I have the following Synology devices:
I would like to install a local VPN package so I can VPN into my local home network while traveling.
Should I install the VPN package on the DS923+ or the WRX560? Does it matter?
As a matter of general course, should I only be installing software packages on the DS923+ and leave the WRX560 as alone as possible so it can focus on providing a local network?
Install Tailscale on the NAS using their current package Access Synology NAS from anywhere · Tailscale Docs and not the one in Package Manager.
Install Tailscale on your other devices (phone, laptop, etc.)
For any Synology application, use the NAS Tail IP to connect and you’ll be good from anywhere.
Optionally, you can add your entire home network subnet to your Tailnet and access it via your NAS.
I installed it on my router. Went with OpenVPN. you’d have to port forward if you did it on the NAS anyway, and if your Nas is down but internet is up you can still access the rest of the network.
I prefer network services at the edge router.
I already have a *.synology.me dynamic DNS set up with a certificate. I have WebDAV opened up to a random port to the internet, so I can seamlessly connect to my media connection from outside the home.
But I want a VPN connection to connect to the rest of the NAS services. I have everything else turned off. Ports off (except the one for WebDAV), everything is off including QuickConnect.
So what is the best VPN for this use case where I am doing a simple connection to the NAS and simply need to be able to login and see my whole machine and not just WebDAV?
https://tailscale.com/synology/ Install Tailscale on the NAS using their current package https://tailscale.com/synology/"Install Tailscale on the NAS using their current package https://tailscale.com/synology/ and not the one in Package Manager." What version of the Linux packages to use on Synology ? If its a Debian version, which one ? [edit] Google solved my problem … LOL
I also have Synology’s VPN server running on my router as a backup, in case anything happens to my Tailnet. OpenVPN is far slower than WireGuard, though, and its noticeable if you need to access anything large.
Exactly what I said above. Tailscale uses WireGuard protocol, which is the fastest and most secure VPN protocol today. There are options to set up your own WireGuard network , but Tailsscale makes it incredibly easy. You don’t need to change anything with your existing setup, but you might choose to because with Tailscale you can access everything without opening ports.