QNAP backup to S3-compatible storage

Your QNAP NAS holds the data that really matters, but a NAS on its own is not a backup: a fire, theft, ransomware or a double disk failure can take it all. With OtterStorage you add a real offsite copy, S3 compatible, directly from HBS 3 (Hybrid Backup Sync) and with transparent pricing.

The problem

Relying solely on the NAS, even with RAID, leaves a single point of failure. RAID protects against a single disk failure, but not against:

• Physical disasters (fire, flood, theft) that affect the entire unit.
• Ransomware or accidental deletions that spread to all mounted volumes.
• Multiple hardware failures or corruption of the NAS itself.

The 3-2-1 rule sums it up well: 3 copies of the data, on 2 different types of media, with at least 1 copy offsite. That offsite copy is exactly the piece that's usually missing, and the one OtterStorage covers.

The OtterStorage solution

OtterStorage is object storage compatible with the S3 API, so QNAP treats it as just another S3 destination. You configure it once in HBS 3 and your copies leave the NAS for the cloud automatically. The advantages over other S3 destinations:

• No charges for requests or deletes. You pay for what you store; PUT, GET, LIST and DELETE operations are not billed. Incremental backups make a huge number of requests, so this matters.
• Real immutability with Object Lock (OtterVault) and bucket-level Legal Hold: anti-ransomware and anti-delete protection.
• Fixed, predictable endpoint and region, with no hidden egress in the fine print.

If you want to understand the full backup strategy, take a look at our backups guide.

How to set it up

The integration is done with HBS 3 (Hybrid Backup Sync), the official backup app for QTS/QuTS hero. The flow is: create a Storage Space pointing to OtterStorage and then create a Backup or Sync job to that space.

1. Gather your OtterStorage credentials

From the OtterStorage panel, create a bucket and generate a key pair (access key + secret key) associated with that bucket. You'll need these values:

Endpoint (Service URL): https://es-mad-1.s3.otterstorage.io
Región:                 eu-mad
Bucket:                 qnap-backup
Access Key:             <tu-access-key>
Secret Key:            <tu-secret-key>

Check the documentation if you need the step-by-step for creating buckets and keys.

2. Install and open HBS 3

On your QNAP NAS, open the App Center, install (or update) Hybrid Backup Sync and open it.

3. Create an S3 Compatible Storage Space

• Go to Services → Create → Create storage space (Storage Space).
• In the list of providers choose S3 Compatible (not AWS S3 directly).
• Fill in the fields with your OtterStorage values:

Server Address (Endpoint): https://es-mad-1.s3.otterstorage.io
Region:                    eu-mad
Access Key:                <tu-access-key>
Secret Key:               <tu-secret-key>
Bucket:                    qnap-backup
Signature Version:         V4

• Keep HTTPS enabled (port 443). The endpoint already uses TLS.
• If it offers a choice between virtual-hosted or path-style URL formats, OtterStorage supports both; leave the default value.
• Click Test to validate the connection and save the space.

4. Create a Backup or Sync job

With the space created, go back to Services and choose according to your use case:

• Backup: one-way copy with versioning, ideal for 3-2-1 protection. Select the source shared folders and, as the destination, the OtterStorage Storage Space.
• Sync (one-way or two-way): if what you want is to replicate/mirror data to the cloud.

For offsite copies we recommend a Backup job.

5. Enable QuDedup, encryption and scheduling

• QuDedup: in the job options, enable source-side deduplication. QNAP deduplicates and compresses the data before uploading it, so you reduce the space consumed in OtterStorage and the upload traffic.
• Encryption: enable client-side encryption so that your data travels and is stored encrypted with your own password. Keep that password in a safe place: without it you won't be able to restore.
• Scheduling: define the frequency (for example, daily overnight) and, if you wish, a version-based retention policy. Since we don't charge for requests or deletes, you can schedule frequent backups with no cost penalty.

6. (Optional) Immutability with Object Lock

To reinforce anti-ransomware protection, create the bucket with Object Lock (OtterVault) enabled and apply a retention policy or a bucket-level Legal Hold. That way, not even compromised credentials will be able to delete or overwrite the copies within the retention period. You'll find the details in the documentation.

Benefits

• A real offsite copy: you close the 3-2-1 rule by getting a copy out of the NAS without managing another physical location.
• No charges for requests or deletes: HBS 3 incrementals make many operations; with OtterStorage you only pay for storage.
• Immutability with Object Lock and Legal Hold: your copies are protected against ransomware and deletions, accidental or malicious.
• Less space and less traffic thanks to QuDedup and source-side compression.
• End-to-end encryption under your control, so no one else can read your data.
• Compatible with your usual QNAP: you use HBS 3, the official tool, with no extra software or changes to your workflow.