Synology · Hyper Backup

    Move your Synology NAS backups offsite

    Keep Hyper Backup exactly as it is. It writes, over a dedicated VPN, to the Nimbus Backup Gateway, which protects your data with Proxmox Backup Server (Primary PBS → AirGap → LTO). An offsite, immutable copy beyond the reach of ransomware.

    Hyper Backup rsync WebDAV / S3 Dedicated VPN Multi-PBS AirGap LTO

    Same Hyper Backup, a truly offsite target

    Synology Hyper Backup can write to remote destinations over rsync, WebDAV and S3 — all ingested by the Gateway. You don't replace your tool: you give it a hosted, supervised target protected by Nimbus, instead of (or alongside) a second NAS you'd have to manage yourself. Not sure which method fits? See the guide on choosing the right backup method.

    rsync WebDAV S3

    How it works, step by step

    Four steps, without changing your Synology habits.

    1

    Dedicated VPN

    We set up an encrypted tunnel (WireGuard or OpenVPN) between your site and the Gateway. Nothing is exposed in clear on the internet: client mode (your network initiates the VPN) or server mode (Nimbus initiates the VPN to you).

    2

    Hyper Backup points to the Gateway

    You keep Hyper Backup. The task writes to the Gateway over rsync, WebDAV or S3. No extra app to install on the NAS, no habit to change.

    3

    Nimbus replicates multi-PBS + AirGap

    The Gateway ingests the backup, then Nimbus protects it to a Primary PBS — and optionally a Secondary PBS, a disconnected AirGap PBS and LTO tape in a vault. Retention and immutability on the PBS side.

    4

    Restore test

    We validate a real restore from the Nimbus chain to guarantee your Synology data is recoverable, then sign off go-live.

    From your Synology to the air-gap

    A single backup can be replicated to several PBS, then archived to tape. You compose the chain based on your PBS plan.

    Synology NAS (Hyper Backup)
    Nimbus Backup Gateway
    Primary PBS
    AirGap PBSoptional
    LTO tape in vaultoptional

    Multi-PBS architectures (France, Europe, AirGap) are detailed on the PBS plans and AirGap PBS pages. Why two sites? See the field report on the OVH Strasbourg fire. To gauge how long the first Hyper Backup to the Gateway will take, estimate your backup window.

    Gateway Cloud pricing for Synology

    The simplest way to take a Synology offsite: the Gateway Cloud, hosted and supervised by Nimbus. Prices excl. tax.

    Recommended

    Gateway Cloud

    2 TB included

    150EURexcl. tax / month
    • Dedicated VM + dedicated VPN
    • 2 TB included, +15EUR excl. tax/TB
    • 200 Mbps in / up to 1 Gbps restore
    • 99EUR excl. tax setup
    Request a quote

    Antivirus scan option — 15EUR excl. tax/month

    Weekly ClamAV scan of your volume on the Gateway (the buffer zone / external NAS backup server), on top of PBS protection.

    The scan only covers what lands in the buffer zone: it does not prejudge the absence of infection on your LAN. If a backup is detected as infected, a full scan of your own environment is very strongly recommended on your side. Indicative analysis service, no guarantee.

    Need on-site ingestion (volumes or latency)? See the Appliance offers on the NAS offsite backup hub.

    Got a QNAP NAS or a Linux server to take offsite instead? See offsite backup for a QNAP NAS or offsite Linux server backup, or compare the paths in the protocols matrix. For the full plan range and offsite backup pricing, see the business page.

    We can configure your Synology for you

    Setup (99EUR excl. tax) includes full handling. Under managed offers, Nimbus configures your Synology directly:

    VPN configuration
    Hyper Backup task + destination
    Schedule setup
    Transfer tests
    Restore test
    Production validation

    You keep control of your NAS: we only touch the offsite backup task.

    What the Gateway is for

    One clear purpose: receiving and protecting your Synology backups, nothing else.

    Depositing and protecting your Synology backups

    Hyper Backup drops its jobs here, then protected to PBS.

    Optionally exporting them to the more advanced Nimbus Backup services

    Multi-PBS replication, AirGap PBS and LTO archiving, depending on your plan.

    It is not designed to host live production data, nor for collaborative uses (Synology Drive, file sharing, collaborative storage).

    Synology FAQ

    You keep using Hyper Backup as usual. It writes to the Nimbus Backup Gateway over a dedicated VPN tunnel (WireGuard or OpenVPN). The Gateway ingests the backup, then Nimbus replicates it to a Primary PBS, and optionally to an AirGap PBS and LTO tape. Nothing changes in your Synology backup habits.

    Synology Hyper Backup can write to remote targets over rsync, WebDAV and S3 — all ingested by the Gateway. The Gateway is technically a VM based on OpenMediaVault (Debian) that natively exposes these protocols. You set the remote destination in Hyper Backup; Nimbus handles the rest.

    Yes. Once the backup is ingested by the Gateway, Nimbus protects it on Proxmox Backup Server with retention and immutability, then optionally to a disconnected AirGap PBS and LTO tape in a vault. Even if your Synology NAS or LAN is compromised, the offsite copy stays intact.

    Gateway Cloud is 150EUR excl. tax/month with 2 TB included (+15EUR excl. tax/TB extra) and a 99EUR excl. tax setup fee. You can add a weekly ClamAV antivirus scan option at 15EUR excl. tax/month on the Gateway buffer zone. The PBS redundancy level (Primary, AirGap, LTO) depends on the PBS plan you choose.

    Yes. Under managed offers, Nimbus can configure your Synology directly (Hyper Backup task, remote destination, schedule), set up the VPN, run the transfer and restore tests, and validate go-live.

    No. The Gateway is a backup ingestion gateway, not a cloud NAS or production storage. It receives Hyper Backup jobs and protects them to PBS. It is not file sharing, not collaborative storage, and not application hosting.

    No. Access to the Gateway is exclusively over a dedicated VPN (WireGuard or OpenVPN). In client mode, your Synology opens an outbound tunnel to Nimbus: no inbound port to open on your router or firewall. The Gateway never exposes its services in clear on the internet.

    Yes. A single Gateway ingests several sources at once — for example your Synology NAS and a QNAP NAS, plus Linux servers or Windows hosts — each with its own protocol, inside the dedicated VPN tunnel. Capacity is sized on the total working set. You share a single gateway and a single PBS chain for your whole fleet.

    Take your Synology offsite with confidence

    We plug Hyper Backup into the Gateway, protect to PBS and validate a restore. 15-minute tech call, no commitment.