WD creates at least 4 big challenges for users when changing the support for their OS3 NAS devices:
- No more firmware updates to fix security vulnerabilities and bugs.
- No more remote access. Not able to use WD software like MyCloud.com, My Cloud mobile apps and WD Sync.
- No more support from WD.
- No more email notifications.
In addition, there will be financial and time consuming challenges if you are forced to purchase new equipment.
Also keep in mind that most OS3 NASs may be outdated with slow processors and not enough RAM.
My solution is based on using a VPN server in my LAN. The solution requires knowledge of DDNS, FQDN, static IP, HTTPS, VPN, firewalls, port forwarding, programming, editing configuration files, etc. If you are not comfortable with the technology, you may be able to get help from a friend or hire expert help. Once everything is installed, all users can easily access My Cloud remotely. Please note that according to WD, the device still has security challenges that probably never will be resolved. They actually recommend disconnecting the cloud device from the internet!
The working solution is based on My Cloud v04.05.00-342 and a Synology DS718+ connected to the same router in LAN. Remote connections from laptops with Windows 10 and Linux Mint 20, and mobile phones with Android 11 are made regularly.
1. No more firmware updates to fix security vulnerabilities and bugs
If remote access is required, it must be accepted that the OS3 devices will still have security challenges that will never be fixed. To reduce the risk, I use a script that examines the date and time on the file /root/.bash_history. The timestamp is sent via email every day. Changed time means that someone has been inside the system and executed terminal commands. No important files are stored on the device and all passwords are wery strong.
2. No more remote access through mobile apps or web app.
The VPN Server on DS718+ is running, and accept connections from OpenVPN clients on WAN. OpenVPN clients exists for all major operating systems including Windows, Linux, macOS, Android and iOS. For remote connection from a Windows laptop, the OpenVPN Connect Windows client can be used.
OpenVPN Clients used on WAN allow users on DS718+ to remotely and securely access resources shared within the LAN of the Synology NAS by only exposing one service instead of a bunch of them. The connection is encrypted. It protect from eavesdropping when we are in an unsecured network on WAN, like a public WiFi. It can also bypass country restrictions when we are not in our country.
Once connected, we can access shared resources on LAN as if we were at home. For example, in Windows File Explorer, \\192.168.2.93/tom will connect to user Tom’s share on My Cloud if correct username and password is given. If we type 192.168.2.93 in a web browser, we will have access to all information and settings in My Cloud Dashboard. With my VPN configuration, if we use the internet via a web browser, the IP address provided by our ISP (home external IP address) will normally be used.
All of this also applies to remote connection from mobile phones and devices with Linux or macOS operating systems (that supports SMB/AFP or maybe even NFS).
3. No more support from WD
If necessary, I will seek in the WD Knowledge Base, or ask all the skilled people on the WD Community.
4. No more email notifications
Some notifications can also be read in My Clouds Dashboard. What I need most is that the daily mirroring of My Cloud has gone well. To achieve this, I use a script that automatically starts at 5 a.m. every day. The script mirrors the contents of My Cloud to the connected usb hard drive and sends notification via email.