RT2600ac when running a VPN on my router, can i target just Download station and nothing else?

[okeeffemarc]

I know I can put my DS918+ IP through a VPN, using my router, whilst letting everything else in my network run on the WAN connection. However I find that when I try to remotely stream media from my NAS on Plex or DS Video, it is very slow and laggy due to not being able to port forward. The VPN internet speed is usually around 30-40 mbps, so I don't think the VPN itself is the problem. On research, you can't run port forwarding on expressVPN via manual configuration, unless you have the App on your router (Synology doesn't support at present). Is there a way of putting JUST Download Station through a VPN, but nothing else?

 

[Rusty]

You could set up Multiple gateway setting in the advanced section of network settings to allow fo your nas services to run even if the tunnel is active.

 

[okeeffemarc]

Do you mean this? It was already selected.

 

[Rusty]

In that case, if would recommend removing VPN from your NAS completely if downloads are just what you are after. Instead, run a torrent client via docker with a built-in VPN option. This way the download manager will be isolated in the tunnel and your NAS will not have any VPN penalty.

qBittorrent via VPN docker container running on Synology NAS

qBittorrent via VPN docker container running on Synology NAS

www.blackvoid.club

 

[okeeffemarc]

In that case, if would recommend removing VPN from your NAS completely if downloads are just what you are after. Instead, run a torrent client via docker with a built-in VPN option. This way the download manager will be isolated in the tunnel and your NAS will not have any VPN penalty.

qBittorrent via VPN docker container running on Synology NAS

qBittorrent via VPN docker container running on Synology NAS

www.blackvoid.club

Thanks very much for the info. Will look into it and see if I can figure out docker.

 

[Rusty]

Just write back if you get stuck.

 

[WST16]

Hi @Rusty

I’m giving this a shot with the new 1019+
It looks like I’m almost there. Just one thing. In the log, it says:

Options error: You must define CA file (--ca) or CA path (--capath)

I have the certificate file. I can add it to the same folder as the Openvpn file. I just don’t know how to tell docker to use it. Need something to add to that “single line”.

Thank you for your usual help

 

[Rusty]

Hi @Rusty

I’m giving this a shot with the new 1019+
It looks like I’m almost there. Just one thing. In the log, it says:

Options error: You must define CA file (--ca) or CA path (--capath)

I have the certificate file. I can add it to the same folder as the Openvpn file. I just don’t know how to tell docker to use it. Need something to add to that “single line”.

Thank you for your usual help

What vpn provider is in question?

 

[WST16]

What vpn provider is in question?

Mullvad.
I can configure it with no problems on the DiskStation as a VPN profile. So it’s working (for all traffic). Having it for qbittorrent as described above would be much better If possible.

 

[Rusty]

So cert is not the part of the ovpn file? Is there any reference into it that points to it?

 

[WST16]

I don’t think it’s part of the OVPN file.

The mullvad_ca.crt is provided as a separate file. If I create a vpn profile under the network interface, I must browse for it and add it in the CA certificate field.

 

[Rusty]

I don’t think it’s part of the OVPN file.

The mullvad_ca.crt is provided as a separate file. If I create a vpn profile under the network interface, I must browse for it and add it in the CA certificate field.

in that case edit the ovpn file and add rows that reference your cer and key files (depending what you need).

Look at line 78-80 in this file as an example :

openvpn/sample/sample-config-files/server.conf at master · OpenVPN/openvpn

OpenVPN is an open source VPN daemon. Contribute to OpenVPN/openvpn development by creating an account on GitHub.

github.com

 

[okeeffemarc]

can I ask what I place here:

-e "LAN_NETWORK=192.168.1.0/24" \ - is this the NAS ip?
-e "NAME_SERVERS=8.8.8.8,8.8.4.4" \ - not sure what this is?

Im getting there, watching lots of YouTube videos.

 

[Rusty]

The 1st variable is your LAN network subnet not the nas ip address. So it has to be written down in the form that matches your own network subnet

The second variable are public or local ip address of DNS server you want to use. In this example Google public dns servers are used.

 

[WST16]

in that case edit the ovpn file and add rows that reference your cer and key files (depending what you need).

Look at line 78-80 in this file as an example :

openvpn/sample/sample-config-files/server.conf at master · OpenVPN/openvpn

OpenVPN is an open source VPN daemon. Contribute to OpenVPN/openvpn development by creating an account on GitHub.

github.com

Sorry @Rusty. My mistake, the Mullvad ovpn file contains this reference:

ca mullvad_ca.crt

So it’s already there. But the other two that are referenced in the sample file (your mentioned lines) are not included in their ovpn file.

I will try contacting their support and see if they can offer any pointers.

 

[Rusty]

Sorry @Rusty. My mistake, the Mullvad ovpn file contains this reference:

ca mullvad_ca.crt

So it’s already there. But the other two that are referenced in the sample file (your mentioned lines) are not included in their ovpn file.

I will try contacting their support and see if they can offer any pointers.

Not sure that all 3 files need to be referenced. Be sure that there is real need for all 3 files.

When you have it running via dsm do you also need to use all files?

 

[WST16]

Not sure that all 3 files need to be referenced. Be sure that there is real need for all 3 files.

When you have it running via dsm do you also need to use all files?

No, I only need the ovpn and the certificate files and it works on VDSM. Just like if I’m adding it on DSM.

 

[Rusty]

Then having both files in root for qbittorrent should work. Guessing you checked the file name and that it is matched in the ovpn file as well?

 

[WST16]

Then having both files in root for qbittorrent should work. Guessing you checked the file name and that it is matched in the ovpn file as well?

Yes (to the best of my knowledge). Anyway, the VDSM solution is much, much better. No need to pursue this

 

[okeeffemarc]

The 1st variable is your LAN network subnet not the nas ip address. So it has to be written down in the form that matches your own network subnet

The second variable are public or local ip address of DNS server you want to use. In this example Google public dns servers are used.

Hi @Rusty, I've done my best to follow the instructions. I have set up the folders, added the the ovpn file in the ovpn folder, within config, and have added the username and password. I have filed out the rest the best I can.

Can you see what I've done wrong? Sorry if its very dummy