Live data from Hacker News

Ubiquiti: Enterprise NAS, Built on ZFS

blog.ui.com

241–250 of 376 posts

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#241

Earlier quoted context omitted.

The same is true for our AI processing on the cameras. This is entirely local and private. You can even air gap the UniFi Protect system from the Internet and it'll operate fine.

I am unable to accept that it is fully local, since you have to bind your network to their cloud just to accept the EULA. [0] I have 0% trust that a subsequent unbind truly severs the link, because this is such a shady thing to require in the first place. [0] https://community.ui.com/questions/e3d50641-5c00-4607-9723-4...

I'm surprised this is required. Agreed that's shady. I wonder what their reasoning is.

But if you don't trust it, the fix is easy: just deny the Ubiquiti cameras and controller all internet access. That way no trust is required.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#242
post #203

Earlier quoted context omitted.

How did you hide it so that the thieves didn't find it?

A 7U cabinet in an overhead space that is difficult to access. Installation and configuration were a bit of a headache but ended up being worth it. There was a NAS in the office and they stripped 7 drives, sleds and all, out of it. I'm guessing with such an obvious endpoint for the camera storage it never occurred to anyone there was a second box. I had something like this in mind when I wired the building. It seemed…

I'd be alarmed that they seemed to know you were going to WWDC. Like, they were tech-aware if they took the drives while you went to tech event... how did they know any of this / scout you?

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#243

I'm glad to see UBNT in this space. I've always used ZFS because it's vastly superior to other options. When I see storage companies building without fault tolerance, or without a merkle tree (so that you can backup deltas efficiently without having to recompute them) it's a sign their marketing team has more influence over the company than their engineers. Sadly, the few ZFS COTS options have been somewhat underpowe…

QNAP unforgivably uses a proprietary version of ZFS with their own extensions that are not compatible with mainline OpenZFS. It can only zfs send/receive to other QNAP devices. While your data is protected like any other ZFS system, it is _NOT_ interoperable. You can not take a zpool out of a QNAP system and access it on another system with ZFS. I discovered this painfully the hard way, and won't buy from them again,…

Amusingly, most of my old qnap hardware ran Ubuntu pretty well

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#244
post #231

Earlier quoted context omitted.

You'd think. However, this is a rural area with a sheriffs department that has budget constraints. I know of 2 shops with monitored alarm systems that were successfully robbed over the last 5 years because by the time anyone followed up they were gone. Your statement that "a proper monitored alarm system would have prevented this" is optimistic. I never had any particular expectation that if somewhat intelligent crim…

Yes sheriff's dept response times can be terrible. But someone could have been there a lot sooner, and it does put pressure on the perpetrators. I would suggest trying to find out why you were targeted, if the establishment was cased beforehand, etc. These crimes are not usually random.

Good luck figuring that out.

Chances are, the thieves were monitoring the local dispatch over the radio (rural departments are not usually doing anything fancy) and knew exactly how long they had.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#245
post #241

Earlier quoted context omitted.

I am unable to accept that it is fully local, since you have to bind your network to their cloud just to accept the EULA. [0] I have 0% trust that a subsequent unbind truly severs the link, because this is such a shady thing to require in the first place. [0] https://community.ui.com/questions/e3d50641-5c00-4607-9723-4...

I'm surprised this is required. Agreed that's shady. I wonder what their reasoning is. But if you don't trust it, the fix is easy: just deny the Ubiquiti cameras and controller all internet access. That way no trust is required.

But what if I want to access my cameras remotely but not have their manufacturer access them?

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#246
post #86

Earlier quoted context omitted.

A 2-drive Synology (e.g. DS225+) in RAID 0 or RAID 1 works fine for this, for 90% less than this beast. Synology documented their optimal settings for Time Machine a couple years ago, too. Hope this is helpful. [1] [1] https://kb.synology.com/en-us/DSM/tutorial/How_to_back_up_fi...

I already have a DIY NAS w/ 14x 14TB drives in it running ZFS on FreeBSD. It does not play nicely with Time Machine over the network though, and has some other bugbears that I've resolved to fix by migrating to Linux and running ZFS on Linux, but have never got around to doing. A 2 drive anything is not replacing my existing NAS + solving my backup use case, although I appreciate the sentiment of saving money.

Ah, sorry, I didn’t realize you already had a sizable array! Maybe you _are_ in the market for this thing!

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#247
post #132
post #55

Earlier quoted context omitted.

> I genuinely curious what bottlenecks you've hit. 1. My UDM Pro absolutely chokes and stalls with intrusion detection enabled on the firewall and 8 cameras connected. Network goes down, cameras disconnect, devices disconnect from Wi-Fi every time a car drives past a camera due to AI features triggering, etc. For something meant for small businesses I wish they would just shove an Intel i5 or something in it. They ma…

Turn off the intrusion detection and your throughput should be significantly better.

If something has features I expect to be able to use them. They should put enough CPU to make the advertised features usable in tandem.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#248

I'm glad to see UBNT in this space. I've always used ZFS because it's vastly superior to other options. When I see storage companies building without fault tolerance, or without a merkle tree (so that you can backup deltas efficiently without having to recompute them) it's a sign their marketing team has more influence over the company than their engineers. Sadly, the few ZFS COTS options have been somewhat underpowe…

QNAP unforgivably uses a proprietary version of ZFS with their own extensions that are not compatible with mainline OpenZFS. It can only zfs send/receive to other QNAP devices. While your data is protected like any other ZFS system, it is _NOT_ interoperable. You can not take a zpool out of a QNAP system and access it on another system with ZFS. I discovered this painfully the hard way, and won't buy from them again,…

I think the ZFS changes were due to needing a way to allow qnap systems to expand zfs pools. The raidz expansion features in openzfs probably took too long for qnap to wait.

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#249
post #203

Earlier quoted context omitted.

How did you hide it so that the thieves didn't find it?

A 7U cabinet in an overhead space that is difficult to access. Installation and configuration were a bit of a headache but ended up being worth it. There was a NAS in the office and they stripped 7 drives, sleds and all, out of it. I'm guessing with such an obvious endpoint for the camera storage it never occurred to anyone there was a second box. I had something like this in mind when I wired the building. It seemed…

[dead]

Re: Ubiquiti: Enterprise NAS, Built on ZFS

#250
post #218

The biggest concern about Ubiquiti to me is still its software/infrastructure quality. Off top of my head, besides all the UI/UX glitches: - They once allowed a human employee to access static AWS root access key. - Their employee once claimed "remote access" was end to end encrypted, but later people figured out they probably just meant TLS in transit. - They had a configuration error that allowed some users to acce…

They’ve had router firmware updates that have borked networks a few years ago. Software QA processes weren’t up to snuff.
Post reply on HN