How Plum Box Works: A Technical Deep Dive

How Plum Box Works: A Technical Deep Dive

How Plum Box Works: A Technical Deep Dive

How Plum Box Works: A Technical Deep Dive

Plum

Plum

Plum

Introduction


We've received a lot of great technical questions from our community about how Plum Box actually works under the hood. In this post, we'll break down the architecture — how remote access is established, what happens to your data if Plum disappears, and exactly how your files are stored on the SSD.



1. Remote Access Architecture


Plum Box connects to your local network and provides access to your files from anywhere in the world. Here's how the connection is established:



Connection Flow


When you open the Plum app outside your home network, the connection happens in three phases, matching the diagram below:



Phase 1: Signaling (Arrow ①)
  • Client initiates connection request via Signal Server

  • Peers discover each other and exchange connection metadata



Phase 2: Discovery (Arrow ②)
  • ICE determines the optimal connection path

  • STUN server discovers public IPs and NAT types for both devices



Phase 3: Connection (Arrow ③)
  • Direct P2P connection attempts via UDP hole punching

  • Success: WireGuard tunnel is established (Green Line) for encrypted data transfer

  • Fallback: If P2P fails, the connection routes through the TURN Relay automatically





Default Mode: Plum Relay


For most users, Plum Relay handles connectivity automatically with zero configuration.


How it works

Component

Function

Signal Server

Facilitates peer discovery and exchanges connection metadata. No user data passes through.

STUN Server

Discovers your public IP address and NAT type for P2P negotiation.

TURN Relay

Fallback relay when direct P2P connection is not possible (e.g., symmetric NAT, carrier-grade NAT).


Key points
  • P2P First: The system always attempts a direct peer-to-peer connection. Relay is only used as fallback.

  • End-to-End Encryption: All traffic is encrypted via WireGuard tunnel. Even when relayed, Plum servers cannot decrypt your data.

  • No Port Forwarding Required: Works behind any NAT or firewall.

Protocol Stack

Layer

Technology

Role

Application

Plum App

User Interface, File Management

Encryption

WireGuard

End-to-End Encryption (ChaCha20-Poly1305)

Traversal

ICE / STUN / TURN

NAT Traversal, Peer Discovery

Transport

UDP / TCP

Data Transmission (UDP preferred)

Network

IP

Addressing






Advanced Mode: Port Forwarding + DDNS


For users who want complete independence from Plum's infrastructure:



Requirements
  • Static IP or Dynamic DNS (DDNS) service

  • Router with port forwarding capability

  • Plum Box local IP address



Configuration


Router Port Forwarding

  • External Port: 443 (or custom)

  • Internal IP: [Plum Box Local IP]

  • Internal Port: 443

  • Protocol: TCP/UDP



Advantages
  • Zero dependency on Plum servers

  • Direct connection with lowest latency

  • Full operational independence



A detailed port forwarding setup tutorial will be published before shipping starts in 2026.







2. What Happens If Plum Shuts Down?


This is one of the most common concerns we hear. Here's the technical breakdown:



Architecture: Local-First Design


Plum Box is architected with local-first principles. Your data never leaves your device unless you explicitly access it remotely.




Failure Scenarios

Scenario

Local Access

Remote Access

Data Integrity

Plum servers online

✓ (Relay or P2P)

Plum servers offline

✓ (Port Forward)

Internet outage

Plum Box hardware failure

SSD removable

Key takeaway: Your data exists only on your SSD. Plum servers handle connection routing, not data storage.



Plum Server Dependencies

Function

Requires Plum Server

Alternative

Local network backup

No

Local file access

No

Remote access (default)

Yes (Relay)

Port Forwarding







3. SSD Data Storage



File System: exFAT


Plum Box formats your SSD with exFAT for maximum cross-platform compatibility.


Feature

exFAT

ext4

NTFS

Windows native support

macOS native support

Read-only

Linux native support

✓ (ntfs-3g)

Max file size

16 EB

16 TB

16 TB

Journaling


Why exFAT:
  • Native read/write on Windows, macOS, and Linux without additional drivers

  • No file size limitations for large video files

  • If you remove the SSD, you can access files on any computer immediately




Directory Structure


When you connect your SSD to any computer, you'll see:


Structure details:


Directory

Content

Organization

/Photos

Photo & video backups

Year/Month hierarchy

/Files

User-uploaded files

User-defined folders

/Downloads

Downloaded content

Flat or user-defined


The directory structure in the Plum app mirrors exactly what's on the SSD. What you see in the app is what you get on disk.



Encryption (Optional)


Plum Box offers optional full-disk encryption for users who require additional security.


Encryption

SSD Access via PC

Notes

OFF

Direct access — files visible immediately

Maximum convenience

ON

Requires Plum Decryption Tool

Maximum security


When encryption is enabled:


Plum Decryption Tool:
  • Standalone application (Windows, macOS, Linux)

  • Works independently of Plum Box or Plum servers

  • Will be available for download and archived permanently







4. Storage Expansion



Single-Bay Architecture


Plum Box features one M.2 NVMe SSD slot (M-key). This design prioritizes:

  • Compact form factor

  • Lower cost

  • Simplicity


Supported SSDs:
  • Interface: M.2 NVMe (M-key)

  • Form factors: 2280, 2260, 2242

  • Capacity: Up to 8TB (tested)



When Storage Fills Up


Option A: Swap SSD in Plum Box

Option B: Access via External Enclosure



Accessing Old SSDs

Method

Requirements

Use Case

Re-insert into Plum Box

None

Quick access, browsing via app

M.2 USB Enclosure

~$10-15 enclosure

Access via any PC

Direct PC connection

M.2 slot on motherboard

Fastest transfer

Note: If encryption is enabled, you'll need the Plum Decryption Tool regardless of access method.








Summary


Component

Implementation

Remote Access

P2P first (WireGuard + ICE/STUN), Relay fallback (TURN)

Encryption (Transit)

WireGuard (ChaCha20-Poly1305, Curve25519)

Encryption (Storage)

Optional, with standalone decryption tool

File System

exFAT (cross-platform native support)

Directory Structure

/Photos, /Files, /Downloads — mirrors app UI

Server Dependency

Local access: None / Remote: Relay or Port Forward

Storage Expansion

Swap SSD, access old drives via enclosure or re-insert


Design Philosophy


Plum Box is built on three principles:

  • Your data stays yours — 100% local storage, no cloud dependency

  • No lock-in — Standard file system, removable SSD, open protocols

  • Graceful degradation — If Plum disappears, your data and access remain

Designed by Plum.

© 2025. All rights reserved

131 Continental Dr, Suite 305

Newark, DE 19713, USA

Plum Networks Inc.

Designed by Plum.

© 2025. All rights reserved

131 Continental Dr, Suite 305

Newark, DE 19713, USA

Plum Networks Inc.

Designed by Plum.

© 2025. All rights reserved

131 Continental Dr, Suite 305

Newark, DE 19713, USA

Plum Networks Inc.

Designed by Plum.

© 2025. All rights reserved

131 Continental Dr, Suite 305

Newark, DE 19713, USA

Plum Networks Inc.