Benefic
self-hosting webrtc privacy streaming

How to Self-Host Your Media Library Without Port Forwarding

Benefic Team · · 2 min read
TL;DR

Benefic lets you stream your personal media from anywhere using WebRTC peer-to-peer connections — no port forwarding, no VPN, no exposed services. Install it, point it at a folder, and stream.

Yes, you can self-host your media library and stream it from anywhere — without opening a single port on your router. Benefic makes this possible using WebRTC peer-to-peer connections.

Why Port Forwarding Is a Problem

Traditional self-hosting tools like Plex, Emby, and Jellyfin require you to:

  • Open ports on your router
  • Configure dynamic DNS or a static IP
  • Manage TLS certificates for remote access
  • Expose your home network to the internet

This creates attack surface and operational complexity that most people shouldn’t have to deal with.

How Benefic Solves This

Benefic uses WebRTC — the same technology that powers video calls in your browser — to establish direct, encrypted connections between your devices.

Here’s what that means in practice:

  • No ports to open — WebRTC’s ICE/STUN protocol handles NAT traversal
  • No VPN needed — connections work across networks automatically
  • No cloud relay — your media streams device-to-device
  • End-to-end encrypted — DTLS-SRTP protects every session

Get Started in 5 Minutes

1. Install Benefic

Download the CLI for Linux or macOS and install ffmpeg:

# macOS
brew install ffmpeg

# Ubuntu / Debian
sudo apt install ffmpeg

2. Sign Up and Log In

benefic login

3. Start Your Library

benefic run -d ~/Movies/

Name your files like Movie Name (YYYY).mp4 — for example, Blade Runner (1982).mkv.

4. Stream From Anywhere

Open benefic.com on any device. Your media streams directly from your machine through an encrypted P2P connection.

How Benefic Compares

FeatureBeneficPlex / Jellyfin
Port forwardingNot requiredRequired for remote access
EncryptionEnd-to-end DTLS-SRTPTLS to exposed server
PrivacyZero-knowledgeServer sees everything
Setup timeUnder 5 minutes30+ minutes with networking
Internet exposureNoneOpen ports required

Privacy by Default

Benefic operates on a zero-knowledge architecture. It acts only as a signaling coordinator to help your devices find each other. After the initial handshake:

  • All traffic flows directly between your devices
  • Benefic never sees your files, filenames, or watch history
  • Your encryption keys never leave your devices

Self-hosting your media should be simple and private. With Benefic, it is.