Move your QNAP NAS backups offsite
Keep HBS 3 (Hybrid Backup Sync) exactly as it is. It writes, over a dedicated VPN, to the Nimbus Backup Gateway, which protects your data with Proxmox Backup Server (Primary PBS → AirGap → LTO). An offsite, immutable copy beyond the reach of ransomware.
Same HBS 3, a truly offsite target
QNAP HBS 3 (Hybrid Backup Sync) can write to remote destinations over rsync, FTP, SMB, WebDAV and S3 — all ingested by the Gateway. You don't replace your tool: you give it a hosted, supervised target protected by Nimbus, instead of (or alongside) a second NAS you'd have to manage yourself. Not sure which method fits? See the guide on choosing the right backup method.
How it works, step by step
Four steps, without changing your QNAP habits.
Dedicated VPN
We set up an encrypted tunnel (WireGuard or OpenVPN) between your site and the Gateway. Nothing is exposed in clear on the internet: client mode (your network initiates the VPN) or server mode (Nimbus initiates the VPN to you).
HBS 3 points to the Gateway
You keep HBS 3 (Hybrid Backup Sync). The job writes to the Gateway over rsync, FTP, SMB, WebDAV or S3. No extra app to install on the NAS, no habit to change.
Nimbus replicates multi-PBS + AirGap
The Gateway ingests the backup, then Nimbus protects it to a Primary PBS — and optionally a Secondary PBS, a disconnected AirGap PBS and LTO tape in a vault. Retention and immutability on the PBS side.
Restore test
We validate a real restore from the Nimbus chain to guarantee your QNAP data is recoverable, then sign off go-live.
From your QNAP to the air-gap
A single backup can be replicated to several PBS, then archived to tape. You compose the chain based on your PBS plan.
Multi-PBS architectures (France, Europe, AirGap) are detailed on the PBS plans and AirGap PBS pages. Why two sites? See the field report on the OVH Strasbourg fire. To gauge how long the first HBS 3 job to the Gateway will take, estimate your backup window.
Gateway Cloud pricing for QNAP
The simplest way to take a QNAP offsite: the Gateway Cloud, hosted and supervised by Nimbus. Prices excl. tax.
Gateway Cloud
2 TB included
- Dedicated VM + dedicated VPN
- 2 TB included, +15EUR excl. tax/TB
- 200 Mbps in / up to 1 Gbps restore
- 99EUR excl. tax setup
Antivirus scan option — 15EUR excl. tax/month
Weekly ClamAV scan of your volume on the Gateway (the buffer zone / external NAS backup server), on top of PBS protection.
The scan only covers what lands in the buffer zone: it does not prejudge the absence of infection on your LAN. If a backup is detected as infected, a full scan of your own environment is very strongly recommended on your side. Indicative analysis service, no guarantee.
Need on-site ingestion (volumes or latency)? See the Appliance offers on the NAS offsite backup hub.
Got a Synology NAS instead? See offsite backup for a Synology NAS, or compare the paths in the protocols matrix. For the full plan range and offsite backup pricing, see the business page.
We can configure your QNAP for you
Setup (99EUR excl. tax) includes full handling. Under managed offers, Nimbus configures your QNAP directly:
You keep control of your NAS: we only touch the offsite backup job.
What the Gateway is for
One clear purpose: receiving and protecting your QNAP backups, nothing else.
Depositing and protecting your QNAP backups
HBS 3 drops its jobs here, then protected to PBS.
Optionally exporting them to the more advanced Nimbus Backup services
Multi-PBS replication, AirGap PBS and LTO archiving, depending on your plan.
It is not designed to host live production data, nor for collaborative uses (Qsync, file sharing, collaborative storage).
Go further
NAS backup hub
The Gateway, its protocols and all offers.
Synology / Hyper Backup
The equivalent for Synology NAS.
Choose your method
The Proxmox / Gateway / Client decision guide.
Offsite backup for business
Why offsite matters for SMBs.
PBS plans
The Nimbus Proxmox Backup Server plans.
AirGap PBS
A disconnected, out-of-reach copy.
QNAP FAQ
Take your QNAP offsite with confidence
We plug HBS 3 into the Gateway, protect to PBS and validate a restore. 15-minute tech call, no commitment.