Backup a friend's NAS

Post Reply
Murphy85
New here
Posts: 8
Joined: Wed Jun 12, 2019 1:51 am

Backup a friend's NAS

Post by Murphy85 »

Hi,
a friend of me and I have a QNAP NAS. We would like to backup our critical data to each others NAS for having secure of fire, theft and lighting strikes.
We don't want to use our expensive internal raid storage instead we would like to use an external hard drive and we don't want to have access to our eachother files.

Therefore our requirements are:
+ Folder permissions (my friend has only access to specific folder/drive)
+ Client side encryption (his files will be stored encrypted on my drive, so I cannot access)
+ external Storage (storage should be on USB drive attached to my NAS)

We analyzed different methods and had the following result:

Rsync
+ Client side encryption
- Folder permissions
- External storage

RTRR
+ Client side encryption
- Folder permissions
- External storage

FTP
- Client side encryption
+ Folder permissions (via designated partition)
+ External storage

WebDAV
+ Client side encryption
+ Folder permissions (via designated partition)
+ External storage

SMB via VPN
- Client side encryption
+ Folder permissions (via designated partition)
+ External storage

The WebDAV method:
Server:
- Create a desginated partition for friends backups on external hard drive
- Create user account for friend
- Grant read/write permissions to external partition
- Enable Webserver
- Enable WebDAV
- Add automatic router configuration (uPNP) for WebDAV ports (5000, 5001)

Client:
- Create profile for WebDAV connection (don't forget to add folder name to server url)
- Create storage (folder will be created inside [externalFolderName}QNAP/CloudBackup/[foldername]
- Create backup job as external cloud storage

Is WebDAV the only way we can handle our needs? WebDAV seems to fill our needs, but I think it's a slow protocol and is not designed for doing nightly backup jobs. Should we go with WebDAV? A nice benefit would be to have a file history with diffrent versions like doing local backup jobs. WebDAV doesn't support this.
Last edited by Murphy85 on Thu Jun 20, 2019 6:21 pm, edited 1 time in total.
User avatar
dolbyman
Guru
Posts: 35021
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman »

Lan2Lan VPN is the best (then use whatever backup method of your choice via SMB) , as the actual connection in encrypted an no ports have to be exposed (besides VPN)

please disable upnp as it takes away control and might open your NAS to hacking (if http or other protocols that are attacked are exposed)
Murphy85
New here
Posts: 8
Joined: Wed Jun 12, 2019 1:51 am

Re: Backup a friend's NAS

Post by Murphy85 »

Thank you for your advice!
Do you have a suggestion which VPN method we should use? Qbelt, L2TP, OpenVPN, PPTP?
User avatar
dolbyman
Guru
Posts: 35021
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman »

ipsec or openvpn ..for sure
Murphy85
New here
Posts: 8
Joined: Wed Jun 12, 2019 1:51 am

Re: Backup a friend's NAS

Post by Murphy85 »

We gave it a try, but SMB connections can only be used in synchronization jobs in hybrid backup sync and not in backup jobs. The client side encryption is only available in backup jobs. Therefore we cannot use a SMB connection.
User avatar
dolbyman
Guru
Posts: 35021
Joined: Sat Feb 12, 2011 2:11 am
Location: Vancouver BC , Canada

Re: Backup a friend's NAS

Post by dolbyman »

if everything needs to be encrypted, push backups into veracrypt containers...the target nas just sees a file blob ...no files
Post Reply

Return to “WebDAV-based Backup”