Live data from Hacker News

Ubiquiti: Enterprise NAS, Built on ZFS

blog.ui.com

321–330 of 376 posts

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#321

Ubiquiti is an interesting company. It seems to be well-managed https://krebsonsecurity.com/2015/08/tech-firm-ubiquiti-suffe... https://krebsonsecurity.com/2015/06/crooks-use-hacked-router... https://www.bankinfosecurity.com/ubiquiti-insider-hacker-sen... https://www.theverge.com/2021/3/31/22360409/ubiquiti-network... https://www.bankinfosecurity.com/ubiquiti-insider-hacker-sen... https://www.theregister.com/security…

2,-1,2

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#322

Earlier quoted context omitted.

OpenZFS released the zpool expansion as stable last year. Hopefully QNAP is charting a path to allow their users to migrate from their fork to OpenZFS, though of course these kinds of things take time to develop. I would be really worried if they are diverging further from OpenZFS rather than converging.

Last I looked at their releases of code, they had branched from ZFS before it became OpenZFS, and had a lot of proprietary extensions beyond just the reshaping (from memory, they implemented encryption differently, as one example, and I think they had one or two checksums that I assume were because something they shipped had hardware support for it?) so I wouldn't hold out hope that their goal is to rebase on OpenZFS…

Ah so the fork is permanent. How unfortunate, guess I need to avoid QNAP software entirely.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#324

Earlier quoted context omitted.

Companies are also much more inclined to spend money to solve a problem while hobbyists are much more likely to get enjoyment out of the process of building. I'm firmly in the latter category, having built a rather robust ZFS array on NixOS with a pretty gnarly NVMe cache hierarchy built on LVM. It was fun to do.

I don't have the NVMe cache but I too have quite a robost ZFS array on NixOS. I feel less guilty about running it now since it is powered almost exclusively off solar in my backyard :)

I get most of my electricity from solar farms through my local utility provider!

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#325
post #203

Earlier quoted context omitted.

How did you hide it so that the thieves didn't find it?

A 7U cabinet in an overhead space that is difficult to access. Installation and configuration were a bit of a headache but ended up being worth it. There was a NAS in the office and they stripped 7 drives, sleds and all, out of it. I'm guessing with such an obvious endpoint for the camera storage it never occurred to anyone there was a second box. I had something like this in mind when I wired the building. It seemed…

Cutting Starlink and stripping drives from a NAS? This seems like a pretty sophisticated operation, much more so than the usual copper thieves and the like. Do you have reason to believe your shop was specifically targeted?

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#326
post #308
post #305

Earlier quoted context omitted.

Interesting - but I just run it in docker. I also run opnsense, which is a FreeBSD, and I find it very high friction.

Long time ago I used these BSD-based appliances such as opnsense, beleiving I'll have it easier with their web interfaces than with editing config files in vi. In the long run, after investing some time into learning actual BSDs I find editing a few config files much more convenient than clicking around in web interfaces. OpenBSD is great for a router. https://www.openbsd.org/faq/pf/example1.html

[dead]

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#327

“Enterprise” First hand experience many times over: there is little more regrettable than placing Ubiquitis latest test-it-in-prod release in to an Enterprise setting.

https://app.opencve.io/cve/?vendor=ubiquiti Yeah, that's the kind of people you want to be running your company's storage appliance. Tons of those are pretty basic web security stuff. Nearly as bad as TP-Link, a bargain-basement brand. Compare and contrast: https://app.opencve.io/cve/?vendor=freenas https://app.opencve.io/cve/?q=vendor%3Aproxmox Proxmox's record in 2025 wasn't particularly great but it's a hell of a…

https://app.opencve.io/cve/?q=vendor%3Acisco

What about Cisco?

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#328

Ubiquiti bubble is so tiring, it is like AI bubble and Apple bubble. These people live within a bubble. Overpriced piece of hardware that you will never own because it runs proprietary firmware, you are forced to install apps to take full advantage from those devices.

I'm in the market for some wifi access points. If Ubiquiti is not so great can you name some alternatives?

Home: eero. they actually work really well.

Business: aruba instant-on. They cost more and updates are much less frequent. They are also more reliable and the support experience is far superior even though it is HP.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#330
post #263
post #203

Earlier quoted context omitted.

A 7U cabinet in an overhead space that is difficult to access. Installation and configuration were a bit of a headache but ended up being worth it. There was a NAS in the office and they stripped 7 drives, sleds and all, out of it. I'm guessing with such an obvious endpoint for the camera storage it never occurred to anyone there was a second box. I had something like this in mind when I wired the building. It seemed…

I've read through your story and I think you're on the right track with what you're doing. But, re: alarms, I'd like to add a suggestion: Indoor sirens. They can be intolerably, painfully loud for not very much money (because piezos are cheap and square waves are easy). Using a small, random mixture of them can let them beat at different frequencies and periods, which can make them very unpleasant to behold even with…

This seems like a good set of ideas if you can guarantee that you'll never have false alarms. I've had too many birds in warehouses and employees forgetting their codes to feel comfortable going full-hell-interior on alarm.
Post reply on HN