certificate for synology cloud station drive

Certificate for synology cloud station drive free#

Note, the nameserver transfer process usually takes a few hours, but to propagate fully across the globe, you’re probably talking at least 24 hours and maybe 48. As such, you will need to consider the security implications of disclosing your server’s IP address (something Cloudflare will notify you about if your DNS records expose your IP). However, in some instances this simply isn’t possible, given that Cloudflare will only proxy traffic sent over the http protocol. It is also wise to replicate your DNS records before making the switch to make the transition as smooth as possible (just make sure you proxy any record that points to your server’s IP).įor records that you can’t proxy (for example MX records), if these point to your server, you may wish to consider using a relay service to be able to keep masking your IP (as discussed in this article). Cloudflare will tell you the names of the servers to use as part of the setup process. The set up process will require you to migrate your domain’s nameservers over to theirs.

Certificate for synology cloud station drive free#

To get started you need to set up an account with Cloudflare, opting for their free service (unless you want the web application firewall and other features).

autonomous management of my SSL certificates – I had found Synology DSM to be temperamental with it’s automatic renewal of Let’s Encrypt certificates and I wanted something that was largely set and forget.

Synology does allow SAN lists within their Let’s Encrypt interface, but restricts the length to a few hundred characters, significantly limiting the usefulness when managing several sub-domains.

the use of wildcard certificates (not currently supported by Synology DSM 6 for Let’s Encrypt).

a free caching service – helping reduce the load on my server.

Arguably QuickConnect also offers some of this, but you cannot use your own custom domain

an added element of security, by masking my server’s IP address and providing basic DDoS protection.

So why would you want any of this when Synology offers QuickConnect and can manage Let’s Encrypt certificate generation and renewal? Well for me, Cloudflare provided: Their free service includes DNS management, a reverse proxy and basic DDoS attack prevention, as well as free modern SSL services to help secure your server’s traffic.

They are also registered on the US Privacy Shield Framework, which at the point of writing, helps with GDPR compliance. This article will take you through the steps I followed to set up my Synology NAS, using Cloudflare to proxy my web traffic and secure in-transit connections to my server.įor those who don’t know about Cloudflare, they are an American web-infrastructure and website-security company offering a variety of services at differing cost brackets.