How to Setup Synology's Reverse Proxy - Including HTTP to HTTPS Redirect

[@jhonderson10]

For people changing the external ports (or custom ddns) I recommend also applying this changes in Control Panel > External Access > Advanced, so that the links generated by photos and drive don’t use 5000/5001 ports

[@GoodTato]

Configured up to around 4 minutes in, but when I try to actually connect with the DDNS hostname I get "400 Bad Request Invalid Header". Is there something I'm missing?

[@mullinslol]

Thank u. I have all the DSM config and getting 400 bad request. I had to forward the ports on the router

[@ForSynthsSake]

Can I just ask, do I need to set up a reverse proxy for each webservice, like hosting a webpage?

[@janjurkiewicz6453]

hi what if I don't have the option in web station to create virtual host?

[@digital_aloha]

@janjurkiewicz6453 Funny you should ask.😄 If you are using DSM 7.2, the web station steps are a little different and I just released a video on that -> kzbin.info/www/bejne/nH29ppR9h56DrJY. Hope it helps? Best of luck with your setup!!

[@janjurkiewicz6453]

@@digital_aloha Thank you!

[@digital_aloha]

@@janjurkiewicz6453 You're welcome!!

[@markdudov2508]

You are my hero!

[@digital_aloha]

@markdudov2508 Haha 😀!! Glad the video was helpful!!

[@KaldeepSingh]

Another great video... I have a couple of questions. 1. What is the benefit of using reverse proxy over a vpn solution? 2. (Not related to this subject) I have a DDNS set up using the method shown in this video. The SSL certificate renews on a periodic basis. When the renewal is completed I have to relogin into my Synology Drive sync task on Windows. Which becomes very annoying. Any idea to circumvent this?

[@digital_aloha]

@KaldeepSingh Thank you for the compliment on this video!! Regarding your question on the benefit of a reverse proxy over a vpn, I would actually recommend using a vpn over a reverse proxy if at all possible. With a VPN access to the resource you want to reach would only be available when connected to the VPN, whereas with a reverse proxy access is always available. The main benefit of a reverse proxy is that you can limit what ports are accessible externally instead of opening up a bunch of ports for the various services you would like to reach. Regarding your DDNS question I actually haven't ran into that issue myself so I'm not sure how to help, but I do see that others ran into this issue in some forum posts. I'll look into this and will release a video if I do find a solution.

[@KaldeepSingh]

@@digital_aloha thanks buddy for your reply... Will stick with my VPN then 😁... Hopefully you find a solution for my relogin problem

[@MarcelSchalk]

Sadly the Virtual Host option is missing in DSM 7.2 😞

[@digital_aloha]

@MarcelSchalk Yeah, looks like Virtual Host is missing and now it is a two step process to create the HTTP to HTTPS redirect. I'll create a video shortly on this, but for a quick rundown on what to do you'll need to create a Web Service, then a Web Portal in Web Station. You should be able to fill in what is needed in each from the information from this video, but, if not, look for an updated video covering setting up a Reverse Proxy in DSM 7.2 within the next couple of weeks. Good luck!!

[@ForSynthsSake]

I successfully did this, thank you. I will of course send a donation. I was looking to find out how to setup a virtual host website on my NAS which will use the default certificate but do I need to add another reverse proxy rule for that? I can get into the site but with no security

[@digital_aloha]

You're welcome!! Regarding your question on setting up another reverse proxy and a virtual host I think you can use wildcard certificates and sub-domains. Check out my other video that covers that topic -> kzbin.info/www/bejne/fmPRdaiqYpaqfa8si=Iz4oWcOYUHnU2KHY. Hope that is what you are looking for and good luck to you in your set up.

[@ForSynthsSake]

@@digital_aloha That is kind of you to take the time and reply. I am currently stuck as I exceeded the let's encrypt limit so I can't do anything until 10th of August.

[@digital_aloha]

@@ForSynthsSake You're welcome!! Hope the info will prove helpful.

[@wonkywombat]

Very helpful. I assume once this is done I could add additional reverse proxy settings to point to other applications running on the NAS?

[@digital_aloha]

@wonkywombat Glad the video was helpful and for sure you can add additional reverse proxy rules to point to other applications running on your Synology NAS. Best of luck to you in your setup!!

[@sean_sakuga7276]

How would one go about doing this? I have FileBrowser installed on my NAS and i'm trying to create a reverse proxy for it so my friends can access it, but I'm having a hard time.@@digital_aloha

[@tamvongatvn1084]

I am new to synology, maybe my question is no related to video. But hope you answer me. I have file server synology. And I want to create website and interactive with synology api. But i catch CORS. And I think i have configure proxy server in file server. Can you give me advise. Thanks. Sorry my bad english

[@digital_aloha]

@tamvongatvn1084 I'm not sure I can help you with your question. I know very little about CORS and from what I've read I'm not quite sure a reverse proxy would fix the issue. Sorry for not being of much help. Good luck in your website project!!

[@tamvongatvn1084]

@@digital_aloha No problem, Bro. thank you for response.

[@digital_aloha]

@@tamvongatvn1084 You're welcome... Good luck!!

[@PatentFinance]

Is this no longer necessary? It seems like there is an option to make the reverse proxy for DSM default to HTTPS now.

[@FlowinBeatz]

Where?

[@Kevin-rf9sx]

since nearly every Browser uses 443 by default when typing in the URL without http(s) in front, there is no need to open port 80 its also a good thing to change the default port 5001 to something else like 7943 or whatever.. Since with 5001 you will get hundrets of login attempts from Bots.

[@digital_aloha]

Thanks for the feedback!! For sure almost every browser uses 443, but adding the 80 to 443 redirect is pretty simple that it is just worth doing in my opinion. Also changing the default port of 5001 to something else is also a good practice if it is exposed over the Internet, but not necessarily needed if it isn't and if you use a reverse proxy like described in the video.

[@mihailcrivat8703]

Hi. How To Fix the HTTP 303 Status Code

[@klauserwin9860]

Thanks!

[@digital_aloha]

@klauserwin9860 You're welcome!!

[@fpt_chezis]

Now it say 400 Bad Request Request Header Or Cookie Too Large nginx when i use my-domain/wordpress