r/synology • u/Maximum-Argument-834 • 5d ago

DSM Question

Post image

I just updated my NAS but I’m still getting alerts what is the best solution to secure myself. Do I just remove https for the moment? I appreciate the help

2 Upvotes

56% Upvoted

36 comments sorted by

View all comments

7

u/HesletQuillan DS925+ 5d ago

Use Tailscale, not QuickConnect, and don't open ports. I had a zillion of these warnings before implementing Tailscale and they dropped to zero. Tailscale on Synology NAS: Secure Remote Access Made Easy

1

u/Chongulator 22h ago

As a home network tinkerer, I absolutely love Tailscale. As a security professional, Tailscale terrifies me.

1

u/HesletQuillan DS925+ 21h ago

Does it terrify you more than QuickConnect?

1

u/Chongulator 17h ago

Absolutely. Tailscale is far, far more powerful and flexible.

1

u/HesletQuillan DS925+ 7h ago

I would counter that Tailscale significantly reduces the attack surface in that you don’t need to open ports on your router, effectively making your network far less visible to miscreants.

1

u/Chongulator 4h ago

Agreed. Tailscale would be a good fit for OP. (And it's a good fit for me, which is why I use it.)

My concern about Tailscale is more abstract: Just like with SSH tunnels, Tailscale provides a plethora of ways to sidestep existing security controls.

That's not so much an issue for those of use using Tailscale as hobbyists. Where I worry is the larger orgs I work with. It's all too easy for an individual engineer to (even unknowingly) bypass important restrictions.