RoyalShield

Global Internet Freedom Alliance

2026-08 Sing-box is live — scan to connect. Update your router firmware. Free 24-hour trial, 30 days per referral, 30% off 3-year plans.
2026-08 We are now RoyalShield (formerly ViPiN). Your account, servers, pricing and setup are unchanged — no action needed. The name shown on payment pages and in emails is updated accordingly.
2026-08 Hong Kong is offline due to force majeure. Malaysia, the Philippines, Indonesia and Thailand are now available — please switch to a Southeast Asia route. Account and plan unaffected.
2026-08 Private network is now live: no server picking, no config changes — your devices connect directly for a faster, steadier link. We recommend it as your first choice; find it under "Private" in the top nav.
2026-09 New router firmware is out — please update. OpenVPN is back: download a profile, import it, and connect in one tap.
2026-09 Every page now ends with related guides — usage basics, common problems and fixes, and typical scenarios — to help you understand the VPN system and use it more smoothly.
HomeRouterPrivateCiscoOpenVPNProxySing-boxContact

Related guides

Routing a Synology or QNAP NAS

Updated 2026-09-05

The NAS is the device at home that needs the route most and gets the least attention: the downloader reaches overseas sources, Docker pulls images, Cloud Sync talks to overseas drives, Plex fetches metadata. A NAS cannot run Hiddify, but Synology and QNAP both ship an OpenVPN client — download one .ovpn from this site’s OpenVPN page, import it, and it reconnects at every boot. This guide covers where to import on each brand, the crucial “use default gateway” option, what to do after a password change, and why reaching the NAS from outside is a different job that belongs to the private network.

Two different jobs

Making the NAS itself take the route (downloads, image pulls, syncing overseas drives): OpenVPN, covered here.

Reaching the NAS from outside (opening shares on a trip, watching cameras): the private network (Tailscale), which puts the NAS and your phone in one private network — see the home-camera guide. OpenVPN cannot do this; it connects the NAS to our routes, not you to your home.

Synology

  1. Log in to the site, click a region flag on the OpenVPN page and download that region’s .ovpn file.
  2. Control Panel → Network → Network Interface → Create → Create VPN profile → OpenVPN (via importing a .ovpn file); enter your site email and password.
  3. “Use default gateway on remote network”: tick it so all outbound NAS traffic takes the route (downloads, Docker and Cloud Sync all benefit); untick it and only the tunnel exists while outbound traffic stays local. Nearly every scenario wants it ticked.
  4. Tick “Reconnect when the VPN connection is lost” so it recovers after reboots and route hiccups. Connect, then test a pull from a package.

QNAP

  1. Download the .ovpn the same way.
  2. QVPN Service → VPN Client → Add → OpenVPN, import the file, enter the credentials.
  3. In the connection settings tick “Use VPN as the NAS default gateway” and auto-reconnect, then connect.

What takes the route and what does not

  • Takes the route: Download Station BT and HTTP tasks, Docker image pulls, Cloud Sync to Google Drive / Dropbox / OneDrive, Plex and Emby metadata, Package Center updates.
  • Does not: your own LAN access to the NAS — it never leaves the LAN and is unaffected.
  • Inside China, wanting Chinese sites direct: there is no split-routing script on a NAS, so all outbound traffic takes the route once connected. For slow Chinese download sources, use domestic mirror addresses in the tasks, or connect only when needed.

Things to know

  • The profile carries your credentials, and the password stored on the NAS stops working after a password change: download the .ovpn again and replace it, or edit only the password in the VPN profile.
  • At account expiry the NAS disconnects; after renewing it reconnects on its own with the same profile.
  • The NAS counts as one device within the 5-device allowance shared with your other devices.
  • The route uses UDP; a NAS on home broadband almost never meets UDP restrictions.

FAQ

With the default gateway ticked, can the LAN still reach the NAS?

Yes. LAN traffic does not pass through the gateway; shares, Plex playback and the admin page are unaffected.

Plex remote playback got slower after routing the NAS?

Remote playback uses the NAS’s outbound path, which now detours through the route. For remote playback, reach the NAS over the private network instead, or connect OpenVPN only when downloading.

Can only Download Station use the route?

Synology and QNAP have no per-application routing. For fine control, run a download container with its own OpenVPN in Docker (for example qbittorrent with gluetun) so only it takes the route.

What about a Linux-based NAS (TrueNAS, Unraid)?

Treat it as Linux: the openvpn package with the profile in /etc/openvpn/client/ — see the Linux server guide.

Related pages

  • OpenVPN page: client downloads and profiles →
  • How to use OpenVPN and when to choose it →
  • Watching home cameras and a NAS in China from abroad →
  • Routing a Linux server and command-line tools →
  • Tencent Video or iQIYI Blocked Abroad? Fix It in 5 Steps →
  • How to Choose a China VPN →
  • Does Cisco AnyConnect Work in China? →
  • Choosing a VPN Router →
  • How to Import a sing-box Subscription →
  • China VPN for Students Abroad →
  • What a Web Proxy Is and When to Use One →
  • Free or Paid China VPN? →
  • What the Private Network (Tailscale) Is →
  • What the Router Firmware Does →
  • How to Reach Us and Never Lose Contact →
  • How We Differ from Other VPNs →
  • How to Recognise a Risky VPN App →
  • Which Connection Method to Choose →
  • Which Region Is Fastest from Inside China →
  • For the TV and the Grandparents at Home →
  • What to Do When iOS Cannot Install an App →
  • Cannot Connect, Slow, or Dropping: What to Check →
  • Setting Up for Business Trips and Travel →
  • On a Company Laptop: No Admin Rights, Corporate VPN Already On →
  • Many Devices, One Setup, No Redo on a New Phone →

IP Geolocation by DB-IP

AboutGuidesContact

© 2007–2026RoyalShield