How to use Reverse Proxy to improve secure remote connections?

• About Reverse Proxy
• Requirements
• Use Reverse Proxy and a myQNAPcloud DDNS Domain Name to access your QNAP NAS
• Use Reverse Proxy and a myQNAPcloud DDNS Domain Name to access QNAP NAS Web Services

About Reverse Proxy

Reverse Proxy is a type of proxy server that retrieves resources on behalf of a client from one or more servers. These resources are then returned to the client, appearing as if they originated from the reverse proxy server itself.

Through Reverse Proxy, your NAS will be accessed through a specific port by Reverse Proxy instead of the real system port. This can prevent your system port from being public to improve overall system security.

Requirements

Your router must support port forwarding.

Your QNAP NAS must be set up to use myQNAPcloud and have a DDNS domain name.

Your QNAP NAS must have an SSL Certificate. These can be set up at myQNAPcloud > SSL Certificate.

Reverse Proxy is only supported by QNAP NAS with QTS 5.0 (and later).

You can find the Reverse Proxy settings in Control Panel > Network & File > Network Access > Reverse Proxy.

Use Reverse Proxy and a myQNAPcloud DDNS Domain Name to access your QNAP NAS

The QNAP NAS Web is the entry to let you manage your NAS, usually use https://mynas.myqnapcloud.com/ with the HTTPS default port 443 to access, you can use reverse proxy to make your connection more secure.

1. Go to Control Panel > System > General Settings > System Administration.
2. Check Enable secure connection (HTTPS)
3. Change the Port number to a non-reserved port number (for example: 2000).
   
4. Go to Control Panel > Network & File > Network Access > Reverse Proxy.
5. Click Add.
   The Add Reverse Proxy Rule window appears.
6. Configure the Reverse Proxy Settings.
   1. Protocol: Select HTTPS
   2. Domain: Use your myQNAPcloud DDNS domain name.
   3. Port number: Use 443
   4. Configure the Destination settings.
      1. Protocol: Select HTTPS.
      2. Port number: Use the Port Number you entered in step 3 (in this example: 2000).
7. Click Apply.
   
8. Log in to your router’s control panel and configure this port (in this example: 2000).
   You can now use your myQNAPcloud DDNS domain name to access your QNAP NAS with the HTTPS default port 443 with the set port 2000.
   

Use Reverse Proxy and a myQNAPcloud DDNS Domain Name to access QNAP NAS Web Services

QNAP NAS can host various containers and other services that can be accessed over the internet. With reverse proxy you can make these connections more secure.

Note: This tutorial uses Container Station with a WordPress container as an example.

1. Open Container Station.
2. Go to the WordPress container.
3. In URL you will find the container port number after the IP address (in this example: 10084).
   
4. Go to Control Panel > Network & File > Network Access > Reverse Proxy.
5. Click Add.
   The Add Reverse Proxy Rule window opens.
6. Configure the Reverse Proxy Settings.
   1. Protocol: Select HTTPS
   2. Domain: Use your myQNAPcloud DDNS domain name.
   3. Port number: Use 443
   4. Configure the Destination settings.
      1. Protocol: Select HTTPS.
      2. Port number: Use the Port Number of the container (in this example: 10084).
7. Click Apply.
   
8. Log in to your router’s control panel and configure this port (in this example: 10084).
   You can now use your myQNAPcloud DDNS domain name to access the WordPress site hosted by the container with the HTTPS default port 443 to the set port 10084.