Live data from Hacker News

Ubiquiti: Enterprise NAS, Built on ZFS

blog.ui.com

141–150 of 376 posts

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#141

I'm glad to see UBNT in this space. I've always used ZFS because it's vastly superior to other options. When I see storage companies building without fault tolerance, or without a merkle tree (so that you can backup deltas efficiently without having to recompute them) it's a sign their marketing team has more influence over the company than their engineers. Sadly, the few ZFS COTS options have been somewhat underpowe…

The same is true for our AI processing on the cameras. This is entirely local and private. You can even air gap the UniFi Protect system from the Internet and it'll operate fine.

> This is entirely local and private. You can even air gap the UniFi Protect system from the Internet and it'll operate fine.

One week ago 3 guys broke into my shop while I was traveling. They had sense enough to power down the starlink that was providing internet which would have taken out all of the remote camera options.

They did not realize that almost everything they were doing was being recorded via the unifi system. In the end about the only thing of value left in the building was the hard drive with all of their pictures on it.

The police have used the footage to identify all of them and it will be pretty open and shut when they see a court room. Offline and air gapped the whole time they were there but did exactly what it was installed to do.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#142
post #112

Earlier quoted context omitted.

With face detection? License plates? Tamper protection? I'm guessing you're thinking Reolink or other Chinese ultra-commodity cam. It's fine, it's just in a different product class and ecosystem - and that's where enterprises fit in, they want that support+ecosystem and not DIYing. Reolink CX820 8MP $129 https://reolink.com/product/cx820/ Unifi G6 8MP ~$300 https://techspecs.ui.com/unifi/physical-security/uvc-g6-dome…

I never really thought of Ubiquity as enterprise always felt more of the premium small to mid sized business but I am sure some enterprises use them.

The new enterprise NVRs work pretty well.

I think they're definitely not Avigilon, Genetec, Verkada, but we run a few hundred UI cams in some edge areas. It works, esp if you don't demand orchestration.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#143
post #97

Earlier quoted context omitted.

The same is true for our AI processing on the cameras. This is entirely local and private. You can even air gap the UniFi Protect system from the Internet and it'll operate fine.

The cost is just insane though. $4-$500 for a camera that I can get equivalent specs for $50-100.

[dead]

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#144
post #112
post #97

Earlier quoted context omitted.

The cost is just insane though. $4-$500 for a camera that I can get equivalent specs for $50-100.

With face detection? License plates? Tamper protection? I'm guessing you're thinking Reolink or other Chinese ultra-commodity cam. It's fine, it's just in a different product class and ecosystem - and that's where enterprises fit in, they want that support+ecosystem and not DIYing. Reolink CX820 8MP $129 https://reolink.com/product/cx820/ Unifi G6 8MP ~$300 https://techspecs.ui.com/unifi/physical-security/uvc-g6-dome…

> With face detection? License plates? Tamper protection?

I do that with my Unifi Protect doorbell. RTSP streams. Google Coral. Frigate. Scales very well. Do ML on low quality stream. Look/save the high quality stream. You do it all centralized, and you can put the camera(s) on a seperate VLAN. They don't even need internet access. If you run them over PoE twisted pair, the attacker would need physical access to perform MITM. Wireless, one should assume the camera is insecure (e.g. KRACK).

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#145
post #46

Earlier quoted context omitted.

IPv6 support is basic at best. The zone-based firewall is very prescriptive and limited. ACL stuff is not great. To increase the MTU of the physical interface connected to the ISP I would need to hack a systemd unit that did it on boot (I either need it at 1508 so the PPPoE interface uses 1500, or I need to MSS clamp it and have it effectively reduced to 1492). Initial configuration requires the device to be connecte…

just genuinely curious about your MTU use case and why this is required...?

PPPoE introduces an 8 byte overhead per packet. The "MTU of the Internet" is 1500, so that's what more or less everything defaults to.

This includes physical NICs on Linux, but the PPPoE interface has to tunnel through one of such physical NICs.

If the physical NIC has an MTU of 1500 (and can't be changed), the PPPoE NIC must do MSS clamping, effectively reducing the MTU from my network to the Internet to 1492. This increases fragmentation and overhead.

If I can increase the physical NIC's MTU to 1508 (and the ISP supports it, which mine does), then the PPPoE tunnel can use the full 1500 when talking to the Internet.

So, it's technically not _required_ but it's an improvement I should be able to implement easily (in OpenWRT I literally type 1508 on the MTU box for the NIC, or issue a single uci command).

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#146
My experience of Ubiquiti is through their Dream Router 7. What a piece of crap that is. Can't even get good WiFi in adjacent rooms where same ancient Asus router wasn't breaking a sweat. Connection drop outs are a nice bonus. Don't forget booting for ages, fan noise etc.

If other products are so bad like that one, I don't know what is the hype for this company.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#147
post #140

Earlier quoted context omitted.

It looks like you can put 2 nvme drives in it, for caching.

While that's the ARC, I would be surprised if they blocked you from building vdevs with SSDs. Looking at the specs: https://store.ui.com/us/en/category/network-storage/products... Hard Drive Capacity (16) 2.5/3.5" HDD / SSD support (2) M.2 NVMe SSD support (2) Expansion ports support I think you're right we only get two SSDs on NVME as the cache, but it looks like we can run the rest (16) as SATA SSDs, which is often…

No I think it's perfectly fine, if I'm accessing files over a network I don't expect them to be blazing fast anyway.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#148
post #137
post #24

Earlier quoted context omitted.

They've been at this for a while. They do have offerings you subscribe for and pay monthly. They have also consistently offered an option for each of those offerings to bring your own or self host. They've earned my trust.

Anything can be sold to PE.

Sure. But all you can do, when deciding with whom to do business, is base your decision on what they have already done. It's not viable to refuse to do business with a company on the basis of "they might one day get bought by PE and introduce customer hostile changes".

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#149

I'm glad to see UBNT in this space. I've always used ZFS because it's vastly superior to other options. When I see storage companies building without fault tolerance, or without a merkle tree (so that you can backup deltas efficiently without having to recompute them) it's a sign their marketing team has more influence over the company than their engineers. Sadly, the few ZFS COTS options have been somewhat underpowe…

> QNAP supports ZFS filesystems Do they have ecc on those models? Do you have an example model on hand?

ECC support depends on the processors that the NAS uses. A few of their NASes allow you to use ECC memory but you'd need to swap the memory installed to ECC memory. A lot of their systems use Intel cpus that don't support ECC at all so you need to carefully pick and choose.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#150

I'm glad to see UBNT in this space. I've always used ZFS because it's vastly superior to other options. When I see storage companies building without fault tolerance, or without a merkle tree (so that you can backup deltas efficiently without having to recompute them) it's a sign their marketing team has more influence over the company than their engineers. Sadly, the few ZFS COTS options have been somewhat underpowe…

The same is true for our AI processing on the cameras. This is entirely local and private. You can even air gap the UniFi Protect system from the Internet and it'll operate fine.

The processing can happen within the camera, and it's nice when it does...but that doesn't mean that the only other option is something cloud-based, like some might assume.

Open-source NVR software like Frigate can do things like the object-detection/license plate/face recognition game on local hardware, with the cheapest available IP cameras. It's just a program that runs on a computer with a network and some storage and some processing ability like a GPU.

Those cheap cameras don't have to be trusted; with things like VLANs, they can hang out on the Group W bench where they have no access to anything important or the outside world. :)

(But yeah, it does represent much more of a DIY effort than something from UBNT does.)

Post reply on HN