Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


#311124 16-Dec-2023 12:16
Send private message

I've been puzzling over this for days and have come to a complete dead-end.

 

I have a couple of Synology NAS's in different locations.  I'm trying to get a hyper backup going from one NAS to the other using a reverse proxy.  The backup works just fine without the reverse proxy - using port 6281 which has been port forwarded on the destination router.

 

Reverse proxy works just fine for logging into the web server - using port 443 as the source and port 5001 as the destination - with port 443 forwarded on the destination router to the local ip address of the destination NAS.

 

However, a similar approach for hyper backup throws up the following message:

 

"Failed to connect to the destination server. Please check the following and try again: The destination server is connected to an active server (which it is!), The network backup port forwarding rules have been configured on the destination server (port 443 has been forwarded on the destination router to the local ip address of the NAS).

 

The firewall rules on the destination NAS have been changed to allolw ports 443 and 6281 through (I have also turned off the firewall on the destination NAS, but this makes no difference).

 

The certificate on the destination NAS has been obtained from Lets Encrypt - shown on the default certificate as hyper.xxxx.synology.me, including a wild card *.hyper.xxxx.synology.me.

 

My router is an Edgerouter - I haven't changed any of the standard settings, except the firewall portforwarding rules - in particular forwarding port 443 and port 80 (both protocols) to the local ip address of the destination NAS

 

Can anyone help please - I've spent too much time on this to give in now!!

 

 

 

 

 

 


Create new topic
freitasm
BDFL - Memuneh
79323 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3172333 16-Dec-2023 13:12
Send private message

Entirely outside the box, but instead of having port forwards, couldn't you install Tailscale in each NAS and use the private IP addresses instead? No need for port forwards, everything encrypted between the nodes, fast Wireguard-based connection.





Please support Geekzone by subscribing, or using one of our referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSync 




lxsw20
3558 posts

Uber Geek

Subscriber

  #3172335 16-Dec-2023 13:29
Send private message

Who is the ISP these Synologys are behind? Is it one that uses CG-NAT?


  #3172339 16-Dec-2023 13:36
Send private message

lxsw20:

 

Who is the ISP these Synologys are behind? Is it one that uses CG-NAT?

 

 

both Spark - as I understand it, Spark does not do CG-NAT

 

 




  #3172340 16-Dec-2023 13:40
Send private message

freitasm:

 

Entirely outside the box, but instead of having port forwards, couldn't you install Tailscale in each NAS and use the private IP addresses instead? No need for port forwards, everything encrypted between the nodes, fast Wireguard-based connection.

 

 

Maybe I should try this - but just frustrating me that something that should work, doesnt work (well for me at least).

 

I'm wondering whether there are some other edgerouter settings that I need to change - but don't know enouygh about this modem.

 

 

 

Re Tailscale, would this be better speed than using a synology ddns, or would there be a performance hit?


  #3172461 16-Dec-2023 18:56
Send private message

Lightbulb:

 

Re Tailscale, would this be better speed than using a synology ddns, or would there be a performance hit?

 

 

Ddns shouldn't affect the connection speed at all.


nztim
3829 posts

Uber Geek

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3172977 18-Dec-2023 12:20
Send private message

+1 for any sort of wireguard connection





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


xpd

xpd
Geek @ Coastguard NZ
13771 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #3172980 18-Dec-2023 12:24
Send private message

Lightbulb:

 

lxsw20:

 

Who is the ISP these Synologys are behind? Is it one that uses CG-NAT?

 

 

both Spark - as I understand it, Spark does not do CG-NAT

 

 

 

 

Are they both on static IP's ? Just because they don't use CG-NAT does not mean the IP can't change occasionally.

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree

 

 

 


Create new topic





News and reviews »

Gen Threat Report Reveals Rise in Crypto, Sextortion and Tech Support Scams
Posted 7-Aug-2025 13:09


Logitech G and McLaren Racing Sign New, Expanded Multi-Year Partnership
Posted 7-Aug-2025 13:00


A Third of New Zealanders Fall for Online Scams Says Trend Micro
Posted 7-Aug-2025 12:43


OPPO Releases Its Most Stylish and Compact Smartwatch Yet, the Watch X2 Mini.
Posted 7-Aug-2025 12:37


Epson Launches New High-End EH-LS9000B Home Theatre Laser Projector
Posted 7-Aug-2025 12:34


Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.