UPADTE: OpenVPN connect for Windows recently updated, and broke this config. This is the fix: www.spacerex.co/how-to-fix-synology-openvpn-server-windows-unknown-unsupported-options/
Thanks for making this video, I found this very helpful. I wanted to leave an update that I just set this up using the latest versions of VPN Server and Open VPN Client on Windows and I did not have to remove "pull." In fact, removing "pull" caused the config to break. So I would caution anyone doing this for the first time, try it first without commenting out "pull"!
Thank you very much for your video. It helped me immensely in doing what I needed, and in choosing which option was the best for me. For the record, as of jan. 2024, the fix you link to (commenting the "pull" line in the config file) caused my Windows OpenVPN client to not be able to connect, so I ended up using the file exactly as generated by the Synology application instead.
I know this is a year old but blurring isn't destructive.. use a black bar or somthing that is destructive instead to hide sensitive information in videos. Just to stay safe my friend.
Hi SpaceRex : can you please do a video on how to install a parental controls package on the SYNOLOGY NAS that would apply PARENTAL CONTROLS to the whole LAN network -- that would be wonderful please?
Thank you, this video was exactly what I needed. I'm working on setting up a NAS for a small creative team, all of which are located in different areas of the country and this seems to provide good options on how to access remotely.
Thanks so much for this one! I ran into a problem that took me 6 hours to figure out whereas for some reason, none of my port forwarding was working. Ports weren't opening, and I could not establish a connection to my server from outside my LAN. I thought it might be because of my Eero 6 Pro router, but no. Just commenting here for anyone else to find. Hyperoptic, my UK ISP, holds back static ip4v addresses unless you call them and pay £5 a month. Now that I've done that, everything is working smoothly. Cheers for the great series
FYI … Just got an email yesterday from Tailscale. The free version just got a whole lot better. 😊 Here’s what they said … “Some significant changes are that the Personal plan is now called Free, and it includes nearly everything that Tailscale has to offer for up to 3 users and 100 devices. You read that right, your plan just got better.“ Can’t beat that! 😎👍🏻
You read my mind. I was going to ask you to do exactly a video about accessing my NAS remotely. I live in NYC, but travel to San Juan often for a few weeks at a time. This video will help me decide the best way to access my files while I’m away. Thank you very much for taking your time to make this video. It is much appreciated.
you got a smooth voice...jesus like..its really relaxing. Enjoying learning about my Synology. Im honestly going to make me an old fashioned and just drink and watch.
Bro, thank you. I've been using Synology Drive Client, and it was starting to really piss me off when how often it simply fails to sync properly, but I'm not so great with understanding networking and thought that I was just stuck having to deal with it. I watched the segment about OpenVPN and my issues were resolved in like 5 minutes. Awesome, thank you.
SpaceRex this is an outstanding video and stands the test of time. It is still relevant a year later and impressive in its breadth and depth. Thank you for your efforts.
I've been using Zerotier on a couple of Synology models (DS220+ and DS1621+) for the last 18 months which works really well. As others have pointed out in this discussion, CGNAT is becoming more widespread and Zerotier works transparently with CGNAT. Possibly a bit harder to setup than some of the options in the video, but certainly no harder than TailScale. The big plus from my viewpoint is on the "client" side - the connection setup appears to work regardless of how the client is connecting to the internet, especially when using a mobile/LTE connection. In the past I've had connection issues when my laptop was using a 4G/5G modem or a cell-phone "hotspot". I've never (yet!) encountered any issues with ZeroTier when using those types of connectivity
I need this, oh my god. But I have been struggling setting all of this network stuff up, always pushing through till I get it right eventually. Did you install in on root or with docker? I hope I can manage to set it up
Thanks for posting this video. I couldn't figure out how to sync new shared folders I created to sync to my windows computer. Something was not working right with my Synology Drive Client. Once I uninstalled and re-installed, it worked seamlessly. I thought I was doing something wrong. Followed your steps and got it all figured out!
23:39 If you click "Show certificate" it will pop up a Certificate description and you can check the "Always trust" thingy and then you won't see that message again.
also if you are talking about remote access, then you should also cover the security aspects for this type of setup. There are so many instances of newbies getting wrecked because they setup remote and it was not done properly. So maybe some guidance on security tips for this type of setup should also go hand in hand with this topic you covered. the best security setup is to keep nas for lan usage only. but if you need remote, then the security aspect needs to be discussed so you don't slip up.
Do you know what kind of transfer speed I can achieve between two 500 Mbit/s /up and down networks with this openvpn settings and by adding the 10.8… network share to the finder ? Right now, it struggles beyond 5Megs…
Great video…as usual. I use VPN Plus to connect through my Synology router when I am on my laptop and away from home. However, I use Quickconnect and Drive to access files on my iPhone. Would I be better off connecting my phone to my LAN through VPN rather than Quickconnect and using Drive to access files that way? It is a little more cumbersome to connect but perhaps more secure and maybe quicker as you are not relaying through Synology’s servers.
Like many of us, we have NAS as multimedia & pic sharing. One common and easy access on your local net often unaware & overlooked is DLNA! All smart TV's and even my Bluray player have built in DLNA players for photos, videos, & pics. Can all be done wirelessly (although I recommend ethernet). Synology has provisions for this. Great episode Rex👍
Fantastic so far although I havent had time to really "play" with it. Ive been getting the raid setup and all the users and passwords squared away so far. Then comes the migration and remote access fun.
Thank you for the help! My wife has about 90,000 photos and videos spread across multiple devices. I'd like to consolidate them in a single place with a raid-1 type backup so she can view/edit all photos from her iPad. Max of around 2TB of data. Is the Synology system my best bet for making this work? Liked and subscribed!
Well described, well skilled. I wish i could apply this also but i am suffering from DS-Lite on Vodafone in Germany and this offers no port forwarding but IPv6 Host Exposure. So my skills are not (yet) good enough to find a solution, youtube is rather confusing me with the various recordings. But i consider your sources as one of the best, understandable and focused. BR Uwe
Hey, does it mount like a local drive? Western Digital just pulled the WD Discovery! so I lost "local" mount. I just need it mount so I can use windows explorer
Great video, thank you! For the OpenVPN option I am stuck on the last step, importing the profile. Neither through importing the OVPN file nor connecting by URL. It keeps giving me a timeout error and I have no clue what exactly is wrong. So close, yet so far. I hope I can figure it out, any tips would be appreciated!
There was a new DSM update yesterday due to a SSL vulnerability. 2-3 days ago all of my units using quickconnect and other remote access have been emailing me of this change. Synology’s help pages are pretty poor on explaining this. Will you be doing a video on how to fix this?
Great video. Thank you. I am using windows. My mapped drives continue to work whether on my LAN (without Tailscale running) or remotely (with Tailscale). So you can use the netbios or multicast dns name perfectly. They can also be used to access the web gui for the Synology NAS. (at least this was my experience)
it's nice you mentioned tailscale. however for vpn server you should probably add setting up vpn server using router besides just the inbuilt synology vpn server setup. Some people prefer setting up vpn server on the router rather than the nas. It's fine if you want to show how the later is done, but don't neglect showing the former as well. Also tailscale is supported as a package on pfsense, so that is one less headache for setting it up compared to say hosting it directly on the NAS itself that requires a few more complex steps to setup.
Good point. @spacerex, if the VPN server is installed and a router also exists on the network, will other devices on the network still be able to access the shares. Does the VPN isolated the NAS resources from the wider local network?
5 ways???? That’s why I don’t have this going 😅 But I will soon..thanks for this and all your videos! Hope you and your wife are enjoying Raleigh.. Lived there once in my early IT days..Will move back to Raleigh in 3-4 years.. beautiful place
Thank you for making this video. For the first time I was able to setup my remote webdav access following your instructions which did the trick. Very helpful and useful video. Already sub'd you.👍
My remote access method uses reverse proxy. I bought a SSL certificate for my personal domain name and access DSM and all services running on my Synology that way. Using reverse proxy, I don't need to open any ports and simply have port 443 forwarded to my NAS. All access to my Synology NAS is encrypted using SSL. This method allows me to easily share my media library with others out of my home and allows users to login into their accounts via a simple encrypted URL. The VPN method is great, but I find it more limited since only specific clients configured for VPN access can be used - which I agree, certainly has its benefits. Using HTTPS is super fast even on lower bandwidth-higher latency connections.
So just one thing to know about this is it does leave the services exposed to the internet. There is a layer of security through obscurity in there with having to know the domain name
@@SpaceRexWill But doesn't having any other ports forwarded to the NAS also expose it to the Internet? Or when one connects through a VPN, there is still a remote connection being made to the NAS which requires credentials to be entered. What is the real security risk with using the reverse proxy method? Is it just someone guessing the login credentials? I want to make sure I am not making my NAS anymore vulnerable than necessary.
So when you have a VPN setup a user has to first authenticate to the VPN server, before being allowed on the local network. This means if something on the local network has a vulnerability, it still cannot be exploited unless someone gets on the local network, or through the VPN With a reverse proxy you don't have authentication, this means that if there is a vulnerability on that local service you have given access to, someone *could* exploit it, but just knowing the hostname
Wow the timing of this video is perfect. I have been trying in vain to setup my Synology NAS with PPTP (I know old and weak) on my Android phone but it did not play ball at all. This came into my feed and BINGO OpenVPN worked first time with your help. Thank you. Just a quick question on the OPENVPN setup it asks if access to the LAN is required, by default it is OFF, I assume this would route requests from the external VPN network to the local network via the Synology router?
Nice thanks for option 3 with Tail scale! I hope to use that as I have been having the issue where I can only access my nas/ DDNS setup on the LAN!! Going to test this now I have it setup after I have completed a file trasfer. And hopefully it works when I test it over my hotspot! as then Im sorted when I travel and need to edit! So thanks. And is there anything I can to to increase my speed to my NAS? It is doing around an hour for a 140-180 gigabyte transfer. Thanks:)) Mon 11.3.24 21:49pm
Hi, hope u well, pulling the contents of synology drive to grid in c#, how would prevent the unsynced due to invalid file name or attribute error..as i get a yellow screen that i can seem to catch so i can give the user a message, is there a way i could do that
Thanks for turtorial. One question about ddns, I disabled the ddns but I can still access my dsm. How do I turn off the access to DSM after disabling the ddns? I still want to access synology drive from the outside though. Thanks
Thank you for the wonderful walkthroughs! Question: Is there a way for me to connect to my Synology via DDNS when I’m on the same local network? My use case is essentially just working off my laptop at home with the Synology on the same network. Thank you!
When connecting remotely, do you only see a list of file names, or can you see thumbnails of photos, videos, and pdfs like you can locally? I want to open my giant collection of historic family photos and scanned documents for my family to see, so the thumbnails are important.
Hi thanks for the great tutorial. I have a question about using quickconnect vs open VPN. A). When you transfer files (large amount) from one drive/folder to another. which is faster? If I'm not mistaken, with quicconnect Synology does the work, but using VPN my mac is in charge of the transfer and depending on my connection does thing go slower? B). Plus I can't close my mac until the transfer is over right? where as with quick connect, even if i close my browser the transfer should continue.
Thank you for your video! I was wondering if the Tailscale method would work with any file manager in Linux (in your video you state MacOS and Windows)? Thank you! 🙂
i do NOt understand and hopefully someone can enlighten me... i have seen a number of videos from different creators and they recommend connection via tailscale/openvpn saying Quickconnect is a vunerability. But surely , disabling admin user, and having 2 factor authorisation vis SMS , quick connect should be safe (unless incase synology themselves get hacked?)
Thanks for all you do!! I’ve learned a lot from your videos. I was just able successfully to setup an OpenVPN connection using my router and works well but when I disable quickconnect my iPhone’s synology drive stops working (vpn or home network). Am I doing something wrong? Would the outcome be different if I setup the vpn connection through my NAS?
Thanks for this video, it helped a lot. On a side note, I have to say that based on your persona and your looks ... you could have easily been a replacement for Jeffrey Donovan (aka Michael Weston) on 'Burn Notice'. I love that show.
Hello, great Video thank you. Now I have a Question since Ian looking into getting a 4 Bay NAS and have to consider my budget I am looking Arcturus DS423 (Value Series). I know a plus model would be better but what are your thoughts on the 423? Thank you
Thanks. 1 Question: For the 5 methods described, I presume the authentification and the files are send over the internet encrypted? With a strong encryption?
Fantastic explanations - thank you! I used WebDAV previously, but changed my ISP which now runs behind a CGNAT, so I am unable to use the WebDAV option further as I do not have a public IP address any more. I currently only use Tailscale, and it works fine, but have been interested in the VPN Server option. Do you have any advice on whether the VPN Server will work if being behind a CGNAT as I suspect the DDNS will not connect due to the public IP issue. Any feedback will be appreciated! Many Thanks!
I was thinking about tailscale, is it possible to use Synology photo and upload every videos and photos during a trip ? I think it’s a good idea maybe. What do you think ? Right now , I use synology photo only on my local network and I let run synology photo on my iPhone from time to time to upload everything to my nas.
What would be the best way to have a server at home for my small business and at my office have 3 or 4 workstations accessing an EHR program on the home server? Would it work if I had a windows server on it that my employee can access?
Thank you so much for your videos and detailed explanation, I tried using the tailscale and it seems to workfine, however how can the other users who have limited access to the files in the Synology also get access through tailscale as Im using a specific gmail account for my user account, would love to see a video or an explanation about that.
With more and more ISPs using CGNAT WebDAV and OpenVPN is just something to dream about. And this year it is 25 years since IPv6 became a Draft Standard. Still almost no ISP use it, at least in Norway.
thankfully there are a ton of services coming out like Tailscale, which are designed for big companies, but allow people with CGNAT to still get remote access to the NAS!
great vid! I'm trying to set up tail scale on my gas but can't get anywhere. I installed the app and click on open and it says my devices key has expired. It does not do anything when I click on the blue reauthenticate button. I was able to install it on my Mac just fine. I'm only having this issue on my Nas. Any help you can give would be great! Thanks
@@g.o.9513 I use tailscale for the things which I can do at home, but normaly not at other locations. The second part of your question you really do have to ask Wil, because I don’t know. I think it depends on the speed of the internetconnection you have at home and at the location you are at and that sort of factors. Video editting and music production via tailscale is not a good idea I think.
Tailscale setup just isn't working for me... it doesn't come up with the login page when I first try to launch it. It says the key has expired and won't let me do anything else... HELP?
what about the slow speed via QuickConnect while having the "Synology relay" is checked? once I unchecked this option it started to work fast, but there are a few drawbacks for example my "sharing links" don't work in local wifi or can't play videos in Synology drive (while connected to the same wifi as my server) - it says my certificate is not valid.
Hi, Will, very good job on providing these tutoring videos. Thank you very much. Here is my question, if my friend used option 1 and gave me his quickconnect link, a local user name and password, what is the easiest way of download files/folders to my Synology NAS? He doesn't want to bother with other methods. Thanks again.
thanks. From the Synology Drive can you only choose one folder to sync? What if I need multiple folders? Also, are the users and permissions respected? thanks again.
Good day! just want to ask if is it possible to speed up my read and write speed thru the internet? Example is my NAS is at my house and i will access my NAS in the province its like 300km away from our house? Thank you!
which method would be best for using Plex server remotely? I had quickconnect opened in the past, but I kept getting notfication from my ISP saying someone was trying to access my device and got blocked, so I set the firewall to only local network now, still looking for the best way to open it up to remote access
I am having trouble connecting via SMB on my Mac :( It is working perfectly in my iPhone and iPad. If I type the Tailscale IP address in Safari, it connects, but when I try via Finder it just keeps loading and gives a “failed” error
Which user name and password do you use on your mac to access one of your devices. I'm on the road and this isn't working for me after I set it up at home. I added the address on my MAC but I don't know what user name and password to use. None are giving me access to my devices.
I previously set up QuickConnect and now I'd like to add the Tailscale package. But I can't figure out how to disconnect from quickconnect (I'm a newb) - install the Tailscale package on my Synology and then reconnect to QuickConnect for when I am at home. Any help is appreciated.
Hiya Will (and gang and fans) Stumbled upon your channel and very great tutorials re-doing my entire Syn-Ecosystem - very helpful! Was wondering if anyone knows the best solution to access other packages remotely? Let's say a Sonarr, Radarr, etc. on their respective ports. I've noticed QuickConnect doesn't support this and solely wants to keep you in their little DSM bubble. Would one of the VPN options work here? Let's say, on my phone, could I then simply access those 'port-tools' from anywhere? Many thanks!
UPADTE: OpenVPN connect for Windows recently updated, and broke this config. This is the fix: www.spacerex.co/how-to-fix-synology-openvpn-server-windows-unknown-unsupported-options/
Thanks for making this video, I found this very helpful.
I wanted to leave an update that I just set this up using the latest versions of VPN Server and Open VPN Client on Windows and I did not have to remove "pull." In fact, removing "pull" caused the config to break. So I would caution anyone doing this for the first time, try it first without commenting out "pull"!
Thank you very much for your video. It helped me immensely in doing what I needed, and in choosing which option was the best for me.
For the record, as of jan. 2024, the fix you link to (commenting the "pull" line in the config file) caused my Windows OpenVPN client to not be able to connect, so I ended up using the file exactly as generated by the Synology application instead.
I know this is a year old but blurring isn't destructive.. use a black bar or somthing that is destructive instead to hide sensitive information in videos. Just to stay safe my friend.
Hi SpaceRex : can you please do a video on how to install a parental controls package on the SYNOLOGY NAS that would apply PARENTAL CONTROLS to the whole LAN network -- that would be wonderful please?
The T-Rex toy doesn't go unnoticed. Well done.
He needs a little helmet so he can breathe in space.
Thank you, this video was exactly what I needed. I'm working on setting up a NAS for a small creative team, all of which are located in different areas of the country and this seems to provide good options on how to access remotely.
Thanks so much for this one! I ran into a problem that took me 6 hours to figure out whereas for some reason, none of my port forwarding was working. Ports weren't opening, and I could not establish a connection to my server from outside my LAN. I thought it might be because of my Eero 6 Pro router, but no. Just commenting here for anyone else to find. Hyperoptic, my UK ISP, holds back static ip4v addresses unless you call them and pay £5 a month. Now that I've done that, everything is working smoothly.
Cheers for the great series
FYI … Just got an email yesterday from Tailscale. The free version just got a whole lot better. 😊
Here’s what they said …
“Some significant changes are that the Personal plan is now called Free, and it includes nearly everything that Tailscale has to offer for up to 3 users and 100 devices. You read that right, your plan just got better.“
Can’t beat that! 😎👍🏻
This couldn't have come at a better time! I'm trying to set up VPN access for an editor. Thank you!!
You read my mind. I was going to ask you to do exactly a video about accessing my NAS remotely. I live in NYC, but travel to San Juan often for a few weeks at a time. This video will help me decide the best way to access my files while I’m away. Thank you very much for taking your time to make this video. It is much appreciated.
Glad it helped!
Use TailScale? Curious about its performance on Mac.
you got a smooth voice...jesus
like..its really relaxing. Enjoying learning about my Synology. Im honestly going to make me an old fashioned and just drink and watch.
Yeah, he could do ASMR videos about NAS and have so many new followers :D
Very helpful Will
Thanks so much!
Your videos have been incredibly helpful for a first timer setting up my DS423+. Thank you SpaceRex
Amazingly helpful guide. Set up the OpenVPN method with no issues. You're a lifesaver!
do you have a description what have to setup in the router ? I missed from this video what router settings to make. Thanks!
Bro, thank you. I've been using Synology Drive Client, and it was starting to really piss me off when how often it simply fails to sync properly, but I'm not so great with understanding networking and thought that I was just stuck having to deal with it. I watched the segment about OpenVPN and my issues were resolved in like 5 minutes. Awesome, thank you.
SpaceRex this is an outstanding video and stands the test of time. It is still relevant a year later and impressive in its breadth and depth. Thank you for your efforts.
I've been using Zerotier on a couple of Synology models (DS220+ and DS1621+) for the last 18 months which works really well. As others have pointed out in this discussion, CGNAT is becoming more widespread and Zerotier works transparently with CGNAT. Possibly a bit harder to setup than some of the options in the video, but certainly no harder than TailScale. The big plus from my viewpoint is on the "client" side - the connection setup appears to work regardless of how the client is connecting to the internet, especially when using a mobile/LTE connection. In the past I've had connection issues when my laptop was using a 4G/5G modem or a cell-phone "hotspot". I've never (yet!) encountered any issues with ZeroTier when using those types of connectivity
I need this, oh my god. But I have been struggling setting all of this network stuff up, always pushing through till I get it right eventually. Did you install in on root or with docker?
I hope I can manage to set it up
You have made this set up incredibly easy. Thank you so much!
Excellent video with great information. I found this video while searching for info on how to access my Synology through the internet. Thank you!
Thanks for posting this video. I couldn't figure out how to sync new shared folders I created to sync to my windows computer.
Something was not working right with my Synology Drive Client. Once I uninstalled and re-installed, it worked seamlessly. I thought I was doing something wrong. Followed your steps and got it all figured out!
23:39 If you click "Show certificate" it will pop up a Certificate description and you can check the "Always trust" thingy and then you won't see that message again.
also if you are talking about remote access, then you should also cover the security aspects for this type of setup. There are so many instances of newbies getting wrecked because they setup remote and it was not done properly. So maybe some guidance on security tips for this type of setup should also go hand in hand with this topic you covered.
the best security setup is to keep nas for lan usage only. but if you need remote, then the security aspect needs to be discussed so you don't slip up.
Let's discuss the security setup. Explain..
Thank you So much for Months we had issues connecting to our NAS via internet the 3rd Option for *Tailscale* really helped🙏
Thanks Will! Hope the move went well for you and you are all settled in.
amazing tutorial! you are so succinct and clear. Simply the best tutorial I have ever come across for synology nas on youtube.
You rock as always SpaceRex! You've helped learn everything I know about my new NAS. Thank you!
great explanations - painless installation of the 3 and 5th methods. op show!
Awesome video, thanks for posting and helping me with the decision to purchase. Bro also, I'm surprised you're not bleeding more after all the cuts.
a huge thank you, as you made me successful in one simple task I was failing since months !!
Do you know what kind of transfer speed I can achieve between two 500 Mbit/s /up and down networks with this openvpn settings and by adding the 10.8… network share to the finder ? Right now, it struggles beyond 5Megs…
SpaceRex rocks & Synology Drive rolls!
Great video…as usual. I use VPN Plus to connect through my Synology router when I am on my laptop and away from home. However, I use Quickconnect and Drive to access files on my iPhone. Would I be better off connecting my phone to my LAN through VPN rather than Quickconnect and using Drive to access files that way? It is a little more cumbersome to connect but perhaps more secure and maybe quicker as you are not relaying through Synology’s servers.
You've been an amazing help for getting my NAS set up man. Thank you 🙏🏼
The best Synology channel with the best haircut !!!
I wonder why this channel doesnt have at least 5 times its current sub. Really good vid 👍🎉
THANK YOU sooooooo much! Wonderful tutorial - you've saved me loads of time! Really appreciate you making these videos!
Like many of us, we have NAS as multimedia & pic sharing. One common and easy access on your local net often unaware & overlooked is DLNA! All smart TV's and even my Bluray player have built in DLNA players for photos, videos, & pics. Can all be done wirelessly (although I recommend ethernet). Synology has provisions for this. Great episode Rex👍
That is a good one! DLNA is clunky, but tends to be the most reliable way to get media on smart TV's
Perfectly timely, I just got a block of static IPs from my ISP and was looking at how I wanted to go about self-hosting a VPN
The forums look great, signed up at the first video the algorithm showed me that you mentioned it in
Thanks man! Glad you like them! They have been a ton of fun so far
Couldn't have come at a better time. I am currently setting up a 1823XS+ right now.
Awesome man! How do you like the DS1823xs+?
Fantastic so far although I havent had time to really "play" with it. Ive been getting the raid setup and all the users and passwords squared away so far. Then comes the migration and remote access fun.
Thanks for the Videos SpaceRex! They always help me out!
Thank you for the help! My wife has about 90,000 photos and videos spread across multiple devices. I'd like to consolidate them in a single place with a raid-1 type backup so she can view/edit all photos from her iPad. Max of around 2TB of data. Is the Synology system my best bet for making this work? Liked and subscribed!
Well described, well skilled. I wish i could apply this also but i am suffering from DS-Lite on Vodafone in Germany and this offers no port forwarding but IPv6 Host Exposure. So my skills are not (yet) good enough to find a solution, youtube is rather confusing me with the various recordings. But i consider your sources as one of the best, understandable and focused. BR Uwe
Hey, does it mount like a local drive? Western Digital just pulled the WD Discovery! so I lost "local" mount. I just need it mount so I can use windows explorer
Excellent video, easy to follow and exactly what I was looking for :) thanks a lot!
Great video, thank you! For the OpenVPN option I am stuck on the last step, importing the profile. Neither through importing the OVPN file nor connecting by URL. It keeps giving me a timeout error and I have no clue what exactly is wrong. So close, yet so far. I hope I can figure it out, any tips would be appreciated!
Thanks!
Who would've thought Jimmy Tatro was so good with tech tutorials
There was a new DSM update yesterday due to a SSL vulnerability. 2-3 days ago all of my units using quickconnect and other remote access have been emailing me of this change. Synology’s help pages are pretty poor on explaining this. Will you be doing a video on how to fix this?
Awesome tute as always Will!
Thanks for the run down of the options.
Great video. Thank you. I am using windows. My mapped drives continue to work whether on my LAN (without Tailscale running) or remotely (with Tailscale). So you can use the netbios or multicast dns name perfectly. They can also be used to access the web gui for the Synology NAS. (at least this was my experience)
it's nice you mentioned tailscale. however for vpn server you should probably add setting up vpn server using router besides just the inbuilt synology vpn server setup. Some people prefer setting up vpn server on the router rather than the nas. It's fine if you want to show how the later is done, but don't neglect showing the former as well.
Also tailscale is supported as a package on pfsense, so that is one less headache for setting it up compared to say hosting it directly on the NAS itself that requires a few more complex steps to setup.
Good point. @spacerex, if the VPN server is installed and a router also exists on the network, will other devices on the network still be able to access the shares. Does the VPN isolated the NAS resources from the wider local network?
5 ways???? That’s why I don’t have this going 😅 But I will soon..thanks for this and all your videos! Hope you and your wife are enjoying Raleigh.. Lived there once in my early IT days..Will move back to Raleigh in 3-4 years.. beautiful place
Thought I could do this myself but I was wrong, many thanks for your help!
Thank you for making this video. For the first time I was able to setup my remote webdav access following your instructions which did the trick. Very helpful and useful video. Already sub'd you.👍
Thanks man!
Your videos are awesome man. Thanks for everything.
My remote access method uses reverse proxy. I bought a SSL certificate for my personal domain name and access DSM and all services running on my Synology that way. Using reverse proxy, I don't need to open any ports and simply have port 443 forwarded to my NAS. All access to my Synology NAS is encrypted using SSL. This method allows me to easily share my media library with others out of my home and allows users to login into their accounts via a simple encrypted URL. The VPN method is great, but I find it more limited since only specific clients configured for VPN access can be used - which I agree, certainly has its benefits. Using HTTPS is super fast even on lower bandwidth-higher latency connections.
So just one thing to know about this is it does leave the services exposed to the internet. There is a layer of security through obscurity in there with having to know the domain name
@@SpaceRexWill But doesn't having any other ports forwarded to the NAS also expose it to the Internet? Or when one connects through a VPN, there is still a remote connection being made to the NAS which requires credentials to be entered. What is the real security risk with using the reverse proxy method? Is it just someone guessing the login credentials? I want to make sure I am not making my NAS anymore vulnerable than necessary.
So when you have a VPN setup a user has to first authenticate to the VPN server, before being allowed on the local network. This means if something on the local network has a vulnerability, it still cannot be exploited unless someone gets on the local network, or through the VPN
With a reverse proxy you don't have authentication, this means that if there is a vulnerability on that local service you have given access to, someone *could* exploit it, but just knowing the hostname
unlikely to happen, for the most part, but still something to think about
@@SpaceRexWill Ah. Makes perfect sense now! Thanks so much. I guess I need to reconsider some things.
Wow the timing of this video is perfect. I have been trying in vain to setup my Synology NAS with PPTP (I know old and weak) on my Android phone but it did not play ball at all. This came into my feed and BINGO OpenVPN worked first time with your help. Thank you. Just a quick question on the OPENVPN setup it asks if access to the LAN is required, by default it is OFF, I assume this would route requests from the external VPN network to the local network via the Synology router?
Have you tried Cloudflare tunnels with synology yet?
Nice thanks for option 3 with Tail scale! I hope to use that as I have been having the issue where I can only access my nas/ DDNS setup on the LAN!! Going to test this now I have it setup after I have completed a file trasfer.
And hopefully it works when I test it over my hotspot! as then Im sorted when I travel and need to edit!
So thanks.
And is there anything I can to to increase my speed to my NAS? It is doing around an hour for a 140-180 gigabyte transfer. Thanks:))
Mon 11.3.24
21:49pm
thanks , finaly i did it , im looking for this video long time a go 🙏🏻
Will you comment on quick connect "test connection" when it fails, please??
Hi, hope u well, pulling the contents of synology drive to grid in c#, how would prevent the unsynced due to invalid file name or attribute error..as i get a yellow screen that i can seem to catch so i can give the user a message, is there a way i could do that
Thanks for turtorial. One question about ddns, I disabled the ddns but I can still access my dsm. How do I turn off the access to DSM after disabling the ddns? I still want to access synology drive from the outside though. Thanks
Please show in detail how to build a website from start to finish, as well as how to set the public IP
Here we are a year later. How does On Demand Sync for Mac work these days? Is it production ready? I plan to use it a lot.
Thank you so much for the nice tut, really it was very useful ☺🤗
Thank you for the wonderful walkthroughs!
Question: Is there a way for me to connect to my Synology via DDNS when I’m on the same local network? My use case is essentially just working off my laptop at home with the Synology on the same network. Thank you!
Hi, thanks for great turtorial. I manged to add it to my laptop, how do i add it to another users laptop
When connecting remotely, do you only see a list of file names, or can you see thumbnails of photos, videos, and pdfs like you can locally? I want to open my giant collection of historic family photos and scanned documents for my family to see, so the thumbnails are important.
Hi thanks for the great tutorial. I have a question about using quickconnect vs open VPN. A). When you transfer files (large amount) from one drive/folder to another. which is faster? If I'm not mistaken, with quicconnect Synology does the work, but using VPN my mac is in charge of the transfer and depending on my connection does thing go slower? B). Plus I can't close my mac until the transfer is over right? where as with quick connect, even if i close my browser the transfer should continue.
Thank you for your video! I was wondering if the Tailscale method would work with any file manager in Linux (in your video you state MacOS and Windows)? Thank you! 🙂
i do NOt understand and hopefully someone can enlighten me... i have seen a number of videos from different creators and they recommend connection via tailscale/openvpn saying Quickconnect is a vunerability. But surely , disabling admin user, and having 2 factor authorisation vis SMS , quick connect should be safe (unless incase synology themselves get hacked?)
Thanks for all you do!! I’ve learned a lot from your videos.
I was just able successfully to setup an OpenVPN connection using my router and works well but when I disable quickconnect my iPhone’s synology drive stops working (vpn or home network). Am I doing something wrong? Would the outcome be different if I setup the vpn connection through my NAS?
Thanks for this video, it helped a lot. On a side note, I have to say that based on your persona and your looks ... you could have easily been a replacement for Jeffrey Donovan (aka Michael Weston) on 'Burn Notice'. I love that show.
Great video. Thanks for putting it out.
Hello, great Video thank you. Now I have a Question since Ian looking into getting a 4 Bay NAS and have to consider my budget I am looking Arcturus DS423 (Value Series). I know a plus model would be better but what are your thoughts on the 423?
Thank you
Thanks. 1 Question: For the 5 methods described, I presume the authentification and the files are send over the internet encrypted? With a strong encryption?
Fantastic explanations - thank you! I used WebDAV previously, but changed my ISP which now runs behind a CGNAT, so I am unable to use the WebDAV option further as I do not have a public IP address any more. I currently only use Tailscale, and it works fine, but have been interested in the VPN Server option. Do you have any advice on whether the VPN Server will work if being behind a CGNAT as I suspect the DDNS will not connect due to the public IP issue. Any feedback will be appreciated! Many Thanks!
I was thinking about tailscale, is it possible to use Synology photo and upload every videos and photos during a trip ? I think it’s a good idea maybe. What do you think ? Right now , I use synology photo only on my local network and I let run synology photo on my iPhone from time to time to upload everything to my nas.
Probably dumb question but the third party options work for non synology NASs right?
God bless you ! Such a precise, neat and usefull tutorial!! Thanks so much !
What would be the best way to have a server at home for my small business and at my office have 3 or 4 workstations accessing an EHR program on the home server? Would it work if I had a windows server on it that my employee can access?
Thank you so much for your videos and detailed explanation, I tried using the tailscale and it seems to workfine, however how can the other users who have limited access to the files in the Synology also get access through tailscale as Im using a specific gmail account for my user account, would love to see a video or an explanation about that.
With more and more ISPs using CGNAT WebDAV and OpenVPN is just something to dream about. And this year it is 25 years since IPv6 became a Draft Standard. Still almost no ISP use it, at least in Norway.
thankfully there are a ton of services coming out like Tailscale, which are designed for big companies, but allow people with CGNAT to still get remote access to the NAS!
great vid! I'm trying to set up tail scale on my gas but can't get anywhere. I installed the app and click on open and it says my devices key has expired. It does not do anything when I click on the blue reauthenticate button. I was able to install it on my Mac just fine. I'm only having this issue on my Nas. Any help you can give would be great! Thanks
Are those two LG UltraFine 5K displays? What stand are you using for them?
One other advantage of Tailscale is you can set up a local and remote NAS to backup one to the other using Hyper Backup. 👍🏻
Please provide instructions.
Whow, tailscale is just perfect!
What do you use it for? Curious if its transfer speeds are strong enough for music production and/or video editing.
@@g.o.9513 I use tailscale for the things which I can do at home, but normaly not at other locations. The second part of your question you really do have to ask Wil, because I don’t know. I think it depends on the speed of the internetconnection you have at home and at the location you are at and that sort of factors. Video editting and music production via tailscale is not a good idea I think.
Tailscale setup just isn't working for me... it doesn't come up with the login page when I first try to launch it. It says the key has expired and won't let me do anything else... HELP?
what about the slow speed via QuickConnect while having the "Synology relay" is checked? once I unchecked this option it started to work fast, but there are a few drawbacks for example my "sharing links" don't work in local wifi or can't play videos in Synology drive (while connected to the same wifi as my server) - it says my certificate is not valid.
Hi, Will, very good job on providing these tutoring videos. Thank you very much. Here is my question, if my friend used option 1 and gave me his quickconnect link, a local user name and password, what is the easiest way of download files/folders to my Synology NAS? He doesn't want to bother with other methods. Thanks again.
You would have to download them and then upload them to your nas
thanks. From the Synology Drive can you only choose one folder to sync? What if I need multiple folders? Also, are the users and permissions respected? thanks again.
Hei, nice video. Started using Tailscale, but the hyperbackup won't connect over tailscale. Hope u adress this in a upcoming vdeo.
Which methode is faster for uploading and downloading files any where in the world?
Good day! just want to ask if is it possible to speed up my read and write speed thru the internet? Example is my NAS is at my house and i will access my NAS in the province its like 300km away from our house? Thank you!
which method would be best for using Plex server remotely? I had quickconnect opened in the past, but I kept getting notfication from my ISP saying someone was trying to access my device and got blocked, so I set the firewall to only local network now, still looking for the best way to open it up to remote access
will you make a tutorial about headscale? :D
did it not come with 2gigabit Ports? If you happen to have a layer3 gigabit switch with link agregation, wouln't that help speed things up too??
I am having trouble connecting via SMB on my Mac :(
It is working perfectly in my iPhone and iPad. If I type the Tailscale IP address in Safari, it connects, but when I try via Finder it just keeps loading and gives a “failed” error
The best on the internet!
Which user name and password do you use on your mac to access one of your devices. I'm on the road and this isn't working for me after I set it up at home. I added the address on my MAC but I don't know what user name and password to use.
None are giving me access to my devices.
I previously set up QuickConnect and now I'd like to add the Tailscale package. But I can't figure out how to disconnect from quickconnect (I'm a newb) - install the Tailscale package on my Synology and then reconnect to QuickConnect for when I am at home. Any help is appreciated.
Hiya Will (and gang and fans)
Stumbled upon your channel and very great tutorials re-doing my entire Syn-Ecosystem - very helpful!
Was wondering if anyone knows the best solution to access other packages remotely? Let's say a Sonarr, Radarr, etc. on their respective ports.
I've noticed QuickConnect doesn't support this and solely wants to keep you in their little DSM bubble.
Would one of the VPN options work here? Let's say, on my phone, could I then simply access those 'port-tools' from anywhere?
Many thanks!