REMOTE NETWORK GUIDES

Build the private path.
Then press the button.

Far Fruit controls a reachable Apple TV; it does not create the route to it. Choose the setup that matches the network you own or are authorized to manage.

FIRST: ONE IMPORTANT DISTINCTION

Discovery and reachability are not the same thing.

Bonjour is designed primarily for the local link. A VPN can make an Apple TV reachable without carrying Bonjour discovery across the router. If the TV does not appear automatically, use its reachable IP address or DNS name. That is normal—not a failed VPN.

01

RECOMMENDED

Tailscale

The simplest setup when you can install Tailscale directly on the Apple TV and on the Mac running Far Fruit.

START HEREInstall Tailscale on both devices.
Get Tailscale ↗
  1. 1
    Add the Apple TV

    On Apple TV with tvOS 17 or later, install Tailscale, allow its VPN configuration, connect, and authorize it into your tailnet.

  2. 2
    Add your Mac

    Install Tailscale on the Mac and sign in to the same tailnet. Approve either device if your tailnet requires device approval.

  3. 3
    Use the direct address

    Find the Apple TV’s Tailscale address in the Tailscale app or admin console. In Far Fruit, choose Direct Address and enter the 100.x address or its MagicDNS name.

  4. 4
    Pair while you can see the screen

    Keep Apple TV awake, start pairing in Far Fruit, and enter the PIN displayed by tvOS. Saved credentials are reused for later connections.

Official Apple TV setup ↗Official MagicDNS guide ↗Official subnet-router guide ↗

02

ROUTER OR GATEWAY

WireGuard

WireGuard has an official macOS client, but not a tvOS client. Put the remote end on a VPN-capable router or an always-on gateway inside the Apple TV’s network.

  1. 1
    Create the remote gateway

    Configure WireGuard on the remote router, firewall, server, or small always-on computer that can reach the Apple TV’s LAN.

  2. 2
    Route the remote subnet

    On the Mac peer, include the remote LAN range in AllowedIPs—for example, 192.168.50.0/24. Avoid overlapping LAN ranges at the two locations.

  3. 3
    Allow the return path

    Enable forwarding on the remote gateway and make sure its firewall and LAN routing allow replies to return through WireGuard. Do not expose Apple TV control ports to the public internet.

  4. 4
    Connect by LAN address

    Activate the tunnel, then enter the Apple TV’s private LAN IP in Far Fruit. Bonjour may remain empty even when this connection is working.

Official WireGuard installation ↗Official WireGuard quick start ↗

03

OTHER PRIVATE NETWORKS

Mesh, site-to-site, and router VPNs

ZeroTier, NetBird, router VPNs, and business site-to-site tunnels can work. The brand matters less than what the route actually permits.

01

A private route

Your Mac must be able to reach the Apple TV itself or its local network.

02

A stable address

Use the TV’s VPN address, private LAN address, or a DNS name that resolves while the VPN is active.

03

Two-way traffic

The remote network must allow replies back through the same private path.

04

An awake television

Keep Apple TV awake and visible while you complete the first pairing PIN.

WHEN IT STILL DOES NOT CONNECT

Check the path in this order.

  1. VPNBoth ends show connected.
  2. RouteThe TV address belongs to a subnet carried by the tunnel.
  3. ReachabilityThe remote firewall is not isolating VPN clients from the TV.
  4. AddressUse the VPN or LAN IP instead of waiting for Bonjour.
  5. PairingThe Apple TV is awake and its PIN is visible.

Never paste pairing credentials, VPN private keys, or authentication tokens into a support request.