Hacker News new | ask | show | jobs
by c0nsumer 1488 days ago
Stupid bugs caused me to move away from them, conveniently only days before the breach became public.

Bug #1 was when they stopped supporting 32-character SSIDs, so my main network called "Smart Meter Surveillance Network" suddenly was no longer editable. Switching routing platforms is easier than setting up all my devices again.

Bug #2 was the one I wrote up here on Reddit (https://www.reddit.com/r/UNIFI/comments/ghs4bg/arp_for_clien...), which was where ARPing for a client on a meshed wireless AP, from the wired network, would fail. If the client was on a non-meshed AP, it worked.

I expect better from my network, so I dumped Unifi and went to OPNsense on a fanless PC.

1 comments

> I dumped Unifi and went to OPNsense on a fanless PC

I'm curious for solutions to:

- cheap(ish) rackmount fanless switches or routers with SFP+

- cheap(ish) rackmount PoE

- cheap(ish) rackmount low-power servers

What do you use?

I don't care about rackmount, personally. I just set things on a wire bakers/food service rack, like one of these: https://www.homedepot.com/p/HDX-Black-4-Tier-Metal-Wire-Shel...

But here's my setup in a nutshell:

- Motorola MB7612 Cable Modem

- Protectli FW4B silent PC as router/gateway

- Synology DS1019+ for storage, Plex, and Pi-hole via Docker

- 2x Rucuks R610 APs running Unleashed firware (off-lease eBay purchases, enterprise grade APs, about $150/ea, both wired/non-mesh)

- Brocade ICX6430-C12 Switch (4x 802.11at PoE, handles the APs, another eBay special, cost around $90)

This is working well for me, and unlike the UniFi stuff I can now pretty easily swap out any piece of it with another brand of the same function and things will be fine. The single ecosystem of Unifi always bothered me a bit.

If I want a new VLAN (or special WLAN) it's a little harder than on UniFi, but it's really just setting it up on OPNsense, defining it on the requisite ports on the switch, and turning up the new SSID (if needed).

I also don't miss Unifi's single pane of glass view either. All the shiny threat stuff isn't particularly actionable, and there's a bunch of gaps (IIRC like how it'd wouldn't have usable timestamps for some things) so I was never able to use it to make decisions.

I run the Synology with a LACP link; that's plenty fast as its more a storage/backup box than anything that needs to be performant. Speeding all that up would just be a matter of replacing the switch and adding a card into the Synology, but I don't need that for now. (I'd probably get a new NAS before that.)