QNAP · HBS 3

    Move your QNAP NAS backups offsite

    Keep HBS 3 (Hybrid Backup Sync) exactly as it is. It writes, over a dedicated VPN, to the Nimbus Backup Gateway, which protects your data with Proxmox Backup Server (Primary PBS → AirGap → LTO). An offsite, immutable copy beyond the reach of ransomware.

    HBS 3 rsync / FTP SMB / WebDAV S3 Dedicated VPN Multi-PBS AirGap LTO

    Same HBS 3, a truly offsite target

    QNAP HBS 3 (Hybrid Backup Sync) can write to remote destinations over rsync, FTP, SMB, WebDAV and S3 — all ingested by the Gateway. You don't replace your tool: you give it a hosted, supervised target protected by Nimbus, instead of (or alongside) a second NAS you'd have to manage yourself. Not sure which method fits? See the guide on choosing the right backup method.

    rsync FTP SMB WebDAV S3

    How it works, step by step

    Four steps, without changing your QNAP habits.

    1

    Dedicated VPN

    We set up an encrypted tunnel (WireGuard or OpenVPN) between your site and the Gateway. Nothing is exposed in clear on the internet: client mode (your network initiates the VPN) or server mode (Nimbus initiates the VPN to you).

    2

    HBS 3 points to the Gateway

    You keep HBS 3 (Hybrid Backup Sync). The job writes to the Gateway over rsync, FTP, SMB, WebDAV or S3. No extra app to install on the NAS, no habit to change.

    3

    Nimbus replicates multi-PBS + AirGap

    The Gateway ingests the backup, then Nimbus protects it to a Primary PBS — and optionally a Secondary PBS, a disconnected AirGap PBS and LTO tape in a vault. Retention and immutability on the PBS side.

    4

    Restore test

    We validate a real restore from the Nimbus chain to guarantee your QNAP data is recoverable, then sign off go-live.

    From your QNAP to the air-gap

    A single backup can be replicated to several PBS, then archived to tape. You compose the chain based on your PBS plan.

    QNAP NAS (HBS 3)
    Nimbus Backup Gateway
    Primary PBS
    AirGap PBSoptional
    LTO tape in vaultoptional

    Multi-PBS architectures (France, Europe, AirGap) are detailed on the PBS plans and AirGap PBS pages. Why two sites? See the field report on the OVH Strasbourg fire. To gauge how long the first HBS 3 job to the Gateway will take, estimate your backup window.

    Gateway Cloud pricing for QNAP

    The simplest way to take a QNAP offsite: the Gateway Cloud, hosted and supervised by Nimbus. Prices excl. tax.

    Recommended

    Gateway Cloud

    2 TB included

    150EURexcl. tax / month
    • Dedicated VM + dedicated VPN
    • 2 TB included, +15EUR excl. tax/TB
    • 200 Mbps in / up to 1 Gbps restore
    • 99EUR excl. tax setup
    Request a quote

    Antivirus scan option — 15EUR excl. tax/month

    Weekly ClamAV scan of your volume on the Gateway (the buffer zone / external NAS backup server), on top of PBS protection.

    The scan only covers what lands in the buffer zone: it does not prejudge the absence of infection on your LAN. If a backup is detected as infected, a full scan of your own environment is very strongly recommended on your side. Indicative analysis service, no guarantee.

    Need on-site ingestion (volumes or latency)? See the Appliance offers on the NAS offsite backup hub.

    Got a Synology NAS instead, or does HBS 3 need to write over S3? See offsite backup for a Synology NAS or backup over S3 to PBS, or compare the paths in the protocols matrix. For the full plan range and offsite backup pricing, see the business page.

    We can configure your QNAP for you

    Setup (99EUR excl. tax) includes full handling. Under managed offers, Nimbus configures your QNAP directly:

    VPN configuration
    HBS 3 job + destination
    Schedule setup
    Transfer tests
    Restore test
    Production validation

    You keep control of your NAS: we only touch the offsite backup job.

    What the Gateway is for

    One clear purpose: receiving and protecting your QNAP backups, nothing else.

    Depositing and protecting your QNAP backups

    HBS 3 drops its jobs here, then protected to PBS.

    Optionally exporting them to the more advanced Nimbus Backup services

    Multi-PBS replication, AirGap PBS and LTO archiving, depending on your plan.

    It is not designed to host live production data, nor for collaborative uses (Qsync, file sharing, collaborative storage).

    QNAP FAQ

    You keep using HBS 3 (Hybrid Backup Sync) as usual. It writes to the Nimbus Backup Gateway over a dedicated VPN tunnel (WireGuard or OpenVPN). The Gateway ingests the backup, then Nimbus replicates it to a Primary PBS, and optionally to an AirGap PBS and LTO tape. Nothing changes in your QNAP backup habits.

    QNAP HBS 3 can write to remote targets over rsync, FTP, SMB, WebDAV and S3 — all ingested by the Gateway. The Gateway is technically a VM based on OpenMediaVault (Debian) that natively exposes these protocols. You set the remote backup job in HBS 3; Nimbus handles the rest.

    Yes. Once the backup is ingested by the Gateway, Nimbus protects it on Proxmox Backup Server with retention and immutability, then optionally to a disconnected AirGap PBS and LTO tape in a vault. Even if your QNAP NAS or LAN is compromised, the offsite copy stays intact.

    Gateway Cloud is 150EUR excl. tax/month with 2 TB included (+15EUR excl. tax/TB extra) and a 99EUR excl. tax setup fee. You can add a weekly ClamAV antivirus scan option at 15EUR excl. tax/month on the Gateway buffer zone. The PBS redundancy level (Primary, AirGap, LTO) depends on the PBS plan you choose.

    Yes. Under managed offers, Nimbus can configure your QNAP directly (HBS 3 job, remote destination, schedule), set up the VPN, run the transfer and restore tests, and validate go-live.

    No. The Gateway is a backup ingestion gateway, not a cloud NAS or production storage. It receives HBS 3 jobs and protects them to PBS. It is not file sharing, not collaborative storage, and not application hosting.

    No. Access to the Gateway is exclusively over a dedicated VPN (WireGuard or OpenVPN). In client mode, your QNAP opens an outbound tunnel to Nimbus: no inbound port to open on your router or firewall. The Gateway never exposes its services in clear on the internet.

    Yes. A single Gateway ingests several sources at once — for example your QNAP NAS and a Synology NAS, plus Linux servers or Windows hosts — each with its own protocol, inside the dedicated VPN tunnel. Capacity is sized on the total working set. You share a single gateway and a single PBS chain for your whole fleet.

    Take your QNAP offsite with confidence

    We plug HBS 3 into the Gateway, protect to PBS and validate a restore. 15-minute tech call, no commitment.