Hey Eric,
Sorry, your messages were caught in the moderation queue for a few days.
Excited to hear you'll be working on this. Indeed, it may be easier now that user NS is not needed -- as long as Synology lets apps get root.
I notice that some Synologies have two LAN ports. I'm not sure if this is relevant in the context of Synology, but I've always thought that if Sandstorm were to sell a Sandstorm device, it should have two LAN ports and instruct the user to place it between their internet router and their computer. This would allow it to hijack DNS to make it really easy to get to the initial configuration interface by web browser, and to work around lack of hairpin routing in many routers once you've set up sandcats.
But that's probably more of an idea for a dedicated Sandstorm box, not a Synology... oh well.
-Kenton