TVHeadend HTSP over Cloudflare Reverse Proxy – Seeking Help

Peterkal

TVHeadend HTSP over Cloudflare Reverse Proxy – Seeking Help

Description of the Issue:

I have a TVHeadend server running on a Raspberry Pi with a dual DVB-T tuner.

I have successfully set up a reverse proxy using OPNsense HAProxy to expose the TVHeadend WebUI (port 9981) over HTTPS using Cloudflare DNS and my domain. The connection is proxied through Cloudflare with an SSL certificate, which works fine.

WebUI on my domain via HTTPS (port 443) is working.
M3U playlist also works via HTTPS through Cloudflare when accessed from VLC.
Cloudflare protects my domain from DDoS and hides my real IP, but only for WebUI and M3U streaming.

However, I also want to access TVHeadend's HTSP (port 9982) via HTTPS through the same setup to make it work with Kodi's TVHeadend PVR addon.

What I Tried:

Set Kodi to use my domain (tvheadend.mydomain.com) on port 443 with HTTPS enabled.
Tried setting up a separate subdomain (e.g., htsp.mydomain.com) with both "proxied" and "not proxied" modes in Cloudflare.
HAProxy listens on port 443 and successfully forwards 9981 requests to TVHeadend. I tried adding a similar rule for 9982, but it doesn't work.
Kodi logs show errors like:

AddOnLog: pvr.hts: unable to connect to tvheadend.mydomain.com:9982

What I'm Looking For:

The correct HAProxy configuration to allow HTSP traffic (port 9982) over HTTPS through Cloudflare.
Any necessary changes in TVHeadend to support HTTPS for HTSP.
Whether HTSP traffic is compatible with Cloudflare's proxy (or if I need a different approach).

Has anyone managed to get HTSP over HTTPS through a reverse proxy working with Cloudflare and Kodi's TVHeadend addon? What’s the best setup?

Flole

HTTP(S) is not a tunneling protocol, you can't push other protocols through it.

DeltaMikeCharlie

In the Kodi TVH HTSP client, there are some HTTP(s) options, but I have never tried them.

In 'Connection settings', there is an option to use HTTPS and to also define the ports.
In 'Streaming settings', there is an option to use HTTP.

You can try to experiment with these, otherwise you either need to grant external devices access to port 9982 or setup a VPN between your client and TVH.

chewitt

HAproxy and Cloudflare provide HTTP(S) handling capabilities and despite the similar-looking name, HTSP is a not an HTTP(S) protocol. It might be possible to create something using Argo in the Cloudflare portfolio, but I would look at either using Tailscale (based on WireGuard) to establish a private peer-to-peer tailnet, or standard WireGuard to connect devices talking native protocols; no proxies or non-standard config required.

handaryn1976

Hi, I use wireguard tunnels to stream tvheadend out of my home network, it just works.