Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Unifi Travel Router

blog.ui.com

Post reply on HN
Print view View original

421–430 of 437 posts

Re: Unifi Travel Router

#421

Post by DANmode »

jasonkester wrote: post #179
guiambros wrote: post #78

Earlier quoted context omitted.

Same! And the best thing is that you can install Tailscale, so you can connect to your tailnet, and exit all traffic through one of your nodes (e.g., your home/office network). It's incredibly useful, with the added bonus that you don't need to install tailscale client in any of your travel devices (phone, tablet, work computer, etc).

I’m seeing a lot of this same comment here, so I went to check out this tailscale thing, which clearly I must need. Can anybody explain what Tailscale is, does, or why everybody seems to have it? Looking at their website, it’s just a huge wall of business jargon. Really! Read it. It’s nothing but a list of enterprise terminology. There’s a “how it works “ page full of more (different) jargon, acronyms and buzzwords,…

Open their GitHub page?

Re: Unifi Travel Router

#422

Post by DANmode »

ValentineC wrote: post #411
fragmede wrote: post #245

Earlier quoted context omitted.

Microsoft, Github, and Apple login are the other options if you don't want to use Google.

One of the things keeping me from adopting Tailscale is that I need to sign up with one service, but I can't add multiple services as login options in case one of those SSO providers lock me out, like what happened to Dr Paris Buttfield-Addison with Apple.

Add a second user to your network?

What am I missing?

Re: Unifi Travel Router

#423

Post by cassianoleal »

jasonkester wrote: post #209
viccis wrote: post #199

Earlier quoted context omitted.

None of the terminology or acronyms that user used were made up or unique to this. I think you are blaming other people for your unfamiliarity with this kind of tech. It is simply a managed service that lets you hook devices up to an overlay network, in which they can communicate easily with each other just as though they were on a LAN even if they are far apart. For example, if you have a server you'd like to be abl…

Sorry if I appeared rude. That was very much tongue in cheek. But notice how you just did a much better job of explaining what this thing does without using any jargon at all. The jargon helps if everyone already knows what you’re talking about. It hurts if anyone doesn’t. That’s what I’m poking fun at. There’s a trait in lots of engineers I’ve worked with over the years to be almost afraid to talk about tech stuff i…

> Like they won’t get credit for knowing what a zero trust network is if they describe the concept in a way that regular people might understand.

I've been trying to get a definition of zero trust at $client from the security people who are pushing tools onto our platform, so we can have an honest conversation around threats and risks, and finding the best balance of tools, techniques and processes to achieve their desired outcomes.

Unfortunately, it seems like everybody just want "zero trust" because a vendor sold them on that idea and they gave money to the vendor, so now there's the need to justify that expense and "extract value" from the tool - even if it may in fact be worse than the controls that are already in place.

Re: Unifi Travel Router

#424

Post by cassianoleal »

Tor3 wrote: post #253
konradb wrote: post #182

Earlier quoted context omitted.

I don't think you need to pay $6 a month to try it out. Install it on all the machines you want. When you are running it on the machine, it is networked to the other machines that are running it. Now make an 'exit node' on one of those machines by selecting it in the UI, and all your gear can access the internet via that exit node. Your phone can run it. Your apple tv can run it. You can have multiple exit nodes. So…

How does it compare to Zerotier? The way I understand it it's kind of overlapping functionality but not necessarily everything. What I want from Zerotier is basically what you described about Tailscale. The two problems I have with zerotier are: 1) It's supposed to let a mobile device like an Android tablet route its traffic through zerotier (functioning as a VPN to my home site, in this case). However, I've never go…

It's been a minute since I ran ZeroTier, so my memory is fuzzy.

Tailscale and ZT are not the same. ZT can do certain things that TS can't. One example is acting as a layer 2 bridge. Or a layer 3 bridge. TS can do neither. It can achieve mostly similar results though.

ZT can be a pain to setup. TS is a breeze. ZT's raw performance is quite poor. TS's is usually very good.

If I understood you correctly, you want both a way to access your home LAN when you're out - this is easy. Set up a node with NICs on the LAN subnets you want access to (I run it on my router), and configure the TS node to announce routes to those subnets. Install the TS client on your laptop and mobile and accept those routes. Job done.

If you also want to mask your egress - i.e. reach the Internet via your home network as if you were there - then you need a node (can be the same as above) configured to act as an Exit Node. When you want one of your devices to use this, just select the appropriate exit node. Job done.

Re: Unifi Travel Router

#425

Post by fmajid »

moufestaphio wrote: post #389
InTheArena wrote: post #376

Earlier quoted context omitted.

Ubiquidropped all cloud requirements, but I am not sure what you are referring too here.

I haven't paid attention for a while, but this definitely hurt their brand massively: https://www.theregister.com/2019/11/07/ubiquiti_networks_pho... Pretty sure that's what OP is referring to.

Exactly.

Re: Unifi Travel Router

#426

Post by fmajid »

KetoManx64 wrote: post #418
MrDarcy wrote: post #373

Earlier quoted context omitted.

For both home and travel routers OpenWRT is far and away superior to Unifi gear. Usability, configurability, and especially security.

What makes them more so secure? Configurability I can see, usability maybe, as Ubiquiti is all about simplification and ease of use.

- open source and auditable

- support modern VPN protocols like WireGuard and Tailscale

Re: Unifi Travel Router

#428

Post by yegle »

QuiEgo wrote: post #337
ryandrake wrote: post #330

Earlier quoted context omitted.

I was still completely mystified until your last sentence. And now I'm just mostly mystified. I, too, keep hearing Tailscale Tailscale Tailscale from HN commenters but have no idea why I'd need it. For anything I need to access on (or from) my home network I just use a VPN I've hosted in my home for the last decade or so.

If you've already got a VPN solution your happy with, Tailscale probably adds very little value for you. It's just basically the easiest / most user friendly way to setup a VPN to your home network. It can do way more than just being a VPN-to-home, but that's how most users use the free part.

It's still valuable. You can access your server with your own VPN set up, but what if you want to share a server to a friend or a family member (examples includes VaultWarden/Bitwarden, Plex, Jellyfin)?

If this is on Tailscale, you can just ask people to install tailscale client and login using one of the IdP, then ask them to accept the node you shared to them, and they can immediately access the server.

The alternative would be 1) sending VPN configs over and maybe also configure their VPN client for them, or 2) expose the service on the Internet protected by some OAuth proxy which really only works for web apps. Neither is easy/trivial.

Re: Unifi Travel Router

#429

Post by KetoManx64 »

fmajid wrote: post #426
KetoManx64 wrote: post #418

Earlier quoted context omitted.

What makes them more so secure? Configurability I can see, usability maybe, as Ubiquiti is all about simplification and ease of use.

- open source and auditable - support modern VPN protocols like WireGuard and Tailscale

Open source and auditable I can see.

Ubiquti does support wireguard natively. And you can get Tailscale running if you manually install the package through the SSH CLI.

Re: Unifi Travel Router

#430

Post by QuiEgo »

yegle wrote: post #428
QuiEgo wrote: post #337

Earlier quoted context omitted.

If you've already got a VPN solution your happy with, Tailscale probably adds very little value for you. It's just basically the easiest / most user friendly way to setup a VPN to your home network. It can do way more than just being a VPN-to-home, but that's how most users use the free part.

It's still valuable. You can access your server with your own VPN set up, but what if you want to share a server to a friend or a family member (examples includes VaultWarden/Bitwarden, Plex, Jellyfin)? If this is on Tailscale, you can just ask people to install tailscale client and login using one of the IdP, then ask them to accept the node you shared to them, and they can immediately access the server. The alterna…

I'd guess a plurality of people are only sharing Plex with family members, and nothing else. If you only care about sharing Plex, you don't need Tailscale to give a family member access, assuming you have Plex Pass, since Plex does a proxy as you describe.
Post reply on HN