Port Forwarding

Port forwarding helps you get better download speeds by allowing incoming connections to your torrent client. YAMS enables port forwarding by default, but setup varies by VPN provider.

ProtonVPN Users 🚀

ProtonVPN makes port forwarding easy! Just follow these steps:

🆕 ProtonVPN now supports WireGuard with port forwarding! If you want faster VPN performance, check out our Switching Gluetun to WireGuard guide.

Setup from zero

If you didn’t set up port forwarding with the YAMS installer, start here.

If you did set up port forwarding with the YAMS installer, skip ahead to Automatically change to the forwarded port.

Update your .env file

For OpenVPN users, you need to modify your OPENVPN_USER in your .env file.

Open your .env file (usually located at /opt/yams/.env) using nano:
```
nano /opt/yams/.env
```
Locate the VPN_USER line and append +pmp to your username, as shown in this example:

# VPN configuration
VPN_ENABLED=y
VPN_SERVICE=protonvpn
VPN_USER=your_user+pmp # Append +pmp here!
VPN_PASSWORD=your_password

Save the file and exit nano (Ctrl+S, then Ctrl+X).

Update your Docker Compose file

Open your Docker Compose file, located at /your/install/location/docker-compose.yaml, and update these variables:

  # Gluetun is our VPN, so you can download torrents safely
  gluetun:
    image: qmcgaw/gluetun:v3
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8888:8888/tcp # HTTP proxy
      - 8388:8388/tcp # Shadowsocks
      - 8388:8388/udp # Shadowsocks
      - 8003:8000/tcp # Admin
      - 8080:8080/tcp # gluetun
      - 8081:8081/tcp # gluetun
    environment:
      - VPN_SERVICE_PROVIDER=${VPN_SERVICE}
      - VPN_TYPE=openvpn
      - OPENVPN_USER=${VPN_USER}
      - OPENVPN_PASSWORD=${VPN_PASSWORD}
      - OPENVPN_CIPHERS=AES-256-GCM
      - PORT_FORWARD_ONLY=on  # Change this!
      - VPN_PORT_FORWARDING=on  # Change this!
      - FIREWALL_OUTBOUND_SUBNETS=172.60.0.0/24
    restart: unless-stopped
    networks:
      yams_network:
        ipv4_address: 172.60.0.18

Summary of changes:

PORT_FORWARD_ONLY should be set to on.
VPN_PORT_FORWARDING should be set to on.

Automatically change to the forwarded port

Create a script to update qBittorrent’s port. Make sure you change /your/install/location:

mkdir -p /your/install/location/scripts
nano /your/install/location/scripts/update-port.sh

Add this code to the script: https://gitlab.com/-/snippets/4788387. Make sure you edit this to match your own configuration:

QBITTORRENT_USER=admin            # qbittorrent username
QBITTORRENT_PASS=adminadmin       # qbittorrent password

Make the script executable:

chmod +x /your/install/location/scripts/update-port.sh

Run it to verify it’s working:

./your/install/location/scripts/update-port.sh

You should see an output similar to this:

2024-12-30 08:21:58 | VPN container gluetun in healthy state!
2024-12-30 08:21:58 | qBittorrent Cookie invalid, getting new SessionID
2024-12-30 08:21:58 | Public IP: 111.111.111.111
2024-12-30 08:21:58 | Configured Port: 61009
2024-12-30 08:21:58 | Active Port: 61009
2024-12-30 08:21:58 | Port OK (Act: 61009 Cfg: 61009)

Set up automatic port updates (runs every 5 minutes):

(crontab -l 2>/dev/null; echo "*/5 * * * * /your/install/location/scripts/update-port.sh") | crontab -

Other VPN Providers 🌐

For other VPN providers, port forwarding configuration varies.

💡 Some providers support WireGuard too! See Switching Gluetun to WireGuard for details.

For detailed provider-specific instructions, check the Gluetun Port Forwarding Documentation.

Verifying Port Forwarding ✅

To check if port forwarding is working:

Run curl http://localhost:8003/v1/openvpn/portforwarded to see your current port
Visit Open Port Check Tool and test your port by using your public VPN IP and the active port
Check qBittorrent’s connection status - it should show “Connection Status: Connected”

Troubleshooting 🔧

No port shown:

docker logs gluetun | grep "\[port forwarding\]"

Look for any error messages

Port not updating:
- Check if the script has execute permissions
- Verify crontab is running: crontab -l
- Check script logs: tail -f /var/log/syslog | grep update-port

Need help? Visit our Common Issues page or join our Discord or Matrix chat!

Advanced