Jump to content
XPEnology Community

Trying to Put Xpenology online through DDNS and Domain


aTm10452

Recommended Posts

Guys I've been trying to put this Xpenology online for the last year i have found this 1$  domain  whihc i bought from godaddy.com 
I am quite sure there s something i miss ....I followed so many Walkthrough online and nothing work ....
This is all I have done i have shared many pics ... 
Note what is not shown in the Pic  it means i don t know about and i didn t do it! 
I have Zero Experience in that .
I checked for Solution in the Forum and nothing Helped 
For Example this:
 



I am looking for a straight forward Answer.
Any one is able to Help me?! 
I am using DSM3615XS Version  DSM 6.2-23739 Legacy Mode
Many thanks for your Concern.

Kazam_screenshot_00000.png

Kazam_screenshot_00001.png

Kazam_screenshot_00002.png

Kazam_screenshot_00003.png

Kazam_screenshot_00004.png

Kazam_screenshot_00005.png

Kazam_screenshot_00006.png

Kazam_screenshot_00007.png

Link to comment
Share on other sites

From the top of my head...

 

In the photo from your routers DDNS settings, you told it to use "no.ip" but entered the same .ddns.net domain name as your NAS?

If the domain points to your router, that should be enough, then NAT/portforwarding should do the rest.

If you use the DDNS service in your NAS, you can skip using it on the router (or use different names).

 

It seems like you are using upnp on your router (and NAS?)

Sometimes upnp is not working as it should, and sometimes it may cause security issues.

Disable that, and manually set up port-forwarding to your NAS, (and make sure your NAS is using either a static or reserved IP).

 

Link to comment
Share on other sites

i used Noip ... I registered something there  called 
anthonn12.ddns.net  
and i registered that in the  Tp link Router as it shows in the Picture Log in Success in the Router Page 
then i went into External into DSM   and  added  the same DDNS  and it shows "Green" Normal Which means the NOip  account is  logged in ....
Then i went into Setting up the Router  and setting the  port  (i let DSM Do that job in the Next tab ) as shown in the Picture it  shows Fail  However  the ports were Added  in the Router  check the Pic above .... It uses UPNP  ......
If i disable UPNP  how  to set up   the ports manually?! 
I am uploading what the  Router shows me can u walk me through it ?! 

after Setting these ports  is there any other Setting i need to change in DSM? 
and how do i set up the Domain  in "Godaddy"?! 
And what would be the  Link to enter the  DSM after Everything is done?! 
Thank you!

Kazam_screenshot_00000.png

Kazam_screenshot_00001.png

Link to comment
Share on other sites

  • 2 years later...
  • 4 weeks later...
On 7/23/2022 at 2:24 PM, iJokerboy said:

Did you figure this out?

 

 

Do you need one? I can post a guide about it, but there are some requirements to meet. Just reply this and I will be glad to help.

You don't really need a domain, DDNS will do just fine to access your xpenology from WAN (but that is really an unwise decision, better use a vpn tunnel).

Edited by kekesed97
  • Like 1
Link to comment
Share on other sites

  • 4 weeks later...
On 8/18/2022 at 7:50 AM, kekesed97 said:

 

Do you need one? I can post a guide about it, but there are some requirements to meet. Just reply this and I will be glad to help.

You don't really need a domain, DDNS will do just fine to access your xpenology from WAN (but that is really an unwise decision, better use a vpn tunnel).

Sorry for the delay. Thanks for the reply! Acctualy i am interesed on this vpn tunnel you mentioned... Do i need to do something on my devices that i will use as client? Because my parents are not good with tech so i was hoping to find a solution where i can just put the "address" on any browser/device but without apps or workarounds on the "client" device.
Sorry for my english, it's been a while...
Thanks again!

Link to comment
Share on other sites

6 hours ago, iJokerboy said:

Sorry for the delay. Thanks for the reply! Acctualy i am interesed on this vpn tunnel you mentioned... Do i need to do something on my devices that i will use as client? Because my parents are not good with tech so i was hoping to find a solution where i can just put the "address" on any browser/device but without apps or workarounds on the "client" device.
Sorry for my english, it's been a while...
Thanks again!

 

Tailscale is a good solution, you just need to install the app in both device, and you can access your NAS like you're in local network. It also available in many platforms. It's free for one user. You just need to configure it once and forget about it. It should be easy to teach your parent how to use the app. Windows client don't need any interaction, and the Android client only need you to enable the VPN. Other alternative is Wireshark.

 

Other solution is vpn forwarding i mentioned earlier. I'm using this local vpn tunnel provider from Indonesia. It's cheap, like dirt cheap. Here is my sample. It only valid until 16 September if you want to peek. The downside of this service is the request for generated forward host is in plain http, so you can't put an https connection through this. You just need to register their service, connect to their VPN server. It can be done in Control Panel>Network>Network Interface. And you're done, you can access your NAS anywhere.

 

Oh yeah, they also offer free ddns service too, if you want to go to that route. I wrote this guide in their github gist (but in Indonesian), it should be applicable to other DDNS provider that use URL update method like https://freedns.afraid.org/. Natively supprted DDNS provider can be configured through Control Panel>External Access>DDNS using your credentials from your DDNS provider, like Synology DDNS or no-ip. I personally like Synology DDNS because it can fetch a wildcard certificate from Let's Encrypt without a hassle.

For this route, you will have to do this:

  1. Open port 80 and 443 in your router (not every router have the ability to do port forwarding)
  2. Configure your DDNS in your provider and in DSM
  3. Use Web Station to automatically forward http requests to https. this guide here will help.
  4. Install all your services and set reverse proxy for each service in Control Panel>Login Portal>Advanced>Reverse Proxy. e.g. dsm.somename.ddnsku.my.id for DSM desktop at https://localhost:5001. it can forward https from WAN to plain http service in your host.
  5. Grab a certificate from Let's Encrypt in Control Panel>Security>Certificate. Then Add>Add New Certificate>Get a certificate from Let's Encrypt. Fill in your details. For "Subject Alternative Name" you can put a wildcard, e.g. *.somename.ddnsku.my.id. If you're not using Synology DDNS, just fill in every services that you have configured in Step 4.
  6. Test the connection outside your local network, e.g. in mobile network or in office.
  7. Do security hardening. IT'S A MUST!

Hope that help. Quote me or PM me if you have further questions.

 

Cheers!

Edited by kekesed97
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...