Syno Package Land
Package Center
← All apps

NAS Remote Connect

Syno Package Land

Basic security check: done

Reach your NAS remotely without opening router ports. Turn Cloudflare Tunnel, Tailscale, NetBird or IPv6 direct access on or off from one page.

Install it from Package Center: add this site's package source once, then find the app under Community. How to add the source

Version
0.1.0-0052
Publisher
Syno Package Land
Package ID
SynoPkgConnect
Requires DSM
7.1-42661
Completed downloads
34 · 34 in the last 30 days

About this app

Reach your NAS remotely without opening router ports. Connect lists every connection method on one page; turn Cloudflare Tunnel, Tailscale, NetBird or IPv6 direct access on or off independently, or disable them all. Only DSM administrators can open the app or call its API. Everything runs as the package account; no root helper, Node.js or shared service is installed. Cloudflare Tunnel, Tailscale and NetBird use their official, unmodified clients, downloaded from the vendors and verified before use. Cloudflare publishes only the DSM web page; NetBird access is controlled by your management server's policy. Development preview: Connect does not create cloud accounts or resources, and end-to-end external connectivity of each method has not been verified on every network.

Latest changes

0.1.0-0052 - One overview page lists every connection method. Turn Cloudflare Tunnel, Tailscale, NetBird or IPv6 direct access on or off independently, or turn them all off. - Cloudflare Tunnel: a temporary URL with no account, your own domain after signing in to Cloudflare (an existing DNS record is never overwritten), or your own tunnel token. Only the DSM web page is published. - Tailscale: reach selected NAS web services from your own computers and phones; Funnel can make selected web services public. - NetBird: sign in with your NetBird account, or use a setup key and your own management server in Advanced. Access to the NAS follows your management server's policy. - IPv6 direct: use the NAS's global IPv6 address with checklists for the DSM firewall, router and DDNS. Connect does not change the firewall or your router. - The cloudflared, Tailscale and NetBird clients are the vendors' official releases, downloaded and verified on the NAS before use. - Only DSM administrators (local, AD or LDAP, as resolved by DSM) can open Connect and call its API. Everything runs as the package account, with no root helper. - Nine languages; DSM 7.1 or later on x86_64, aarch64 and armv7. - Fixed since 0.1.0-0047: starting and then stopping Tailscale or IPv6 direct no longer clears their saved services; NetBird failures show one clear message, and copying the NetBird IP works over http; Settings names GitHub's rate limit and when to retry, and says it is checking while a check runs; a page DSM gave no sign-in token asks you to sign in to DSM again. - Upgrading from 0.1.0-0047 needs no administrator approval.

Contact and links

License: MIT. Bundled Go and npm dependencies keep their own licenses; the full notices ship in the package's LICENSES/ folder. The cloudflared, Tailscale and NetBird clients are downloaded from their vendors under their own licenses. Source code is not public at this time.

Download the SPK by hand

Only if you cannot add the package source. Pick the file that matches your NAS's CPU.

Manual install: download the SPK that matches your NAS's CPU, then in Package Center choose Manual Install and select the file. This SPK is not signed by Synology, so DSM may warn before installing it; continue only if you trust the author.