You spent weeks building the perfect home lab — Plex for media, Home Assistant for automation, Pi-hole for ad blocking, maybe a NAS and a few Docker containers. Everything works beautifully on your local network. But the moment you leave the house, it all disappears. With Ghost Networks, your home lab follows you everywhere — without touching your router settings.
The Home Lab Dilemma
Getting remote access to a home lab usually means fighting your ISP, your router, and your own security instincts. The traditional options are all painful.
Step 1: Install the Connector on Your Home Server
Run two commands on your home server. The Ghost Connector installs as a lightweight daemon and connects your machine to your Ghost network. No router changes needed.
The connector works behind CGNAT, double NAT, and restrictive firewalls. It punches out — no incoming ports required.
Step 2: Create a Phantom Hub for Your Lab
Group your home server and the devices you want to access it from into a Phantom Hub. Only devices inside the hub can see each other.
Step 3: Access Everything, From Anywhere
Connect to your Ghost network on your phone or laptop. Your home server's private IP is now reachable — as if you were on your home Wi-Fi.
Services That Just Work
Plex / Jellyfin
Stream your media library from anywhere
Home Assistant
Control your smart home remotely
Pi-hole / AdGuard
Ad blocking that follows you everywhere
Nextcloud / NAS
Access files and photos without cloud storage
SSH / Portainer
Manage containers and servers remotely
Cameras / NVR
Check security cameras without exposing feeds
Share With Family
Want your partner or kids to access Plex when they're away from home? Generate a BiFrost Pass — a secure invite link that lets them join your home lab hub with their own devices. Set a device limit and an expiration.
They install the Ghost Networks app, scan the QR code, and they're in. No passwords, no VPN config files, no tech support calls.
Zero Port Forwarding
Your router stays locked down. Every port closed. Ghost Networks creates an encrypted mesh that works through NAT, CGNAT, and firewalls — no inbound connections needed.