Application Portal
Application Portal allows you to configure the connection settings of various applications so that you can directly access and run these applications (e.g. File Station) in independent browser tabs or windows.
Note:
You can edit access settings for applications like Audio Station, Download Station, Surveillance Station, Video Station, File Station, and many others.
Customize Aliases
You can assign an alias for each Synology-developed application like File Station. With the custom alias, you can quickly open the application via a specialized URL.
To customize application aliases:
- Go to Control Panel > Application Portal > Application.
- Select an application.
- Click Edit > General.
- On the pop-up window, select Enable customized alias and specify the alias.
- Click OK to save the settings.
Note:
- Some applications have their default aliases: Audio Station (audio), Download Station (download), File Station (file), Surveillance Station (cam), and Video Station (video).
- Alias names cannot be the same as those reserved for system, browsers, or used by other applications, and their number of characters must be limited within 2 to 20.
- An alias can only be made up of mixed case letters, numeric characters, and two special characters (-) and (_).
- An alias cannot start or end with either special character (-) or (_).
To access applications with aliases:
After you set up an alias for an application (e.g. File Station), you can quickly open the application by entering a URL in the following formats: http://DS_IP_OR_SERVER_NAME/ALIAS/ or https://DS_IP_OR_SERVER_NAME/ALIAS/
For instance, you can quickly access File Station via the URLs: http://192.168.xx.xx/file/ or https://MySynologyNAS/file/
Customize HTTP/HTTPS Ports
You can assign an HTTP/HTTPS port for each Synology-developed application like File Station. With the custom port, you can quickly open the application via a specialized URL.
To customize application HTTP/HTTPS ports:
- Go to Control Panel > Application Portal > Application.
- Select an application.
- Click Edit > General.
- On the pop-up window, select Enable customized port (HTTP) or Enable customized port (HTTPS).
- Specify a custom port number.
Note:
- The range of port number can be from 1 to 65535.
- The following ports cannot be used because they are reserved for system use:
- 20, 21, 22, 23, 25, 80, 110, 137, 138, 139, 143, 199, 443, 445, 515, 543, 548, 587, 873, 993, 995, 3306, 3689, 5000, 5001, 5005, 5006, 5335, 5432, 6881, 8080, 7000, 7001, 8081, 9997, 9998, 9999, 50001, 50002
- eMule default ports: 4662 (TCP), 4672(UDP)
- FTP default port range: The actual range may vary depending on different models.
To access applications with HTTP/HTTPS ports:
After you set up an alias for an application (e.g. File Station), you can quickly open the application by entering a URL in the following formats: http://DS_IP_OR_SERVER_NAME:HTTP_PORT or https://DS_IP_OR_SERVER_NAME:HTTPS_PORT
For instance, you can quickly access File Station via the URLs: http://192.168.xx.xx:7000 or https://MySynologyNAS:7001
Customize Domains
You can match a domain name with a Synology-developed application like File Station. With the custom domain, you can quickly open the application via a specialized URL.
To customize application domains:
- Go to Control Panel > Application Portal > Application.
- Select an application.
- Click Edit > General.
- On the pop-up window, select Enable customized domain.
- Specify a custom domain.
- For additional settings, you can select Enable HSTS or Enable HTTP/2 to suit your needs.
Note:
- Before setting up this feature, you need to apply for domain names from domain providers so that users can access the service from the Internet.
- For applications (e.g. File Station) related to file uploading/downloading, we suggest you not select Enable HTTP/2 because such applications may have slow uploading and downloading speeds.
- Each domain name can only be used for one distinct application on your DiskStation.
- If the domain name does not exceed 15 characters in length and complies with the NetBIOS naming conventions, the system will register and broadcast the domain name automatically.
- When you access applications via URLs that use domain names, you will go through the standard HTTP port (80) or the standard HTTPS port (443).
To access applications via domains:
After you set up a domain (e.g. file.example.com) for an application (e.g. File Station), you can quickly open the application by entering a URL in the following formats: http://APP_DOMAIN or https://APP_DOMAIN
For instance, you can quickly access File Station via the URLs: http://file.example.com or https://file.example.com
If the domain name (e.g. FileFile) for an application (e.g. File Station) obeys the NetBIOS naming conventions, Windows users can access it on a Synology NAS in the same local network with a similar URL: http://FileFile or https://FileFile
Customize Reverse Proxy Rules
Your DiskStation can act as a reverse proxy server that transfers requests from the Internet to devices in the local network. Reverse proxy rules can help you hide sensitive ports from potential threats as in the two scenarios below:
Scenario 1: Suppose the sensitive port is 80, which should not allow external access according to the firewall rule. You can set up a reverse proxy rule to allow trusted users from the Internet to reach the sensitive port 80 via another open port (e.g. 81). In this way, the trusted users can circumvent the firewall and still be able to access the port 80.
Scenario 2: Suppose the sensitive port is 80, which should not allow external access except from a specific device (e.g. a server named "MyTrustee"). With reverse proxy rules, you can allow only traffic from MyTrustee to reach the port 80 while traffic from other devices will not.
To set up reverse proxy rules:
- Go to Control Panel > Application Portal > Reverse Proxy.
- Click Create and specify the following settings:
- Description: Specify a name that helps you identify the rule function.
- Specify the rules for the Source (the device sending requests from the Internet) and Destination (the device in the local network):
- Protocol: The HTTP or HTTPS protocols used by the source/destination
- Hostname: The name of the source/destination device
- Port: The port used by the source/destination device
- Enable HSTS and Enable HTTP/2 (only for the source)
- Click OK to save the settings.
Note:
If you enter * as the source hostname or leave it in blank, the rule will be applied to any sources.