Why recommend IPv6#
Many netizens are still looking for intranet penetration, which is only necessary when there is no external network address.
Now almost all broadband operators allocate external IPv6 addresses
So this article was created
Free free free
No need for too much configuration, stable, simple, once and for all
What is intranet penetration#
Intranet penetration refers to the technology of accessing intranet devices through the external network in an intranet environment.
Intranet devices usually refer to computers, NAS, cameras, etc. in homes or offices, which do not have public IP addresses and can only communicate with each other in the local area network.
There are many needs for accessing intranet devices from the external network, such as remote control of computers, viewing camera images, downloading files on NAS, etc.
The principle of intranet penetration is to forward external network requests to intranet devices through an intermediate server, or to actively connect intranet devices to the intermediate server, thereby achieving bidirectional communication.
Why use IPv6#
IPv6 is a new network protocol that can provide more IP address resources and solve the problem of insufficient IPv4 addresses.
The address format of IPv6 is 8 groups of hexadecimal numbers, each group is 4 digits, separated by colons, for example: 2409:8b43:311b:b6e0:211:32ff:fe12:3456
The advantages of IPv6 are as follows:
Each device can have an independent public IPv6 address without sharing an IPv4 address through NAT technology.
IPv6 supports automatic configuration and plug-and-play, without manually setting IP addresses, subnet masks, default gateways, and other parameters.
IPv6 supports end-to-end encryption and authentication, improving network security.
IPv6 supports larger data packets and higher transmission efficiency, improving network performance.
How to configure IPv6#
To use IPv6 for intranet penetration, you first need to ensure that your network environment supports IPv6, which can be tested through the website http://test-ipv6.com/.
If your network environment supports IPv6, then you need to do the following steps:
Set the optical modem to bridge mode and let the router dial up to the Internet by itself.
Enable IPv6 function in the router and select DHCPv6 client mode to obtain a public IPv6 address.
Add firewall rules in the router to allow external network access to the IPv6 address and port of the intranet device.
Enable IPv6 service in the NAS and obtain a public IPv6 address.
How to use virtual machines and Docker to build services#
If you want to run applications or services on the NAS, such as web servers, database servers, FTP servers, etc., you can use virtual machines or Docker to build them.
A virtual machine is a technology that simulates a complete operating system environment on a physical machine. It can run different operating systems and software, isolate each other, and does not affect the performance and security of the physical machine.
Docker is a technology that runs lightweight containers on an operating system. It can quickly deploy and manage applications, provide a consistent runtime environment, and save resources and time.
The steps to use virtual machines or Docker on the NAS are as follows:
Install a virtual machine manager or Docker suite in the NAS Package Center.
Create a virtual machine in the virtual machine manager, select the operating system image, allocate memory and disk space, and start the virtual machine.
Install and configure the required applications or services in the virtual machine, set up network and firewall rules, and ensure access within the local area network.
Search and download the image of the required applications or services in Docker, create a container, set up network and port mapping, and start the container.
Run the required applications or services in the container and ensure access within the local area network.
How to use the management panel to reverse proxy and bind a domain name#
If you want to access the applications or services on your NAS using a domain name instead of an IPv6 address and port number, you can use the management panel to reverse proxy and bind a domain name.
Reverse proxy is a technology that forwards external network requests to an intranet server. It can hide the real address of the intranet server and provide functions such as load balancing and caching.
A domain name is a technology that maps an IP address to a string that is easy to remember. It can be resolved through a DNS server, allowing users to conveniently access websites or services.
The steps to use the management panel to reverse proxy and bind a domain name on the NAS are as follows:
In the NAS control panel, select the Application Portal, click on the Reverse Proxy tab, and create a new rule.
Enter a domain name in the source, such as nas.example.com, and enter an IPv6 address and port number of an intranet server in the target, such as [2409:8b43:311b:b6e0:211:32ff:fe12:3456]:8080, and click OK.
In the NAS control panel, select Security, click on the Certificate tab, and create a new certificate. Select Get a certificate from Let's Encrypt, enter your domain name and email address, and click OK.
Set an A record or AAAA record in your domain name registrar to point your domain name to your public IPv6 address, such as 2409:8b43:311b:b6e0:211:32ff:fe12:3456.
After the DNS resolution takes effect, enter your domain name in the browser, such as https://nas.example.com, to access your intranet server.
Summary#
The above is just a simple description, equivalent to the blogger's own prompt items,
There are detailed tutorials on the Internet, so the blogger won't be annoying here, and the tutorials have a limited lifespan. Some configuration tutorials become outdated after the Synology version is updated. Everyone should look for the latest ones online.
The blogger uses IPv6 to implement his own NAS, alist, and memo.
The basic requirements do not require buying a VPS or anything, satisfying low cost and basic requirements.
Reverse proxy can proxy the intranet IPv4 address and use IPv6 to convert it.