Intermittent Connectivity Issues with Server While Outside Home (ref#5SBFDG)

Support
1

Network Setup

· My only router was provided by my ISP

ARC Status

· ARC is *Ready*

Describe the issue

When Im outside the house sometimes I can't connect to my server.

Describe your network setup

my isp is Telus, the router is Telus, I use wired connection to my Mac mini, Roon is installed to my Mac, I use Roon ARC on my iPhone.

2

Hello @sriverajr8,

Thank you for your message — that helps a lot.

Please keep in mind that there are three supported ways to connect to your Roon server from outside your home network:

  • UPnP / Port Forwarding
  • VPN / Tailscale-style tunnel

See these official guides for reference:

What we need from you now

  1. Please tell us which of the three methods above you are using (Port Forwarding, VPN/Tailscaleб UPnP).
  2. Go to **Roon → Settings → Roon ARC **, and send us the ARC status.
  3. Confirm whether ARC works properly when your iPhone is on the same LAN (home Wi-Fi) — or does it already fail inside the LAN too?

Once we know exactly which method you use, and have diagnostics, we can help pinpoint where the connection fails.

Thanks — we’ll sort this out together!

3

Hi Vadim,
I think I’m using port forwarding. I already have express vpn, can I use it to set up upnp? my arc works perfecr when I’m on the same nerwork.
Thanks,
joseph

4

Hello @jsriverajr8 ,

ExpressVPN would not work in this case, since you would be connecting to Express VPN’s server, instead of your private VPN at home (Tailscale VPN). When this issue happens, are you using Express VPN on the iPhone? Does the issue impact multiple ARC devices, or just the iPhone? Also just to double check, Roon Settings → ARC says Ready when this issue occurs?

5

Hi, I haven’t tried express vpn on my server. But it works fine using vpn with my phone. how can I set up Tailscale for my mac? I want to try it. Thanks!

6

Hey @jsriverajr8,

Here’s more info on getting Tailscale up and running with Arc:

Let us know if you have any additional questions! :+1:

7

Hello @jsriverajr8

Just checking in to see if you had a chance to review our last message.
Whenever you’re ready, feel free to share an update — we’re here and happy to continue troubleshooting.

Thanks!

8

Hello, i have tried tailscale and it works. The only thing im worried is the security. Its free and im not sure if its really for my files. I have a concern also. If I get the nucleus one, do i have to use tailscake for roon to work?

9

Hello @jsriverajr8,

Good to hear that Tailscale is working for you. Your security concerns are reasonable, so here is a clear explanation of how it works and why it is considered safe.

About Tailscale Security

Tailscale is built on the WireGuard protocol, which is one of the most secure VPN technologies available today.

End-to-end encryption

All communication between your devices is fully encrypted. Only your devices hold the encryption keys. Tailscale’s servers do not have access to your data and cannot decrypt anything.

No access to your files

Tailscale cannot see your Roon database, your files, or any information on your devices. It only coordinates the connection; the encrypted tunnel is created directly between your devices.

Peer-to-peer whenever possible

Traffic usually goes directly from your phone to your server over an encrypted WireGuard tunnel, not through any third-party servers.

Industry use

Tailscale is widely used by engineers, companies, and home-lab users for secure remote access. Its security model is strong, simple, and well audited.

Because of this, using Tailscale with Roon ARC is a safe solution.

If you buy a Nucleus One, do you need Tailscale?

It depends on your network:

If port forwarding is not possible

Yes, you will need Tailscale on the WAN side of your network to allow ARC to reach your Nucleus One.

If your router supports normal port forwarding

Then you do not need Tailscale at all. ARC will work through the forwarded port exactly as designed.

Summary

  • If your ISP or router blocks port forwarding: use Tailscale.
  • If port forwarding works normally: Tailscale is optional.
  • In both cases, your data remains secure.