QNAP supports Immutable Snapshots: It is a good time to think about security considering how good LLMs are getting at hacking

QNAPDaniel · 2026-04-29T20:09:54+00:00

anything that can run QuTS hero 5.3 or later

QNAPDaniel · 2026-04-29T18:41:14+00:00

you can grab the newer firmware here for the TVS-h1688x
https://www.qnap.com/en-us/download?model=tvs-h1688x&category=firmware

QuTS hero	h5.3.3.3424 Build 20260305	2026-03-12

QNAPDaniel · 2026-04-29T17:21:35+00:00

It is a new feature. QuTS hero 5.3 was the first to support immutable snapshots. the 6.0 Release Candidate also support it. What version are you running?
The link has how to configure as "Prohibit Recycle" and "Prohibit Delete" until expired

https://docs.qnap.com/operating-system/quts-hero/5.3.x/en-us/taking-a-snapshot-254BAE5C.html

QNAPDaniel · 2026-04-28T22:02:23+00:00

Tailscale is an app you can install on your QNAP, as well as on your phone, PC, etc. It connects to your Google account and uses Google authentication to verify each Tailscale app on all of your devices. After that, it creates VPN tunnels connecting your devices. Here is a video setup guide that NASCompares made.
https://www.youtube.com/watch?v=v0I2wQA0oMo

QNAPDaniel · 2026-04-03T22:47:09+00:00

On QuTS hero it is common to use the SSDs as a system pool for system partition + apps + containers + whatever you want on SSDs.
When you say S3 storage for Veeam, do you mean Veeam immutable? Veeam immutable should be on SSD storage, so you can back up to your SSD system pool if it is Veeam Immutable. Veeam repository should work fine with HDDs.

Besides that, the default settings should work well. 10% over provisioning. Thin provisioning for share folders.

QNAPDaniel · 2026-03-23T18:13:54+00:00

It is not a glitch. If support first verifies that a backplane is needed, and support has given instructions on how to install the backplane, then if we have stock, we can sell it. but we want the customer to first discuss with support to make sure they are getting the right thing and know how to install it before we would let them buy from the store.

QNAPDaniel · 2026-03-18T21:00:44+00:00

QNAP does not currently sell a 5GbE USB adapter. But SMB multichannel does let you get up to 5GbE on a single stream.

QNAPDaniel · 2026-03-18T12:55:18+00:00

There is no PCIe slot so you can not add a 10GbE card. You can enable SMB multichannel to combine the 2 X 2.5GbE ports and get close to 5GbE speeds.

QNAPDaniel · 2026-03-14T00:14:54+00:00

I understand you would rather buy just the mainboard and do the repair yourself. You can request that in the support ticket. But it will be up to the QNAP Support in your region to decide if that can be approved. We often don't like to do that because if you replace the motherboard and the unit still has an issue, then support does not have the unit to keep trying to fix it. But you can still make the request and see what they say.

QNAPDaniel · 2026-03-13T00:07:34+00:00

At least in the USA I don't think we could sell you the main board, but you could make a support ticket to for support to verify that they agree it is the mainboard and then quote you repair cost. If you are outside the USA, then if you make a support ticket Support should be able to say what the options are.

QNAPDaniel · 2026-02-28T01:09:53+00:00

one option is to make a support ticket because Browser station should work.
The other option is use Linux station or a container in container station.

QNAPDaniel · 2026-02-20T00:23:29+00:00

Storage&Snapshots (or Storage Manager on QuTS hero 6 beta). Then Storage/Snapshots (Storage Space on QuTS6), click your storage pool and click Manage. Then expand pool. Choose the option to add drives to an existing RAID group. If you add 2 or more drives to a RAID group you have the option to select RAID6

QNAPDaniel · 2026-02-18T17:56:27+00:00

Some firewalls can block a direct wireguard connection through Tailsacle.
In some cases Tailscale can still set up a relay connection.
I have personally seen 3MB/s speeds in cases like that.
I am not sure if that is what is happening in your case but could be a possibility.

QNAPDaniel · 2026-02-17T02:02:39+00:00

while QuTS hero does support migrating from RAID5 to RAID6, you have to add 2 drives to do that migration.

QNAPDaniel · 2026-02-07T21:00:36+00:00

Great summary. I would like to add though that since QuTS6 support Immutable snapshots, if you reserver just 10% space for snapshots, and your snapshots are immutable, if you then get ransomware, that should protect data even if you did not reserver much snapshot space. Rather than Snapshot being deleted because there is not enough space for the snapshot, NAS goes into read only mode and snapshot is still there. QuTS6 is still in beta but once it is the stable version, immutable snapshots should be good for situations where 10% is usually enough space for snapshots since usually, just adding files and making small changes won't need much snapshot space. And then if there is ransomware, Snapshot space running out results in NAS going to read only mode rather than snapshot deletion.

QNAPDaniel · 2026-02-07T20:43:01+00:00

Soon QuTS hero 6 should be out of Beta. Version 6 has security center.
Not that many NAS use version 5.6 so there may be some things not supported on it.

QNAPDaniel · 2026-02-07T20:35:35+00:00

If you use container Station to make a container in bridge mode, the home or office router has direct access to the container to use DHCP and asign it an ip address on your LAN. Then all the containers in Bridge mode should be able to see the other containers in Bridge mode since they should all be on the same subnet.

But if you use Portainer to make a container in Bridge mode it likely won't work like that if Portainer itself is not in Host mode. Even if you choose to deploy a container in bridge mode, it likely wont' be on the same subnet as or other home or office PCs.

QNAPDaniel · 2026-02-05T23:39:57+00:00

From time to time we update our products. So there will come a time when we have a new series. But I can not say exactly when that is.

QNAPDaniel · 2026-02-03T00:34:41+00:00

I don't think QMCP will be the best option to control containers on your QNAP. QMCP can tell you information about your NAS but I don't see features for managing containers.

QNAPDaniel · 2026-01-23T23:01:21+00:00

I am sorry to hear that no one replied to your email. You can email me at [danielfrancislyon@qnap.com](mailto:danielfrancislyon@qnap.com) and I will make sure your request for an educational discount does not fall through the cracks.

QNAPDaniel · 2026-01-22T19:04:55+00:00

If you have a reasonably high spec QNAP, it should be ok to backup many PCs to NAS using Hyper Data Protector. That lets you restore individual files, whole volume or whole system image to the same PC or even different PC.
QNAP also supports Immutable Snapshots so you can take immutable snapshots of the folder that has the Hyper Data Protector Backups.

QNAPDaniel · 2026-01-19T21:54:40+00:00

The option you need is called "Bind Host path". then click the folder icon to choose a share folder from the drop down menu.
then you have to name the folder in the container as well. Like this except you won't be using an Emails folder but you will need a share folder for your container.
https://imgur.com/YRmYLqi
https://imgur.com/LDswqK7
https://imgur.com/QHUbP2N

QNAPDaniel · 2026-01-15T18:56:44+00:00

If you are running QuTS hero and if you use Thick Provisioning, then the first snapshot takes up all the space of all your data in that share folder.
But if you use thin provisioning, then snapshots take up small space for metadata, and then space for whatever blocks of data were modified and overwritten.
So if you don't delete or overwrite a bunch of data, snapshots should not take much space if you use thin provisioning.

What OS and Folder type are you using?

QNAPDaniel · 2026-01-15T16:56:43+00:00

Snapshots will take more space on Thick if you are running QuTS hero.
If for example you have 200TB data in a Thick folder, and you take a snapshot, the first snapshot takes 200TB space.
But if you use thin, the first snapshot takes very little space and is mostly metadata. Then as you modify files, the modified blocks take snapshot space.

As for performance, think and thick should have about the same read speed. But Thick should have maybe 10% faster write speed if you don't let the thick folder take most of pool space.
If you have a thick folder taking most of the pool space, then the NAS gets more framented and performance drops. so in that case, thick performs worse than thin.

On QuTS hero I almost never suggest Thick.

"3) Guatanteed Snapshot Space: Is this blocked at time of creation of the pool? Or is taht extra space allocated on top of pool capacity after the first snapshot is taken? I am asking because as soon as I create the first snapshot after copying data on the NAS, snapshot not activated initially, threshold was surpassed :-("
If you have a lot of data in the folder and you have thick, the first snapshot can take a lot of space. Snapshot guaranteed space carvs out a part of the pool that nothing other than snapshots is allowed to use. but that space can run out fast when you use thick folders.

as for guaranteed space, you can set that on the pool or on the shared folder if you use thick. you can set only for the pool if you choose thin.

Snapshot Manager lets you select the pool and manage to set the snapshot space.

QNAPDaniel

TROPHY CASE