4 ms·
I love ubiquiti. My entire home network runs on their gear, with self-hosted management. I have infra deployed across the country in a remote office that runs t
by whalesalad 3y ago
I love ubiquiti. My entire home network runs on their gear, with self-hosted management. I have infra deployed across the country in a remote office that runs their gear, with a cloud key. It's solid stuff all around.
Don’t use any of their unifi routers tho, can’t speak to that. I have an ER-4 at home and the remote office has a pfsense 1U.
- boringuser2 3y agoIt's not a particularly good setup, but it's also not a particularly bad one. Actual prosumer+ products like Sophos XG (free), Untangle Home, *sense blow it out of the water, though, by giving actual offerings for features where Unifi gives a diet version. That all being said, it's definitely a cut above most consumer networking setups, maybe with the exception of Asus -- they do a pretty solid job.
- dixie_land 3y agoI feel they all but abandoned the EdgeRouter line, which hits the sweet spot of prosumer for me.
- Spivak 3y agoThe part that's missing for me is what hardware do I put it on?
- spacebacon 3y agoSame here, I love the UDM Pro SE. Blocking application layer stuff like QUIC is just a couple clicks away. It has decent intrusion detection and response alongside other easy to configure firewall settings.
- cced 3y agoWhy and how do you block application layer stuff like quic?
- jjoonathan 3y agoTiny network tyrants gotta flex somehow.
- spacebacon 3y agoSure, large network tyrants really don’t like the tiny network tyrants that prefer their network traffic to be fully visible.
- spacebacon 3y agoWhen UDM shows you QUIC eats up the majority of your bandwidth you may decide to click to add a rule to block it. You may see a large reduction in overall daily bandwidth as a result. If you watch YouTube you are using QUIC. Certain QUIC vulnerabilities are a 3 or 4 packet compromise.
- cced 3y agoI’m Guessing the sites will then fallback to another protocol correct?
- spacebacon 3y agoYes plain UDP or TCP.
- srj 3y agoYoutube will fall back to TCP. If the bandwidth utilization actually did drop it's probably because the stream quality throttled down. What do you mean by "QUIC vulnerabilities are a 3 or 4 packet compromise"?
- spacebacon 3y agoCVE-2023-39322 for example QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. I like Google Dart and other Google products but I see too many potential issues with QUIC. From my personal experience it has behaved suspiciously on my network.
- gotbeans 3y agoUdm pro SE is the best thing I bought. 10g, protect for camera selfhosting which works great, new updates made wireguard first class citizen, and if you want anything more complicated it's just a dumb debian underneath (which I do a bunch of stuff). I'm reallt happy with it.
- artificialLimbs 3y ago>>> and if you want anything more complicated it's just a dumb debian underneath Are you doing persistence (keep settings/data after reboot) with Unifi OS 3?
- deleted 3y ago[deleted]
- xvector 3y agoI kinda hate Ubiquiti routers. My UDM Pro felt like a total scam, with the IDS/IPS being nowhere close to advertised. They promised but never introduced WireGuard. I also experienced strange bugs in the stack. I eventually moved to OPNSense but the router I bought from them died. The interface was too cumbersome anyways, from the perspective of someone that just wanted WireGuard server+client, IPS/IDS, and VLAN. I finally moved to Firewalla and it is lightyears ahead of Ubiquiti, OPNSense, and any other solution I've tried from a power user perspective. I use this with Ubiquiti APs connected to my Pi running the Ubiquiti management software, which works out quite well. The Firewalla is far easier to use, has a way better UX, and covers 95% of the power user tasks.
- ladzoppelin 3y agoDo you think Ubiquiti APs are still good, I have not used them since 2018?
- whalesalad 3y agoLove their AP’s.
- yftsui 3y agoI regret my time spent on Ubiquiti devices at home use, in the past five years my view has changed from very positive to entirely negative. They are getting worse instead of better, I am seriously considering getting rid of all Ubiquiti devices from my home, Ubiquiti software updates lack testing and break things often, I simply don’t have time to baby sit them anymore. Their iOS app has become harder to navigate with feature loss instead of improvement as well. My Ubiquiti setup (one LR and one lite) was done back in 2018, devices on the network is roughly the same in the past 5 years, only phones laptops changed due to upgrades. Since 2020/21 their firmware updates started dropping support of old device randomly, or support become worse (devices get disconnected frequently or full bar but not responsive). First was my Kindle 3G keyboard, then Fitbit Aria Scale, then quite a few smart switches/plugs. I literally scratched my head to understand the settings, but they just won’t connect to the Ubiquiti AP. I had to buy an Eero as backup and continuously migrate these older devices as they are unable to connect. Their most recent firmware update last week kicked my Sony TV off the network(bought in 2018), I have no idea what they are thinking and wasted 1 hour rebooting and blaming Sony, then found it connect to the Eero AP just fine.
- stephen_g 3y agoI’ve definitely gone off their routers since they basically abandoned the EdgeRouter line. I still use their APs for now, sometimes the switches, they’re all pretty solid, but I’ve been gradually getting more and more negative about Ubiquiti in general…
- walterbell 3y agoER3-Lite can run OpenBSD.
- tw04 3y agoUnless it supports hardware offloading you’d be better off tossing it in the trash. The thing can only push ~100mbit without it. https://help.ui.com/hc/en-us/articles/205204070-EdgeMAX-How-do-I-disable-IP-offload-for-hardware-acceleration- https://help.ui.com/hc/en-us/articles/205204070-EdgeMAX-How-...