Should you use a VPN or QuickConnect?
ฝัง
- เผยแพร่เมื่อ 23 ก.ค. 2024
- This video looks at the differences between QuickConnect and a self-hosted VPN. What's the best option?
📌 How to Set Up OpenVPN on a Synology NAS: www.wundertech.net/synology-n...
📌 How to Set up WireGuard on a Raspberry Pi: www.wundertech.net/setup-wire...
📌How to Set up WireGuard on pfSense: www.wundertech.net/how-to-set...
📌 How to Set Up OpenVPN on pfSense: www.wundertech.net/how-to-set...
📌 How to Set Up OpenVPN on a Raspberry Pi: www.wundertech.net/openvpn-ra...
📌 How to Set Up Tailscale: www.wundertech.net/how-to-set...
🔔 Subscribe for more tech related tutorials and overviews: link.wundertech.net/ssYt
🚀 Product Recommendations: link.wundertech.net/rmYt
❤️ Check out our website: link.wundertech.net/wtYt
DISCLAIMER: The information in this video has been self-taught through years of technical tinkering. While we do our best to provide accurate, useful information, we make no guarantee that our viewers will achieve the same level of success. WunderTech does not assume liability nor responsibility to any person or entity with respect to damage caused directly or indirectly from its content or associated media. Use at your own risk.
WunderTech is a trade name of WunderTech, LLC.
0:00 Intro
0:13 Synology QuickConnect
2:36 VPN Server
5:15 Tailscale
6:25 Summary
7:45 Conclusion - วิทยาศาสตร์และเทคโนโลยี
Fantastic content, the best part are the many whys and insights you always give in your videos. I find that even more valuable than just watching how things are done. Keep up the good work!
Thank you very much! I appreciate you watching!
Frank so well done, so well explained . Easy to follow, easy to understand, kudos my friend! I could listen to you for hours. Have a great day.
Thank you for watching, Tony!
Thanks for the video, it confirmed my setup.I use quickconnect because I have a few non-technical family members who just use the Synology Photos app (formerly used Google Photos). Getting them to use this on their phones is hard enough. Getting them to use a VPN client is not realistic. So I created separate users for them, locked down their access to just what they need on the NAS and enabled quickconnect. If I was the only user then I’d just use a VPN.
You can use both.
Thank you for the video. Made the difference between the two very clear. 👍
These videos are really well done.
Loved the video! excellent job Frank! Its important to understand that quickconnect, even though it might seem like it, is not really a remote access solution, its just a synology hosted "tunnel" of some sort. I also give my vote to use a VPN!
Thanks for watching, Avi!
GREAT video. thanks!
Great summary. Self-hosted Synology/router VPN sounds OK, but when there is a CGNAT it won't work, even if port forwarding is set. Then a real alternative to quickconnect is Tailscale or Zerotier (working in docker). If a "man-in-the-middle" like these 3 options is the issue for the user, then a simple free-tier VPS server with a self-hosted and really lightweight Zerotier server might be an optimal choice. A bit more complex to set up, but totally doable, and for those who like to play with their own lab projects and want to have fun, satisfaction, and complete control, this might be an optimal solution. 1. Free VPS Zerotier server instance, 2. remote clients, and a 3. single client at home, acting as subnet router or even an exit node to grant remote access to every device in the local network, such as printer or intelligent refrigerator, light switches, cameras, homeassintant, etc. Everything without port forwarding. Fully controlled and encrypted. Probably for some of the advanced users, this solution has other downsides, but for me though it seems interesting.
Awesome input, thank you for sharing!
Quickconnect is an amazing service, however it does open an interface for attack. The service also routes information via synology servers, slowing transmission speeds. Personally I have turned off quick connect on all my NAS and use tailscale, usually in combo with a WOL server for external access.
Great video, Frank, very helpful to have these pros and cons laid out so clearly. I'm new to NAS and network stuff, so I went with QuickConnect because it said to do so! After I got further into things I started freaking out that I was vulnerable to the world. Now I think it is actually an acceptable option -- I just want to give family the ability to access DS audio and have a secure connection between my iMac upstairs and my NAS downstairs. But I had a question about the advanced QC settings, where you said "only give access to applications you intend to connect to". I'm nervous about unchecking those boxes!
Mobile applications includes DS audio so that one makes sense to keep. But if I uncheck DSM, how else am I supposed to connect to DSM - isn't that my NAS operating system?
Is file sharing just like the "share" function in Finder or Dropbox? I think I can just download files to my iMac and share through one of those means, right? Or am I preventing my iMac from uploading files to the NAS?
Synology Drive Server ... if I end up using this package, is this a must-keep-checked thing? If not, how else could I connect to it?
Thanks again!
Thanks! Ultimately, if you're using them, no need to deactivate them! I was just highlighting that if you're NOT using them, keeping them enabled isn't benefiting you in any way.
File sharing is sharing files from DSM. For any other apps, yes, if you're using them, keep them enabled. Ultimately, you can always turn them back on if you find that you need to use them (and disabled them).
@@WunderTechTutorials Much obliged for the response! Relief to know this isn't one of those "you changed the setting now you're locked out" deals. All the best -
Hi Franck, what is the issue with portforwarding? i utilize the synology builtin reverse proxy to access dsm. i only portforwarded tcp 80 and 443 to my synology and let nginx do the rest with one dedicated let's encrypt certificate per service. is this something that you don't recommend?
There's nothing wrong with port forwarding, but a VPN is the most "secure". It also allows you to access everywhere, where port forwarding would need a reverse proxy server or different port forwarding rules to access different services.
I would, however, recommend using a reverse proxy server (it sounds like you are) or at minimum, change the default DSM port to something different than 5001.
@@WunderTechTutorials thanks for the feedback!
I have used VPN for a couple of months. Problem that occurs regulaty is that the connection suddenly atops working and that it complains bout the ”certificate is not trusted” or similar. Not sure why this happens, but usually re-exporting the config file helpes, however, its time consuming to set the VPN up over and over. Maybe Im doing something wrong
Gr8 video as always
Thanks! Do you have a Let's Encrypt certificate assigned to the VPN Server or are you using the Synology one?
Timely!
If you use Tailscale, are you able to transfer files to or from your Synology NAS from your remote computer ?
Yes, Tailscale is a VPN so after it's configured, you'd be able to access your NAS and transfer files to/from it.
@@WunderTechTutorials I must be missing something because once connected, I don't see what app or process I would use to move / copy files between devices connected by Tailscale. Could you point me in the best direction ?
@@DavidM2002 Tailscale is just a VPN protocol, meaning that you'll connect to it and then connect to your local devices by their local IP address. If Tailscale is configured properly, you should be able to access your NAS by its local IP address in a browser window.
If you have trouble with that, check on the Tailscale website to make sure it's all configured properly.
After some more digging, I'll answer my own question for the benefit of others. There is a free app called WinSCP. When you open it, it will look like you are running two instances of Windows File Explorer side by side. You can then transfer files to and from your remote device. Like most apps, it will take a little bit of time to sort it out but it works rather well. It appears to have a sync feature built in too but I haven't explored that part of it.
Could you in theory use both Tailscale and QC? I would think sharing storage options with families would be much easier with QC, but if I wanted to run containers I'd want them behind Tailscale.
Yes, you can!
@@WunderTechTutorials awesome news. Just ordered the DS220+.
Which one allows for faster uploads to File Station?
Can't make promises as there are tons of factors, but most likely a VPN.
Can we install wireguard on a synology router / nas?
There are technically ways, but none that are official as far as I know. You can set up a VM if you'd like with an Ubuntu server (or something similar) and run it that way, but that's my best advice for "official" support.
@@WunderTechTutorials Thanks for the reply, much appreciated. Oh well but that's taking up too much resources, then I'd rather just use the Synology VPN, it should come with free licenses now anyway :)
Tailscale is available for your Synology NAS. I couldn't find it in the Synology package center so I just typed "tailscale" into the PC search bar and it came right up. Dead easy to install and setup. ( No need for Docker ) I haven't used it much but it does connect beautifully. I haven't yet figured out how to move files back and forth yet. Tailscale does have a file transfer app in Alpha or Beta but haven't tried it.
Brill vid trying to move away from quickconnect myself.