Cloudflare Tunnel to NAS (HTTPS vs HTTP)

Currently reading
Cloudflare Tunnel to NAS (HTTPS vs HTTP)

4,027
1,378
NAS
DS4l8play, DS202j, DS3623xs+, DSM 7.3.3-25847
I'm attempting to end port-forwarding and using Cloudflare tunnels to do so. But connecting to the NAS seems odd to me. Some background...

Presently I use RP to reach my NAS DSM login. For example, in a browser URL I enter:
https://nas1.mydomain.com

RP "translates" this as
https://<nsa_ip>:<nas_https_port>

That seems simple and it works.

After creating a CF tunnel, I added a "public hostname" with a subdomain of "nas1.mydomain.com", and a "service" of
https://<nsa_ip>:<nas_https_port>

However... no connection is possible... however if I change the "service" to
http://<nsa_ip>:<nas_http_port>

entering:
https://nas1.mydomain.com

brings up the DSM login screen with a secure padlock.

Why is there a difference between RP and Cloudflare tunnel, that explains why HTTPS does not work with the tunnel, but seems to with the RP?

Have I done somthing wrong here?
 
https://<nsa_ip>:<nas_https_port>
When you use this do you have a valid cert behind it or it fails to get a pad lock if you do not use the tunnel? If it fails it might be the same reason it doesn’t work via CF. It could be looking for a successful connection.
 
When I launch nas1.mydomain.com from Cloudflare, it connects shows a padlock when I specify the HTTP port on Public Hostnames. But when I specify the HTTPS port, I get "Bad Gateway".

j6f068u.png


This is a "free' CF account if that matters.

On the NAS my Cloudflare Origin Cert is default, and configuration shows it on all services.
 
I'm attempting to end port-forwarding and using Cloudflare tunnels to do so. But connecting to the NAS seems odd to me. Some background...

Presently I use RP to reach my NAS DSM login. For example, in a browser URL I enter:
https://nas1.mydomain.com

RP "translates" this as
https://<nsa_ip>:<nas_https_port>

That seems simple and it works.

After creating a CF tunnel, I added a "public hostname" with a subdomain of "nas1.mydomain.com", and a "service" of
https://<nsa_ip>:<nas_https_port>

However... no connection is possible... however if I change the "service" to
http://<nsa_ip>:<nas_http_port>

entering:
https://nas1.mydomain.com

brings up the DSM login screen with a secure padlock.

Why is there a difference between RP and Cloudflare tunnel, that explains why HTTPS does not work with the tunnel, but seems to with the RP?

Have I done somthing wrong here?
Soon I am attempting to set up Cloudflared on my Synology NAS, and was wondering if the SynoCommunity built app in the Package Center could be trusted instead of doing it via command line. It has zero downloads, so I didn't want to be the first.
 
Soon I am attempting to set up Cloudflared on my Synology NAS, and was wondering if the SynoCommunity built app in the Package Center could be trusted instead of doing it via command line. It has zero downloads, so I didn't want to be the first.
There’s also the docker way.
To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

On a thread two moths ago, I was flummoxed by my domain cert auto-renewal. As it turned out Cloudflare is...
Replies
0
Views
1,016
  • Solved
Meanwhile... 12 days later... and it seems that Cloudflare has again extended my LE certificate Maybe...
Replies
10
Views
2,959
  • Question
Start with plus system and ram expansion that puts you in a great starting point for years to come. I...
Replies
6
Views
478
That'd perhaps be a fun project someday. :)
Replies
14
Views
738
To each his own, I like the challenge and participating in a project. Not to mention the free 4 bay...
Replies
13
Views
1,650
Hardware of several Synology competitors often seems a generation ahead. The wave of security issues and...
Replies
1
Views
979

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top