Leverage my existing cloudflared tunnel to allow my brother's nas to regularly rsyn

What is the name of the domain?

thebrowndomain

What is the issue you’re encountering

Can’t figure out how to setup an application for access on port 873

What are the steps to reproduce the issue?

I currently have a Cloudflare tunnel setup that has access into my private network at home. I’ve exposed one application so far. This application is a web service that I can hit from outside my network. It has a policy setup where it’ll send me a one time pin to my email and then I can access the application. It’s great.

Well now, I want to leverage this tunnel to permit my brother’s NAS to send its daily backups to my NAS. Prior to today, I’ve just had a site-to-site VPN setup between our houses and so his NAS (192.168.13.50) could send its backups through the VPN directly to my NAS’s IP address (192.168.188.240) on port 873. I no longer want to maintain this site-to-site VPN and want to leverage cloudflare to provide the connectivity. I want to use a Cloudflare zero trust solution.

An important detail to make here is that both of our NAS’s are Qnap brand NAS’s. They’re currently configured to use rsync to transfer the backups. I don’t believe I have the ability to install a WARP client on them. Essentially, I think I need them to be able to reach each other natively without installing additional software.

I have several questions about how to do this.

  • How do I configure a new application in cloudflare to access an rsync server in my network on port 873?
  • How do I configure the authentication/policy piece so that my brother’s NAS doesn’t need to authenticate (or even better automatically authenticates) with cloudflare to access my rsync server?
  • The backup software on my brother’s NAS can only be configured with the following fields:
    • Destination IP/hostname
    • Port
    • username
    • password
  • Could I simply configure the destination ip/hostname to be “offsitebackup.mydomain.com” on port 873 and have it go through the cloudflare tunnel to my nas?

I’ve attached a drawing of help illustrate the scenario.

Screenshot of the error