Synology fileshare behind a reverse proxy

I can imagine that it is a very common scenario, you want to share files, which are located on a Synology NAS and don’t want to open up all the ports on your firewall.
After all, the fileshare function is just a simple webpage, which offers a file. Luckily this can be easy put behind a reverse proxy, which would be an ideal situation for a SMB or even home use.

So let’s start, first off all make your plan, which port do you want to use, which IP and/or virtual hostname.
In this example, I go for a virtual hostname, cause I’ve only one public IP address.
I also assume that you already have a reverse proxy up and running in this case this is accomplished by Apache2.

  • Virtual hostname: fileshare.lab.breekeenbeen.nl
  • Port: 80 (http)

Step 1: Create a DNS entry (A record)
Create a DNS entry which points to your public IP which is natted (or directly connected) to your reverse proxy. (e.g. fileshare.lab.breekeenbeen.nl 1.2.3.4)

Step 2: Get your inside ip and port
Get your inside ip and port for gaining access to the link, which the Synology will offer. (Default this is http://internetIP:Port)
You can easily find this out, by accessing File Station, press right on a file and select Share File Links, it will look like this http://192.168.1.10:5000/fbsharing/FxEWvvty

Step 3: Create your reverse proxy rule
Go to your Apache configuration and (in my case) create a file/site with the reverse proxy configuration. (e.g. for Ubuntu / Debian)

Which will create a file, put in the following configuration, where the proxypass and proxypassreverse contain the inforamtion protocol, IP and port from step 2.

Just enable the site and restart Apache or reload the configuration

Step 4: Make Synolgoy create the right links
Now we have to make sure, that the Synology will generate the correct URL’s.
Go to “Control Panel”“External Access”“Advanced” and fill in the appropriate information and click on “Apply”, in this example;

Synology_ExternalAccess_Advanced

Step 5: Test & Enjoy
If you now create a link from File Station, it should create a link which looks like http://fileshare.lab.breekeenbeen.nl:80/fbsharing/FxEWvvty
You can test this by using thins link in a browser from an Internet connected device.

If you also want to use this link internally, you have to create an internal DNS entry to the reverse proxy.

Facebooktwittergoogle_plusredditpinterestlinkedinmailby feather

2 thoughts on “Synology fileshare behind a reverse proxy

  1. It’s looking really cool. I’ve never put much thought in it, so I’m shamelessly going to apply your shared knowledge! Thanks for the blog!

Leave a Reply

Your email address will not be published. Required fields are marked *

*