YYYY).mp4 — for example, Blade Runner (1982).mkv.
4. Stream From Anywhere
Open benefic.com on any device. Your media streams directly from your machine through an encrypted P2P connection.
How Benefic Compares
| Feature | Benefic | Plex / Jellyfin |
|---|---|---|
| Port forwarding | Not required | Required for remote access |
| Encryption | End-to-end DTLS-SRTP | TLS to exposed server |
| Privacy | Zero-knowledge | Server sees everything |
| Setup time | Under 5 minutes | 30+ minutes with networking |
| Internet exposure | None | Open ports required |
Privacy by Default
Benefic operates on a zero-knowledge architecture. It acts only as a signaling coordinator to help your devices find each other. After the initial handshake:
- All traffic flows directly between your devices
- Benefic never sees your files, filenames, or watch history
- Your encryption keys never leave your devices
Self-hosting your media should be simple and private. With Benefic, it is.