Live data from Hacker News

UniFi Express

ui.com

281–290 of 296 posts

Re: UniFi Express

#281

Earlier quoted context omitted.

What is your house built of? In the UK, we’ve got houses with brick walls everywhere - it’s killer for signal.

I live in a wooden house, which is kind of ideal yes. You say brick, which isn't actually that bad, if you reference the classic NIST report [1]. And even in a brick house a lot of the interior walls are still just plywood or drywall, even in the UK AFAIK. What is interesting though is that OP said it is sufficient with one AP per floor plus one outside. So apparently propagation within one floor is fine, but between…

I think it depends largely on age - “new builds” (1980s onwards) often have a brick partition wall down the middle and the rest plaster/wood stud. The last couple of houses (significantly older) I’ve lived in have been pretty much all brick walls.

We’ve got 3 UniFi APs downstairs here, 2 up. There are still things on the periphery that only just cling on, and when you’ve got stuff like that it takes a lot of airtime.

Re: UniFi Express

#282
post #198

Earlier quoted context omitted.

If you need 6 or more unifi devices, that's quite advanced. And quite a large area. If you have such a big house and also need WiFi for your fancy lawn mower, I can't shed a tear for the 149 USD budget unifi decice not being adequate for you.

2 floor house + Outside is immediately 3 APs. You'll also need at least one PoE switch to power them. That's 4 devices already, without adding anything else like security cameras or similar.

Most people don't have any need for a PoE managed switch. You just get a basic PoE switch if you have APs to power, it's cheaper and simpler.

Re: UniFi Express

#283
post #46

Earlier quoted context omitted.

The dream router can’t route faster than 500mbit, which is a huge limitation. This claims to do 1gbit routing, so pairing with a switch gives you a dream router that can actually route at 1gbit.

With IDS and IPS turned off I can get routing at over 800Mbit consistently with my UDR. It has the typical foibles of UniFi routing so I'm replacing it, but I haven't had too many issues with it tapping out the Gb port (when my cable line allows). I wouldn't even try to add any fancy features to it and expect it to hold up though; it just doesn't have the power. Oh, and one of the foibles is that if I do hit the rout…

Not sure what you settings you used, but I never was able to achieve above ~500Mbit even with everything disabled.

The other thing I noticed: you literally cannot access or use the management UI when you're saturating the connection. It just straight up will not load.

Re: UniFi Express

#284
post #250

Always been intrigued by UniFi stuff, is it still the case you need an app to set up and configure their devices? I don't have an app store, and they don't publish their app elsewhere, so this was always a non-starter for me, and a weird design choice at that.

You can deploy instances of their config software at will. There are docker containers out there for you. This device runs UniFi Network so it can host the configuration. There is the cloudkey that can host the config There are routers that host the config in their product line. I don’t think it’s ever been the case that you “need” the app.

Step 9 is install an app from an app store

https://dl.ui.com/qig/u6+/#A

There is no other instruction for people without an app store. Not even in their help article.

https://help.ui.com/hc/en-us/articles/12594679474071-Standal...

> Log in to the UniFi Mobile App (iOS / Android).

Why do I need to log in to an app to set up a LAN device? It's complete nonsense and makes me ultimately distrust Unifi.

Re: UniFi Express

#285

I am quite turned off after a short honeymoon with unifi. They push setup via their mobile apps to the point that connecting to a dreammachine and entering its ip adress just shows a download link to the app store. The app could not connect without any hint of reason so i just consider this bricket now. Even before there were many red flags such as login flows to a local device going via .com domains. Completely conf…

I refuse to buy any device that requires an "app" to configure. It's clear the developers care more about your data than the product at that point.

Re: UniFi Express

#286
post #42
post #21

Weird that the ethernet ports are only 1GbE, that discounts everyone with a >1Gbit internet connection

This is to my massive irritation. I don't want to use the router built into my cable modem, but my Internet is 1.2gb and I feel like I'm throwing money away. Routers with 2.5gbe uplink are hard to find and even more expensive.

Just curious what you (think) you need >1Gb WAN bandwidth for.

Re: UniFi Express

#287

This is the Unifi device hackers can recommend to their friends and family, but not actually use themselves because they already have the more sophisticated set ups.

The reason I "hacker" don't use Unifi is because it's not trusted. It's a closed source device which requires proprietary apps to use and collects data on your network and connected devices without explicit consent - colloquially known as a "backdoor".

https://community.ui.com/questions/UI-official-urgent-please...

Re: UniFi Express

#288
post #189

Earlier quoted context omitted.

That’s simply not true. I can tell you for a fact basically every Fortune 500 is doing SSL inspection on at least a portion of their traffic. As for things like HIPPA - that’s why you do URL categorization and bypass those destinations.

I can tell you for a fact, having worked at them in a senior executive technical role with responsibility for security, that at least the top banks do not do this, and definitely not tech giants like Amazon. I am certain others do - but this doesn’t make it a good idea. There are a lot of bone headed things that networking hardware companies convince deep pocketed customers to do that they shouldn’t. Creating the abi…

Several top banks ($20b revenue +) I've contracted at internationally do MITM most of their TLS traffic to the internet, either via transparent gateway or http proxy. As do top manufacturers, insurance companies, government agencies, etc. It is probably 60/40 MITM vs not in my experience. It's a pain.

Re: UniFi Express

#289

Earlier quoted context omitted.

With IDS and IPS turned off I can get routing at over 800Mbit consistently with my UDR. It has the typical foibles of UniFi routing so I'm replacing it, but I haven't had too many issues with it tapping out the Gb port (when my cable line allows). I wouldn't even try to add any fancy features to it and expect it to hold up though; it just doesn't have the power. Oh, and one of the foibles is that if I do hit the rout…

Not sure what you settings you used, but I never was able to achieve above ~500Mbit even with everything disabled. The other thing I noticed: you literally cannot access or use the management UI when you're saturating the connection. It just straight up will not load.

I'm pretty light on settings, but I don't remember offhand.

I agree on the UI. Now that we are running the Protect app on an iPad all the time (my child is special needs so we use the cameras to keep an eye on everything) it has throttled pretty hard. Maybe 400Mbit now? I honestly hadn't tested it in a while, and haven't had the time to do in depth. It's absolutely slower now.

I have a Mikrotik CCR2004-1G-2XS-PCIE that will be my new router when I get around to it, and the UDR will be an AP and run the Network and Protect apps. We've been seeing weird issues ever since leaning on it harder, so I'm going to see how it does just being a Controller and AP.

Re: UniFi Express

#290

Earlier quoted context omitted.

gbit speeds are usually good enough for the majority of applications. even your 6e ap will not archive more than a gbit in most real world scenarios (not testing). the tables turn slowly, but the mass market for 10gig is just not here yet besides all-10gig soho switches beeing available for some time now. major point: 10gig uses vastly more power than 1gig, making integration (esp. in laptops) challenging. other poin…

> even your 6e ap will not archive more than a gbit in most real world scenarios au contraire; even for wifi 5 aps like original Turris Omnia (3x3 MIMO, 80 MHz) or Ubiquiti nanoHD (4x4 MIMO, 80 MHz), the gigabit uplink was the bottleneck. > major point: 10gig uses vastly more power than 1gig, making integration (esp. in laptops) challenging. Only 10GBase-T. For a networking equipment, you would want SFP+ anyway. Lapt…

> 2.5GBase-T is still good enough for laptops, and does not represent integration challenges.

it's also good enough for most soho infrastructure needs

Post reply on HN