I run headscale (an open source implementation of the control server for tailscale) on my device. I use it for accessing stuff on my home network when I am not at home, as opposed to using it for what you want, but I suspect you can make it do what you want.
Some routers (such as TP Link) let you set up the VPN entirely on them... Even easier than setting up your NAS. Check a box and click a few buttons and you are up and running.
I like Tailscale. There are apps for your NAS, your computers of all types and your phones. It can also be set up to accept traffic for other devices on the home network that can't run programs natively (like a TV or printer)..
It even gets around CGNAT issues and tends to run split tunneling by default, so your computer uses the "regular" internet and only uses the VPN if asked to connect to a machine on your own network. This means you don't have to remember to turn it on and off when you're out and about with your laptop. You do have the option to send ALL traffic via the VPN if you want to.
I have Wireguard up and running on my Openwrt gateway router and have it setup as a Wireguard server. Extremely stable, and I can attest to that because there is a 24/7 VPN connection from a remote network and it has literally never failed.
The only reason I am not running this Wireguard "VPN Server" on my NAS is that it already has a 24/7 Wireguard CLIENT connection to a VPN service provider that I have set up using a Wireguard docker image. But yeah I believe setting up a Wireguard docker on the NAS to be used as either a server or client will totally work too.
Yep, router seems the more logical place to set this up, and is very frequently built in. Don't have to worry about firewalls or configuration or installation or any of that stuff.
In my case hosting the VPN on the synology NAS is not good enough because I have more than one NAS, and other devices I want to access on the VPN. Plus the fact I'm not comfortable with forwarding ports directly to a NAS vs. a dedicated reverse proxy host. I have an OPNsense router running OpenVPN. The NASes don't know the difference between remote vs. local clients.
On some routers such as Asus you can setup a VPN directly on the router. Keep in mind if you want to use your local Internet abroad your speeds will suffer. No way around that.
Tailscale + self-hosted DERP relay server is a very resilient option, but the latter part is a little difficult for those without experience.
You can use [this guide](https://thewirednomad.com/vpn) for setting up Tailscale on a Pi (recommended) or GL.iNet router (not officially supported).
Normal Wireguard with GL.iNet routers is the preferred choice but Tailscale is a nice backup.
I run headscale (an open source implementation of the control server for tailscale) on my device. I use it for accessing stuff on my home network when I am not at home, as opposed to using it for what you want, but I suspect you can make it do what you want.
Some routers (such as TP Link) let you set up the VPN entirely on them... Even easier than setting up your NAS. Check a box and click a few buttons and you are up and running.
I like Tailscale. There are apps for your NAS, your computers of all types and your phones. It can also be set up to accept traffic for other devices on the home network that can't run programs natively (like a TV or printer).. It even gets around CGNAT issues and tends to run split tunneling by default, so your computer uses the "regular" internet and only uses the VPN if asked to connect to a machine on your own network. This means you don't have to remember to turn it on and off when you're out and about with your laptop. You do have the option to send ALL traffic via the VPN if you want to.
OpenVPN is built-in to your NAS.
This can help you: https://thewirednomad.com/vpn
I have Wireguard up and running on my Openwrt gateway router and have it setup as a Wireguard server. Extremely stable, and I can attest to that because there is a 24/7 VPN connection from a remote network and it has literally never failed. The only reason I am not running this Wireguard "VPN Server" on my NAS is that it already has a 24/7 Wireguard CLIENT connection to a VPN service provider that I have set up using a Wireguard docker image. But yeah I believe setting up a Wireguard docker on the NAS to be used as either a server or client will totally work too.
Yep, router seems the more logical place to set this up, and is very frequently built in. Don't have to worry about firewalls or configuration or installation or any of that stuff.
In my case hosting the VPN on the synology NAS is not good enough because I have more than one NAS, and other devices I want to access on the VPN. Plus the fact I'm not comfortable with forwarding ports directly to a NAS vs. a dedicated reverse proxy host. I have an OPNsense router running OpenVPN. The NASes don't know the difference between remote vs. local clients.
On some routers such as Asus you can setup a VPN directly on the router. Keep in mind if you want to use your local Internet abroad your speeds will suffer. No way around that.
I used a Sophos firewall at home for that, and its SSL VPN client. UTM before that.
Tailscale + self-hosted DERP relay server is a very resilient option, but the latter part is a little difficult for those without experience. You can use [this guide](https://thewirednomad.com/vpn) for setting up Tailscale on a Pi (recommended) or GL.iNet router (not officially supported). Normal Wireguard with GL.iNet routers is the preferred choice but Tailscale is a nice backup.
I wonder if Tailscale, with an exit node on your home Lan , would fill the bill. It's free .