Remote Access and Cloud Services

The ubiquity of smartphones and rise in popularity of public cloud services such as Dropbox, Google Drive and OneDrive has resulted in some interesting consumer requirements in the NAS space. The first one is the ability to access the NAS content over the Internet / from an external network. There are two ways to enable this:

  • Port forwarding
  • Relay connection

Port forwarding involves opening up certain ports in the router and allowing incoming connections to be forwarded to the NAS. This is the simplest and cheapest way for NAS vendors to provide remote access. Some vendors provide a dynamic DNS service so that consumers don't need to remember the WAN IP behind which their NAS is installed. However, port forwarding is not a fool-proof method, as certain network configurations might prevent the forwarding of certain ports. A relay connection, on the other hand, involves an intermediate server operated by the vendor. The mobile device / PC in the external network talks to that server using appropriate credentials. The NAS OS keeps in touch with that relay server and transfers content using it as an intermediary whenever the relay server makes requests initiated by the device in the external network. One drawback here is that the remote access fails if the relay server is down even if the NAS itself can access the Internet without issues.

Consumers also expect their NAS units to complement their accounts with public cloud services. Examples include having a Dropbox sync folder resident in the NAS (in addition to PCs or mobile devices) and the ability to back up content on the NAS to a cloud backup service (such as CrashPlan or Amazon Glacier). Yet another consumer requirement tracing its roots to services such as Dropbox is the ability of the NAS to act as a private sync server. Some NAS vendors include a utility that backs up and versions select folders on one or more PCs. In addition to working in the local network, consumers also expect the sync / versioning to be maintained even when the notebook or PC is moved to an external network. The remote access aspect becomes important in this scenario.

The remote access features and cloud services supported in the OS of each vendor is discussed in detail in this section. These features and services are complemented by mobile apps which are not discussed in this article. Vendors are covered in alphabetical order. Readers interested in jumping ahead to a particular vendor can use the list below.

  1. Asustor
  2. Netgear
  3. QNAP
  4. Synology
  5. Western Digital
  6. ZyXEL

Asustor

Asustor's remote access settings are under Ease of Access in the Settings section. The fancy name provided for this purpose is Cloud Connect. It requires a Cloud ID to be set up.

Unfortunately, Cloud Connect requires EZ-Router, which just opens up the appropriate ports using UPnP when activated. There is no relay server facility. Asustor also allows manual port forwarding setup for specific protocols on the NAS side (between the NAS and the router). This is helpful in cases where a particular port has already been forwarded by the router to another network device. Asustor also maintains a dynamic DNS service (at myasustor.com) which keeps the WAN IP updated every 30 minutes for ease of access to the public IP over the Internet. The website also allows users to check whether the port forwarding is set up correctly, as shown in the gallery below.

The other cloud-based features of Asustor's ADM OS are enabled by optional apps that can be downloaded form App Central in the Backup & Sync category. Not all of the apps are reliant on public cloud services.

Some of the cloud services supported by Asustor for backup and sync purposes include CrashPlan, Drobox, Google Drive, hubIC, OneDrive, ElephantDrive, HiDrive and xCloud. In the gallery below, we take one of the first-party apps - DataSync for Google Drive, for a test drive. We see that the app allows for account configuration, bandwidth control, and synchronization settings.

The other aspect that we talk about in this section is Dropbox-like sync and versioning. While there are some paid options like Resilio Sync and Syncthing in the third-party apps section, it is often a good value-add from NAS vendors to supply their own utility that can use the NAS as a backup server for the sync and versioning functionality.

Asustor's utility is the Backup Plan software. It offers backup on a schedule, as well as synchronization capabilities. The software is quite comprehensive. We would like if some of the functionality (like syncing, for example) is extended to the mobile apps also to make the Asustor NAS a truly private cloud server.

Netgear

The ReadyNAS remote access and cloud features in the core OS are available under the Cloud section in the main menu. ReadyCLOUD is the relay service that helps in remote access to content in the NAS. ReadyNAS Replicate allows the content on the NAS to be backed up or synced with another NAS over the Internet (or local network). ReadyNAS Vault is a cloud backup service offered by Netgear to aid in disaster recovery, or just act as a plain backup. Other than these core features, Netgear also integrates Dropbox and Amazon Cloud Drive functionality into the ReadyNAS OS.

The ReadyCLOUD functionality is enabled by associating the NAS with a particular MyNetgear account. This allows Netgear's relay server to determine the unit to talk to when access is made over the Internet. The settings allow for encryption of data in the communication with the relay server. It is also possible to use a proxy server for the ReadyCLOUD communication. ReadyNAS Replicate uses a separate account (Netgear plans to integrate it with the MyNetgear account, and it led to a lot of confusion when we tried to activate ReadyNAS Replicate on our unit). The Replicate portal allows creation of backup jobs over the LAN or the Internet. The web UI of the Replicate service can be checked out in the gallery below.

ReadyNAS Vault is a online service run by Netgear for creation of a private cloud for business and enterprise users. Various plans are available, as shown in the above gallery.

In addition to the Dropbox and Amazon Cloud Drive functionality in the core OS, there are also third-party apps in the app store such as iDrive. Given Netgear's SDK policy for the ReadyNAS OS 6, we expect that more online backup services will make it to the list of available apps in the future.

QNAP

QNAP's remote access settings are accessible under the myQNAPcloud application available in the main interface. As we shall see further down, QNAP can use both port forwarding and relay servers (CloudLink) for enabling access to the NAS over the Internet.

QNAP provides a wizard to aid users in configuring the myQNAPcloud application. The first step is the creation of a myQNAPcloud account (or, signing into an already created one) on the NAS. A unique device name is needed for the NAS, as it determines the dynamic DNS address in the myqnapcloud.com domain. The wizard then attempts to set up port forwarding, DDNS and relay server access. There is also an option to disallow the advertisement of published services on the myQNAPcloud website. Users who do not want port forwarding can simply deselect the service in the wizard before final configuration.

Each of the steps in the wizard can later be revisited in case updates need to be made. It is also possible to view the status of the services in the myQNAPcloud application, as shown in the above gallery. CloudLink uses relay servers, and QNAP has a friendly reminder of the same. QNAP also sells SSL certificates for security-conscious users and businesses.

QNAP's QTS is one of the most comprehensive commercial NAS operating systems. It is no surprise that they support a broad spectrum of cloud providers for backup and sync purposes.

As part of the core Backup Station application, QNAP allows creation of a replication job to a AWS server. Other cloud providers are enabled by specific apps in the Backup/Sync section of AppCenter. Available providers include Azure Storage, Glacier, Google Drive, hicloud S3, Baidu Cloud, ElephantDrive, iDrive, CrashPlan etc. QNAP also provides the Cloud Drive Sync which presents a single portal for popular cloud service providers like Google Drive, Dropbox, OneDrive and hubIC. We tested out Google Drive with Cloud Drive Sync and our experience is reproduced in the gallery below. Various options can be configured for the sync job with the Google Drive account. Logs are also available for the created sync jobs.

QNAP also provides the Cloud Drive app that can show the contents of a cloud drive (Dropbox, OneDrive, Google Drive, Amazon Cloud Drive, Box or Yandex Disk) in the native File Station app of QTS.

QNAP's Dropbox-like sync and versioning system is implemented via Qsync. It is configured using the Qsync Central Station app in QTS. The usage pattern is similar to Dropbox. Clients are available for Windows, Mac, Android, and iOS devices. Similar to Dropbox, the files can also be managed from a web browser. Synchronization over the Internet is made possible using the myQNAPcloud feature discussed earlier. This feature basically transforms the QNAP NAS into a storage server for sync and versioning purposes.

QNAP also provides a Hybrid Backup Sync package. It extends the capabilities present in Qsync over multiple cloud service providers. At the bare minimum, it helps in creating a backup environment, with essentially unlimited private storage in the QNAP NAS complemented by judicious backups to online service providers for cost-effectiveness. The package allows for backup, restoration and synchronization with job scheduling capabilities. rsync and real-time remote replication features are also available, with the package providing a unified interface for those.

Qsync Central Station allows for more fine-grained customization since the user is essentially dealing with a server that can support multiple 'Dropbox-like' users. It is also possible to have a view of currently active Qsync-connected devices from the app. The user management for this feature is distinct from the users on the NAS. So, it is possible to create teams that work on shared folders in the system while synchronizing data with each other. Similar to Dropbox, users can create sharing links with fine-grained permissions. The maximum number of versions to maintain (default is 32) can also be configured.

Synology

Synology's remote access scheme comes under the QuickConnect tag. Configuring the settings is an optional part of the NAS setup itself. Users wishing to process it at a later point in time can find the relevant settings under Control Panel > Connectivity > QuickConnect. The first step is the association of a Synology account with the NAS. Each NAS associated with a Synology account needs to be set up with its own unique QuickConnect ID that can be used to connect to it from an external network.

Synology allows users to opt for either port forwarding or relay servers to enable remote access. In addition, users can restrict access over QuickConnect to specific applications / services. The QuickConnect ID is distinct from the hostname that can be set up with Synology's own dynamic DNS service (as shown in the gallery below). Users interested in automatic port forwarding can use Router Configuration > Set up router under the External Access section. In our testing, we found that Synology's router set up is much more robust compared to other vendors. For example, it quickly recognized a double NAT situation and gave up on port forwarding. Manual port forwarding allows remapping of ports between the router and the NAS (useful in situations where Synology's port number is already forwarded to another network device by the router).

Synology supports a number of public cloud services for backup purposes. They can be set up using the packages found in the the Package Center's Backup section. Except for ElephantDrive, a third-party app, the rest (Glacier Backup and HiDrive Backup) are from Synology. Cloud Sync is an umbrella app from Synology supporting a large number of cloud providers. The current support list includes Dropbox, Google Drive, OneDrive, Amazon Drive, Baidu Cloud, Box, Azure Cloud Storage, Google Cloud Storage, S3 Storage, Backblaze B2, IBM Softlayer, Rackspace, hicloud S3, HiDrive, hubiC, SFR NAS Backup, MegaDisk and Yandex Disk. Cloud Sync can also use servers with storage exposed via OpenStack Swift or WebDAV.

We tested out OneDrive access using Cloud Sync. The gallery below has some screenshots from the process. The OneDrive files are mapped on to a path in the local NAS. Available settings include the polling period for changes in the cloud server and traffic control (both upload and download).

The other apps in the Backup section are related to sharing and syncing. Cloud Station Server can make the NAS act as a 'Dropbox'-server. Data can be synced from multiple platforms, with the Synology NAS acting as the central storage that keeps historic versions of the data. Cloud Station ShareSync running on another Synology NAS can help in cross-site data syncing and keeping an off-site copy of the data.

Cloud Station Server also includes a Version Explorer to access and restore historic copies of the data. Sync settings include the shared folders that need to be synced, the number of versions to maintain (32, by default), and Intelliversioning (that varies the deleted version after an update based on the amount of changes in that version)

Other applications include Hyper Backup (that allows backup and restore of data / LUNs to both local and remote NAS units as well as select cloud services). For a Synology NAS to act as a destination for Hyper Backup, the Hyper Backup Vault package needs to be installed. Synology also provides a Snapshot Replication package that backs up a point-in-time copy mechanism. These are all useful for business users.

Western Digital

Western Digital prides itself on catering to the average consumer. Seamless remote access, therefore, is very important from the viewpoint of their target market. Like some of the leading NAS vendors, Western Digital can use both port forwarding and relay servers for remote access. Each NAS user has an associated MyCloud.com account that enables the relay servers to talk to the appropriate NAS unit. Devices can be associated with a MyCloud.com account using a one-time code generated on demand. These details can be obtained from the Cloud Access section in the main menu. The page also shows the type of connection enabling the cloud access.

Cloud access is enabled under the settings menu. Access to the web dashboard and attached USB devices over the cloud can also be controlled. Cloud access can be configured automatically (in which case the NAS tries to use UPnP to automatically configure port forwarding in the router, with a relay connection as the failsafe option). Manual configuration allows more user control over the port forwarding aspects.

One of the issues we encountered during our testing was that the My Cloud OS got easily misled by a double NAT. It set up the port forwarding automatically in the router to which it was connected, but, despite indicating a successful cloud access status, mobile devices in another network couldn't access the NAS. Changing to a relay connection resolved the problem.

Western Digital supports backups to ElephantDrive and Amazon S3 as part of their core feature set under Backups > Cloud Backups. Dropbox is also available as an additional app.

The popularity of Dropbox has resulted in many NAS vendors attempting to make their NAS act as a sync / versioning server. The main challenge here is the remote access aspect, as the PC or mobile device client can often be outside the NAS's local network. Western Digital's WD Sync program fulfills this functionality.

WD Sync can actually set up sync across multiple WD NAS units. The maximum number of versions currently maintained is 5. Using the MyCloud.com account allows the device to be in any network while still being able to sync to the server. It can also be used to maintain multi-site copies of essential data.

ZyXEL

ZyXEL's remote access approach is quite simple and perfect for the average consumer. The process starts off with the myZyXELcloud application directing the user to create a myZyXELcloud account. On the NAS side, the myZyXELcloud-Agent application also needs to be installed to communicate with the relay server. Once the application is installed, the scene shifts to the browser.

The gallery below shows that the myZyXELcloud page automatically lists all compatible NAS units in the local network. Users can then link the units that need to be accessed using the relay server. Pairing confirmation requires manually pressing a button in the front panel of the NAS. Remote access is mainly delivered via two mobile apps - ZyXEL Drive and ZyXEL zCloud.

The myZyXELcloud account page also allows setting of a dynamic DNS entry using the zyxel.me domain name. Remote access can be configured for particular packages in the NAS. Users can also update UPnP settings for port forwarding. However, this is not compulsory, and access using the relay server is always possible as long as the relay server stays up. Once the linking is complete, the health of the NAS can also be monitored remotely using the myZyXELcloud account page.

ZyXEL also supports a couple of popular cloud services - Dropbox and Google Drive - using add-ons available in the App Center.

Both clients have a configurable update interval. As part of our evaluation, we took the DropboxClient for a spin. Screenshots of the process are available in the gallery below.

Surveillance Support (NVR Features) To Be Continued...
Comments Locked

30 Comments

View All Comments

  • jsntech - Friday, December 23, 2016 - link

    That would be fantastic. Can't wait!
  • perseid - Thursday, December 22, 2016 - link

    Synology's DSM still does not support full drive encryption. I wonder why such a critical need has not been addressed yet.
  • tokyojerry - Saturday, December 24, 2016 - link

    Ganesh, thank you very much for your effort in creating this article on NAS. I think NAS devices are increasingly becoming popular among general computer users as an alternative to, (or complementary to) paid cloud services. Benefits are immediately obvious like like the elimination of forever recurring, monthly fee-based, cloud space rentals, an owner can control his / her own data, no theoretical space limits, etc. After all, physical possession is 9/10ths the law as the old say goes. And one's precious data is not entrusted to and at the mercy of a 3rd party vendor that you hopefully can trust, will not go out of business, etc.

    I am still a relative newcomer to NAS devices. I learn a lot such by being able to read NAS-related articles such as this one you created for the layperson. It offers insight into NAS basics for someone like me with a need to know.

    I've been using Synology's DS1515+. It has served me well. I recently also purchased a QNAP TVS-682T (foolishly I think as way overpriced) and am thinking to switch to it in lieu of, or use concurrently with the Synology. What do you think? Should I use both concurrently? Overkill? Use the new QNAP as the main and relegate the Synology to a backup role? Sell off the Synology? I am tending towards keeping the QNAP and let the Synology go all together. After all, isn't it the purpose of NAS to have not only central storage for all one's data as well as provide backup as well? As such, that would make my Synology redundant, no? Furthermore, since the QNAP is ported with Thunderbolt (albeit 2.0) the NAS can also be used as high speed DAS in addition to NAS, iSCSI. QNAP also has this Virtualization Station thing (nice!) which seems quite attractive. does that mean I can run a complete VM of Windows 10 from my QNAP without having to purchase a dedicated windows machine? Performance should be about the same? I do have a VM of Windows 10 on my Macbook Pro but I am thinking consolidation of that to the QNAP might be even better. The QNAP has the specs and I/O capability through thunderbolt, so I am thinking why not just consolidate every thing via QNAP NAS.

    Sorry for the long-winded message. I know you are busy, but, if you do have any thoughts to contribute, even short bullet-type answers will be appreciated. Thanks.
  • DanNeely - Monday, December 26, 2016 - link

    With a single unit, you can have either a unified data store or a backup because the latter is a second independent copy. A second nas is the deep pocket/paranoid way to have both. Cheaper ways include backing up your nas to external drives periodically (doing this to have offline backups is a good idea even if you have another backup option), backing up to the cloud, or having your nas serve as the backup for a media store on a 2nd machine and then share backup out.

    The desktop i3 in the model you have is fast enough that it should be comparable to what's in your MPB; depending on what you're doing you might need to upgrade its ram though. However this isn't the case for their more mainstream models which only have atom based CPUs, and can only be upgraded from 2/4 to 8GB of ram; they're only really intended for running a lightweight (ideally GUIless) *nix VM.
  • tokyojerry - Thursday, December 29, 2016 - link

    Thanks for the feedback. Yes, a second NAS might be the 'deep pocket' approach to having a backup, but I already have both. Considering Ganesh' suggestion (below) however, I may now just keep both. It surely is a lot less headache to have a complete second NAS unit rsync'd from a primary unit and using the second NAS as (1) backup and (2) immediately serviceable rather then having to try and do restores from a set of backups on external drives. I am still thinking about it but that seems to make the greater sense to me.

    Backup up to clouds is something I am giving almost no consideration to. Firstly, the forever, ongoing recurring monthly fees and secondly, I prefer to have control over my own data. The primary function for cloud services are for file transfers and file synchronizations.

    The QNAP TVS-682T is already 8GB and I think it could be upgraded to 16GB if I want. My heaviest use scenario might be video NLE production. I am not a player of 3D games (or games at all) and things of that sort. QNAP's TVS-series is their upper echelon series also having Core i5 and i7 models.
  • ganeshts - Tuesday, December 27, 2016 - link

    I have used both Synology and QNAP units as 'daily-drivers'. For personal use / AnandTech review data work, I use the QNAP TS-853 Pro because I can run VMs on it (my home automation controller is a headless Ubuntu machine running as a VM in it). For recording from IP cameras, I use a Synology NAS - I tend to find that Synology is dedicating more DSM resources towards business users and not the mid-level professional users, while QNAP tends to have something for everyone.

    Since you have both the DS1515+ and TVS-682T, I suggest using QNAP as the main and use the Synology with a rsync job to keep regular / live backups. As for VM on the QNAP, I would think it is a good idea, but I can't tell for sure unless I know what workload you plan to run on it. Note that even if you don't need to purchase a dedicated Windows machine, you might need to spend money on the license, unless you have some spare from elsewhere.

    One thing I have learned in my time with NAS units is that it is never a bad idea to keep a live backup NAS - I have had to switch-over (not seamlessly, I am afraid, but still a good deal better than retrieving data from backups and loading on to a new NAS) a couple of times in the last 7 years.
  • tokyojerry - Tuesday, December 27, 2016 - link

    Excellent information Ganesh. Thank you for the time and effort on the feedback.

    I will take your suggestion to heart and use the QNAP as the main and keep the Synology as a backup unit. Currently I've been maintaining my Synology backup via a sort of hodge-podge solution. Synology has 5 bays. 4bays (6TB x4) is the main system providing 18TB of usable space. Bay 5 has 10TB as part of my backup. Externally I have Seagate 8TB (Archive) drive as the second part of the full backup. But I can see your point to conduct backups to the Synology and be able to implement that on demand as a fallback secondary system rather then doing restores from backups afterwards.

    Windows VM on the QNAP... about the heaviest workload I would do might be video NLE basic end user productions (not a movie producer :-) ) using something like Blackmagic's DaVince Resolve or the open source Shotcut NLE editor. Other then that it wold be all run-of-the-mill that any body would typical do... office apps, photo edits, communications, etc.
  • Planet07 - Tuesday, December 27, 2016 - link

    Nice article but I really wish you would cover drive failures, data corruption etc in your NAS reviews/articles. A lot of people are relying on these devices to backup their important data. It would be good to see how these units deal with worst case scenarios. What good is a NAS if corruption of one drive takes out the whole data set or if drives fail.
  • bill3000 - Friday, December 30, 2016 - link

    Lets talk speed! Wire I/O is usually the weakest link in a NAS, and this affects the rest of the NAS design. Vendors often report the performance of multiple “teamed” 1gbe ports (AKA link aggregation), 10gbe is much less common. I think Multichannel SMB is still in development for SAMBA, meaning your linux-based NAS likely doesn’t support sending SMB traffic over “teamed” ports, so you effectively get single 1gbe performance per user. A *huge* feature is support for Offloaded Data Transfers (ODX), so your local PC doesn't have to download a file just to move it around on the NAS.
  • darwinosx - Monday, April 3, 2017 - link

    What happened to the follow up article?

Log in

Don't have an account? Sign up now