Backup a friend's NAS

Post Reply
Murphy85
New here
Posts: 3
Joined: Wed Jun 12, 2019 1:51 am

Backup a friend's NAS

Post by Murphy85 » Wed Jun 12, 2019 4:54 am

Hi,
a friend of me and I have a QNAP NAS. We would like to backup our critical data to each others NAS for having secure of fire, theft and lighting strikes.
We don't want to use our expensive internal raid storage instead we would like to use an external hard drive and we don't want to have access to our eachother files.

Therefore our requirements are:
+ Folder permissions (my friend has only access to specific folder/drive)
+ Client side encryption (his files will be stored encrypted on my drive, so I cannot access)
+ external Storage (storage should be on USB drive attached to my NAS)

We analyzed different methods and had the following result:

Rsync
+ Client side encryption
- Folder permissions
- External storage

RTRR
+ Client side encryption
- Folder permissions
- External storage

FTP
- Client side encryption
+ Folder permissions (via designated partition)
+ External storage

WebDAV
+ Client side encryption
+ Folder permissions (via designated partition)
+ External storage

SMB via VPN
- Client side encryption
+ Folder permissions (via designated partition)
+ External storage

The WebDAV method:
Server:
- Create a desginated partition for friends backups on external hard drive
- Create user account for friend
- Grant read/write permissions to external partition
- Enable Webserver
- Enable WebDAV
- Add automatic router configuration (uPNP) for WebDAV ports (5000, 5001)

Client:
- Create profile for WebDAV connection (don't forget to add folder name to server url)
- Create storage (folder will be created inside [externalFolderName}QNAP/CloudBackup/[foldername]
- Create backup job as external cloud storage

Is WebDAV the only way we can handle our needs? WebDAV seems to fill our needs, but I think it's a slow protocol and is not designed for doing nightly backup jobs. Should we go with WebDAV? A nice benefit would be to have a file history with diffrent versions like doing local backup jobs. WebDAV doesn't support this.
Last edited by Murphy85 on Thu Jun 20, 2019 6:21 pm, edited 1 time in total.

dolbyman
Guru
Posts: 14088
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman » Wed Jun 12, 2019 5:57 am

Lan2Lan VPN is the best (then use whatever backup method of your choice via SMB) , as the actual connection in encrypted an no ports have to be exposed (besides VPN)

please disable upnp as it takes away control and might open your NAS to hacking (if http or other protocols that are attacked are exposed)

Murphy85
New here
Posts: 3
Joined: Wed Jun 12, 2019 1:51 am

Re: Backup a friend's NAS

Post by Murphy85 » Mon Jun 17, 2019 12:35 am

Thank you for your advice!
Do you have a suggestion which VPN method we should use? Qbelt, L2TP, OpenVPN, PPTP?

dolbyman
Guru
Posts: 14088
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman » Mon Jun 17, 2019 3:41 am

ipsec or openvpn ..for sure

Murphy85
New here
Posts: 3
Joined: Wed Jun 12, 2019 1:51 am

Re: Backup a friend's NAS

Post by Murphy85 » Thu Jun 20, 2019 6:18 pm

We gave it a try, but SMB connections can only be used in synchronization jobs in hybrid backup sync and not in backup jobs. The client side encryption is only available in backup jobs. Therefore we cannot use a SMB connection.

dolbyman
Guru
Posts: 14088
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman » Thu Jun 20, 2019 9:20 pm

if everything needs to be encrypted, push backups into veracrypt containers...the target nas just sees a file blob ...no files

Post Reply

Return to “WebDAV-based Backup”