4 ms·

I seem to have been an outlier, but 3-5 years ago I went all in on Ubiquiti, except for APs, about a year ago pulled it completely out, partly because of proble

I seem to have been an outlier, but 3-5 years ago I went all in on Ubiquiti, except for APs, about a year ago pulled it completely out, partly because of problems with updates: - One switch update enabled some sort of loop detection which broke the Google Wireless meshing with Ethernet backhaul, and their support people, after several attempts, proclaimed was not something that could be disabled. Fixed it by putting in a dumb Netgear switch that only connected the Google mesh nodes, but disappointing to find on a $400 "Prosumer" switch. - One set of camera updates left 4 of my 5 cameras unbootable and support was unable to provide a solution for. This was after their warranty period, so I have them sitting around because I can't quite bring myself to throw them away. I replaced the switch with a used Aruba PoE switch ($90), the cameras with a Montavue (VAR for HIKVision cameras), and BlueIris setup. It pained me because the Unifi Protect mobile app really was best in breed, but not too much because I frequently had issues with the cameras reliably booting, and would have to go through rebooting cameras for a few days after updates or a power loss. I'd recommend Ruckus R610 used gear for wireless, though for the last ~6 months the prices on them have doubled -- I got one 9 months ago for $150 landed, and now they all seem to be more like $300+. Fantastic APs though.

citizenpaul 5y ago
You went in backaswards lol. The APs are pretty much the only solid product they have. I say this having a full Unifi network myself
- dotBen 5y ago
  And HikVision cameras seem to have no end of security issues. Sharing this most recent one cos HN loves cited sources but there's a ton of independent issues https://www.forbes.com/sites/leemathews/2021/09/22/widely-used-hikvision-security-cameras-vulnerable-to-remote-hijacking/?sh=7eb9a2c72f31 https://www.forbes.com/sites/leemathews/2021/09/22/widely-us...
  - bradknowles 5y ago
    Sadly, both HikVision and Daihua have apparently produced hardware for the Chinese government to help them do facial recognition on the Uighur population, and otherwise commit atrocities against them. And both HikVision and Daihua have a large array of brand names that they sell under: See: https://ipvm.com/reports/hik-oems-dir https://ipvm.com/reports/hik-oems-dir and https://ipvm.com/reports/dahua-oem https://ipvm.com/reports/dahua-oem
    - citizenpaul 5y ago
      The crazy thing about this to me is that Chinese spy hardware is actually the best defense against the US Gov spyware if you live in the US. There is less reason to care if China is spying on you, they are not going to suddenly arrest you. The US governments will though.
  - Nextgrid 5y ago
    To be fair, is there a network camera that isn't complete garbage when it comes to security? I've just accepted that there isn't and always recommend having them on a separate VLAN segregated from the rest of the network and access is controlled by a bastion host which only allows trusted machines to connect.
adamcstephens 5y ago
I switched from Unifi APs to Ruckus gear, but will probably consider TP-Link EAP for my next upgrade due to price.
ComputerGuru 5y ago
You kind of did the very opposite of what you’re supposed to do. Used enterprise hardware for core infrastructure (Cisco/HP/Dell with SFP+ ports), pfSense or similar for a gateway/router, and UniFi just for the UAP access points, away from your core network.

citizenpaul 5y ago

You went in backaswards lol. The APs are pretty much the only solid product they have. I say this having a full Unifi network myself

dotBen 5y ago
And HikVision cameras seem to have no end of security issues. Sharing this most recent one cos HN loves cited sources but there's a ton of independent issues https://www.forbes.com/sites/leemathews/2021/09/22/widely-used-hikvision-security-cameras-vulnerable-to-remote-hijacking/?sh=7eb9a2c72f31 https://www.forbes.com/sites/leemathews/2021/09/22/widely-us...
- bradknowles 5y ago
  Sadly, both HikVision and Daihua have apparently produced hardware for the Chinese government to help them do facial recognition on the Uighur population, and otherwise commit atrocities against them. And both HikVision and Daihua have a large array of brand names that they sell under: See: https://ipvm.com/reports/hik-oems-dir https://ipvm.com/reports/hik-oems-dir and https://ipvm.com/reports/dahua-oem https://ipvm.com/reports/dahua-oem
  - citizenpaul 5y ago
    The crazy thing about this to me is that Chinese spy hardware is actually the best defense against the US Gov spyware if you live in the US. There is less reason to care if China is spying on you, they are not going to suddenly arrest you. The US governments will though.
- Nextgrid 5y ago
  To be fair, is there a network camera that isn't complete garbage when it comes to security? I've just accepted that there isn't and always recommend having them on a separate VLAN segregated from the rest of the network and access is controlled by a bastion host which only allows trusted machines to connect.

adamcstephens 5y ago

I switched from Unifi APs to Ruckus gear, but will probably consider TP-Link EAP for my next upgrade due to price.

ComputerGuru 5y ago

You kind of did the very opposite of what you’re supposed to do. Used enterprise hardware for core infrastructure (Cisco/HP/Dell with SFP+ ports), pfSense or similar for a gateway/router, and UniFi just for the UAP access points, away from your core network.