Two QNAP, Backup files through Internet?

[jsteng]

Assume I have 2 QNAP devices, physically separated by 30 minutes drive but can connect via Internet.

My Problem:
How do I backup from the smaller QNAP to the bigger QNAP through the Internet?
Do I use RSYNC? FTP?

[dolbyman]

VPN and then however you want

[dosborne]

A one-way VPN tunnel (two-way would give you more capabilities, but isn't "required") to connect the 2 networks and then using HBS3 (configured with whatever mechanism works best for you) would also be my recommendation.

Do not bypass the VPN step. Exposing your NAS directly (UPnP, port forwarding, etc) is a **HUGE** risk (almost guarantees) for ransomware (see the Deadbolt thread as an example).

[Erolus]

Hi Guys,

This video here below shows how to create a Remote-Sync using RTRR:
https://youtu.be/OhPxK66wykw

I understand that this is not a very secure way to do it over the Internet?

Am I right in understanding that there no way to establish a WIREGUARD (WG) tunnel between the 2 NAS directly (with NAT from routers) as the QNAP can work as a WG-Server but not a WG-Client?

Could you please confirm that the best way to achieve a safe Remote-Sync would then be to:
- create a WG tunnel using for example 2 Mikrotik routers
- do a Remote-Sync using RTRR through that tunnel

=> It would be nice to be able to do it QNAP-to-QNAP without using routers to establish the WG-Tunnel as I fear they may not be powerful enough.

Thanks a lot for your input.

[FSC830]

I am not a friend from a QNAP-to-QNAP connection!
QNAP shows to often that apps, firmware or settings are not reliable and persistent after an update!
IMHO a vpn site-2-site connection using the routers is much more reliable and secure.
Yes, disadvantage is that each client at one site can access the devices at the other site. So an access control is mandatory.

Regards

[Erolus]

Thanks.
I have no experience at all with VPN.

Could you please let me know what is the best way to achieve VPN between 2 networks to sync QNAP shared folders?

I already noticed that QNAP software are a bit " temperamental " to say the least.

[FSC830]

You wrote by yourself using i.e. a WG tunnel and two Mikrotik routers is assumed as the best way.
No matter, which VPN capable router you use, thats the way to go.
WG is faster than IPsec, but some treat WG as "less" secure because you cant protect the connection with credentials at your endpoint device.
IMHO thats only an issue if someone has access to your endpoint device you dont trust.

Regards

[Erolus]

Thanks a lot!