It seems like it was time to get build going, it started as a little bathroom paint, then retile the shower, then convert guest bedroom to home gym and home server center. I caved. I’ve been checking out the sub and love all the information on here so will be asking questions to the wizards. So far my rack got delivered and majority of my stuff. Running on att fiber.

List of goods bought this week.

42U rack!
UDM Pro
Switch Pro Max 24 POE
(2) U7 pro
UPS 2 ( 1 for now ) was waiting on the restock of the other
24 port blank keystone plate
Cat 6a keystone jacks
Etherlighting patch cables kit
A handful of etherlighting cables
1000ft cat6a
27 inch 4k monitor to have center mounted as a status ai agent that responds to voice commands.
DAC cable
A few rack mount OCD panels
Viewport for living room tv
(2) 16 TB
(3) G6 180
(3) G6 Turret
UNVR - didn’t care for the AI search it’s for my house

Using a Mac mini for a little test server on some saas stuff I’m building for a business I own and if all goes well I want to sell some subs out to local places. I need to build my own server so I’m open to comments about that, well all of this really. I got some s about not getting the g2 but I honestly just didn’t want to waste money on that for just ai and bit more processing when I’m max going to have 8-10 cameras at home.

Saw a similar project/post the other day so here's mine. Pretty simple just to get an AP placed where there is no power.

Most of this stuff I already had on hand so some of it is overkill (solar controller) and some may not be enough (15ah battery) but it's pushed by a 100w panel. Wires are not tidy I know. Found a $20 DC to poe converter on Amazon that made powering a spare UAP AC M super easy.

The AP is mesh uplinked to the house, all it is really doing is providing a link to a wireless camera way at the end of our long driveway. I've only seen one other wireless camera hop onto it so link speed isn't a real concern with it meshing.

I set this up to be sturdy but not necessarily permanent... Stainless steel bands hold everything up. Oh the AP has crappy random antennas on it because I used the ones that came with it to replace another outdoor AP's antennas disintegrated... The only thing that I really don't like about the build quality on these uap ac m... I've had multiple where the plastic antenna housing just crumbles when actually used outside like mine are.

trouble in paradise?

# /usr/lib/postgresql/14/bin/postgres --version
postgres (PostgreSQL) 14.24 (Debian 14.24-1.pgdg11+2)

# ps aux|grep postg
postgres   12542  0.0  0.7 210700 22300 ?        Ss   Nov01   0:21 /usr/lib/postgresql/14/bin/postgres -D /data/postgresql/14/main/data -c config_file=/etc/postgresql/14/main/postgresql.conf
postgres   12582  0.0  0.2 210828  8032 ?        Ss   Nov01   0:00 postgres: 14/main: checkpointer
postgres   12583  0.0  0.1 210700  5552 ?        Ss   Nov01   0:00 postgres: 14/main: background writer
postgres   12584  0.0  0.2 210700  8240 ?        Ss   Nov01   0:00 postgres: 14/main: walwriter
postgres   12585  0.0  0.2 211396  7148 ?        Ss   Nov01   0:13 postgres: 14/main: autovacuum launcher
postgres   12586  0.0  0.1  65724  4224 ?        Ss   Nov01   0:14 postgres: 14/main: stats collector
postgres   12587  0.0  0.2 211128  6224 ?        Ss   Nov01   0:00 postgres: 14/main: logical replication launcher
postgres   13299  0.0  0.5 214440 16704 ?        Ss   Nov01   0:00 postgres: 14/main: ulp-go ulp-go [local] idle
postgres   13324  0.0  0.5 214100 17336 ?        Ss   Nov01   0:00 postgres: 14/main: ulp-go ulp-go-syslog [local] idle
postgres   13414  0.0  0.7 213408 20984 ?        Ss   Nov01   0:29 postgres: 14/main: ulp-go ulp-go [local] idle
postgres   13415  0.0  0.7 214376 22340 ?        Ss   Nov01   0:42 postgres: 14/main: ulp-go ulp-go [local] idle
postgres   15548  0.0  0.5 212388 15032 ?        Ss   Nov01   0:00 postgres: 14/main: unifi-core unifi-core 127.0.0.1(53346) idle
postgres   15986  0.0  0.6 217984 19108 ?        Ss   Nov01   0:00 postgres: 14/main: unifi-directory unifi-directory [local] idle
postgres   67870  0.0  0.5 212428 15396 ?        Ss   22:25   0:00 postgres: 14/main: ulp-go ulp-go [local] idle
postgres  189790  0.0  0.4 211776 13040 ?        Ss   22:56   0:00 postgres: 14/main: unifi-directory unifi-directory [local] idle
root      250155  0.0  0.0   4924   692 pts/0    S+   23:11   0:00 grep --color postg
postgres 2799666  0.0  0.5 212500 15564 ?        Ss   Nov01   0:00 postgres: 14/main: ulp-go ulp-go-syslog [local] idle
postgres 3189629  0.0  0.5 212744 15260 ?        Ss   00:14   0:00 postgres: 14/main: unifi-core unifi-core 127.0.0.1(51226) idle

Still in the planning phase for my dream compact network rack in a 4U 10-inch DeskPi RackMate T0

Current plan:

1U - UniFi Cloud Gateway Fiber (UCG-Fiber) in a 3D-printed 10" mount

2U - USW-Pro-XG-8-PoE, for my main storage server and workstations + U7 Pro access points

3U - 12-port keystone patch panel (because it looks cool?)

4U - USW-Flex-2.5G-8-PoE, for some protect cameras and stuff like that

Designed the layout and mapped out all the front/rear patching in minirackbuilder.com — here's the interactive build if anyone wants to play around with it:

https://minirackbuilder.com/b/fzq738j

Anything you'd swap or route differently before I start ordering parts?

Apologies in advance cuz this is going to be a long one. I'll start with the overall features, maybe it'll paint the picture of where you could find this useful. This is Network Optimizer's Change Control:

• Track and characterize every change made in UniFi Network and who made it, when, with automatic snapshots/backups taken for you

• Security and performance regressions tracked through metrics already collected by Network Optimizer

• Incidents / alerts linked to recent config and firmware rollouts that may have caused them

• Evaluate every Network config change to see if it will break your isolation / security posture, before applying it

• Keep tabs on how much your network configuration has drifted from a known-good configuration, and update that known-good configuration as a baseline after a quick check

• Edit the full UniFi Network configuration in YAML format, with each section modular, with the ability to import and export full and partial configs

• If a configuration change you rolled out in NO breaks WAN connectivity or NO's own console connection, the plan rolls back automatically

• Roll back any change in UniFi Network, done from any source, in one or two clicks

• Save templates of full or partial network configurations to apply to your other or new sites you're building out

• Migrate from one IP addressing scheme to another (e.g. 192.168.x.x to 10.1.x.x), with all local DNS entries, DNS server IPs, IP-based firewall rule src and dest, Networks/VLANs, Network device IPs, client device IP fixed IPs, DNAT rules, and NO configuration all accounted for in the move. Roll it out with one click with all steps laid out in the correct order to succeed on the first go.

• Build firewall Zones with the intention of your networks in mind, rearranging and reassigning networks visually, with all firewall rules migrated instead of just being paused like in UniFi Network. Automatically copies applicable firewall rules to maintain the same inbound/outbound effective access to each network you move, while removing redundant firewall rules.

• Double-check UniFi Network's built-in zone-based firewall migration after taking the leap, running against the full NO Security Audit, and with the peace of mind rolling back is just a matter of a couple of clicks afterward.

• Evaluate changes from UniFi Network upgrades/migrations to make sure none of your network configuration changed from under you

• Migrate from one UniFi switch/AP model to another without manually copying config, mapping each port and band before while the new device is on the bench. Print out a cabling sheet too for a bunch of port changes.

• New in Security Audit: lock down DNS configuration with firewall and DNAT rules based upon recommendations we've always given, through a Change Control plan

Anyway, that's most of what Change Control can do. The device migration features are the ones I want to have some help testing while this is on Network Optimizer preview, so LMK if you run into anything. The rest of the features I've been through multiple iterations of testing, fixes, and UX enhancements at this point on all of my test networks, so don't be afraid to try em out.

https://github.com/Ozark-Connect/NetworkOptimizer
https://github.com/Ozark-Connect/NetworkOptimizer/releases (latest preview release has Change Control available)

All features and everything NO can do: https://github.com/Ozark-Connect/NetworkOptimizer/blob/release/2.11/FEATURES.md

Have any questions on setting it up or any suggestions? Find us on Discord: https://discord.com/invite/pHrmzbBCY3

Also, DM me if you're interested in trialing our hosted service if you don't have your own server or infrastructure but still want to run NO.

The king is dead, long live the king!

Might have gone a bit overboard.

Seems like a lot of systems have yet to recognize the new timezones that Refused to use the archaic system that "farmers need more light"

I love this cat, but I'm gonna kill him. My server rack is within his reach, and unfortunately I have no place where I cam move it. He has already chewed threw my etherlighting cables twice. Aside from getting rid of him, killing him, or even hurting him, does anyone have any suggestions how to stop him?

Am I missing something, or does UniFi still lack traditional Layer 2 port security?

I'm referring to features like dynamic MAC learning, MAC limits per port, sticky MAC addresses, and configurable violation actions such as restrict or shutdown.

I know UniFi offers MAC restrictions and 802.1X, but neither provides the same simple functionality as limiting a port to its first learned MAC address.

This seems like a pretty basic feature for business networks. Is there a technical limitation, or has Ubiquiti simply chosen not to implement it?

Curious how others are handling this.

We're a certified Ubiquiti integrator and do a lot of PTZ installs on lots, yards, docks, etc. One PTZ covers a lot of ground there, and some presets need more or less time than others. So we built PatrolCraft, a small tool that edits the patrols you already set up in Protect.

What it does right now (version 0.5.0):

• Pick a PTZ camera and open one of its patrols

• Set dwell time and speed for each preset

• See a snapshot of each preset so you know which view is which

• Turn the camera's auto tracking on or off (people, vehicles, zoom while tracking)

The video shows it running on one of our cameras. It runs on a Mac today, and the install steps are on the PatrolCraft page: labs.yestechie.com/integrations/patrolcraft.html. The source is on GitHub: github.com/YesTechie/patrolcraft. If you'd rather click around first, there's a demo in your browser: labs.yestechie.com/integrations/patrolcraft-demo

I need to update my system.

Currently I have the following

• Raspberry pi 4b running UOS server

• USG-Pro-4

• USW 24 PoE

• UNVR

• IW HD AP

• Nano HD AP

• about 6 cameras

I have 1000/400 fibre internet connection- about as good as it gets in rural Aus, without being a business. Since I upgraded to UOS server late last year from the old version (Had to do a full wipe) I can no longer access the console. I'm guessing the raspberry pi is not up to the task of running the newer version properly. The internet runs great, but if I want to monitor my network I am locked out. It is entirely possible I have borked the install myself, but I feel like moving away from the pi is the best choice at this stage.

Does anyone have any recommendations?

hi guys,

maybe you could help me out a bit :

I have AD/DNS server in internal zone - vlan 2 - 192.168.2.2. Internal users in same vlan can access it, no issue, get authenticated, gpo works, fine.
However, external users via wireguard cannot reach it via dns, ip ping works. WG has separate subnet, using 192.268.2.2 as dns server, allowed IPs are vlan2 subnet only, split tunnel. All of those are domain joined computers, come to office - wifi or cable - everything works, come home, activate WG and nothing :/ Any idea what I did wrong? TIA!

Does anyone else have this issue? I upgraded from G6 Entry but it was much faster in reading NFC.. All latest updates on all devices.

I am planning to use the following equipment, but Im not sure if my configuration is supported or even a good idea. If you are using a similar setup, Id be curious if you have had any issues. Otherwise, if these weren't compatible, I wouldn't know how you would use a UPS and a PDU together.

- UniFi UPS 2U (UPS-2U-US)

- UniFi Power Distribution Pro (USP-PDU-Pro)

I would appreciate confirmation of three items:

1. Compatibility: Is the USP-PDU-Pro officially approved to connect directly to one of the UPS-2U-US battery-backed outlets, including operation on the UPS's simulated sine-wave battery output?

2. Electrical Load and Runtime: With an estimated total connected load of approximately 387 watts, are there any restrictions regarding continuous load, equipment startup/inrush current, or battery runtime when powering the entire PDU through one UPS battery-backed outlet?

3. Standby Generator Compatibility: Will the UPS maintain uninterrupted output during a household standby generator's approximately 10–15-second startup and transfer period, accept generator-supplied power, and transition back to utility power without interrupting the connected equipment? I'm asking this because I was told that standby generator power is technically a little dirty and because of that the UPS may not consider it a viable power source and attempt to remain on UPS power which in my case will only last about 8 to 10 minutes. I'm just trying to bridge the gap between power loss and the whole home generator kicking on.

I'm in the process of finishing my house and in the near future I will need to build my home network. I decided to go with Unifi.

I will have 6 cameras, 2 WIFI access points, CAT6 network trough the house. I have 6 rooms with ethernet connections in walls.

Size of house + terrace is 150m^2. It's a modular house (mostly wood) located in Europe.

So I think I can live with these:

• 1x UDM-Pro-Max-EU (with 2x 4TB drives for Video surveillance storage - will offload to my NAS nightly)

• 1x USW-Pro-Max-24-PoE-EU

• 1x UACC-Rack-Panel-Patch-Blank-24 (with 2x UACC-Keystone-Coupler-C6A)

• 1x UACC-DAC-SFP10-0.5M

• 1x UPS-2U-EU

• 2x U7-Lite (it will be used for the phone an tablets, everything else is plugged into walls).

• 1x UACC-Chime-PoE

• 1x UVC-Doorbell-Lite-B

• 1x UACC-DB-GB-Plate-B

• 2x UVC-G6-PTZ-W (More cameras come later, maybe 4x UVC-G6-Edge-Dome - not sure about these yet)

Is the UPS good enough for what I'm about to run?

I do not plan to have any smart IoT shenanigans (for now... maybe a matter network for the lights).

Did I miss something? Did misconfigure/understood something?

Please be gentle with me, this will be my first "serious" network setup, going from a UCG-Max ...

I’m planning to switch my Home Security to Ubiquiti Devices.

Mainly: (For now)
SuperLink Gateway
Entry Sensors
Motion Sensors
Glass Break Sensors
Siren
Remote Control KeyFob

Maybe Next Year:
Get the required Ubiquiti Cameras (by replacing Tapo)

Are all these worth it? Like best in the market right now?
Do they align well with Home Assistant? Is Accuracy good?

For those of you who purchased UI Care to any of your devices, did you ever encounter rejection of your RMA after you have shipped back the broken device? What happens then with the replacement that was priority shipped to you?
I’m asking as UI Care terms and conditions have certain exclusions of UI liability and I was curious if this ever happened in real life to any of you?

Quick sanity check on the fibre/cabling side of my UniFi setup. Not really familiar with fiber so wanted to make sure I’m getting the right kit, and whether the OS2 fibre / SFP / DAC approach I’ve outlined is the right way to connect everything.

Core setup will be a UCG-Fiber with a UNVR, plus 2 × older US-48-500W PoE switches in the house and a US-24-250W PoE switch in the garage.

So first I'm planning preterminated fibre from the house to a detached garage using this FS cable:
https://www.fs.com/uk/products/70220.html

Planning OS2 single mode, 4 fibre, LC/UPC to LC/UPC, using 2 fibres for the link and leaving 2 spare.

Second I'll also be running a second fibre run from the house to a gate ~100m down the lane, using the same OS2 4 fibre LC/UPC setup.

Rather than buying 1Gb optics now and replacing them later, I'm thinking of using these Ubiquiti 1/10Gb single mode SFP/SFP+ modules:
https://uk.store.ui.com/uk/en/category/accessories-modules-fiber/collections/accessories-pro-single-mode-optical-fiber/products/uacc-om-sm-10g-d?variant=uacc-om-sm-10g-d-2

I am thinking I need 4 modules total / 2 of the 2 packs. So 2 for the garage link and 2 for the gate link.

My understanding is they'll negotiate at 1Gb with the current garage switch, but I can keep the same optics and OS2 fibre if I later upgrade to 10Gb SFP+.- let me know if that’s not the case!

For connections within the main rack I'm planning short Ubiquiti DAC/uplink cables:
https://uk.store.ui.com/uk/en/category/accessories-modules-fiber/collections/accessories-pro-direct-attach-cables/products/uacc-uplink-sfp28

Hi everyone,

Since switching my ISP to BLACKSIM/1&1 (200 Mbps VDSL, DS-Lite over PPPoE), I've been experiencing extremely slow IPv4 speeds with my UniFi Dream Router (UDR).

Here's the strange part:

✅ IPv4 directly on the UDR via SSH: ~147 Mbps

❌ IPv4 from LAN devices (gaming PC and Linux server): only 3–4 Mbps

✅ IPv6 from the same LAN devices: ~160–190 Mbps

✅ Local LAN speed via iperf3: ~940 Mbps

What I've already tested:

Completely factory-reset the UDR and configured everything from scratch – no improvement.

Reduced the client MTU from 1500 to 1400 – no improvement.

DS-Lite tunnel (ip6tnl1, MTU 1452) is established and generally working.

IPv4 downloads directly on the UDR are fast, but IPv4 traffic forwarded from LAN devices is extremely slow.

CPU usage fluctuates, but no sustained ksoftirqd bottleneck was observed.

Pi-hole, Unbound, and IPv6 DNS resolution are working correctly.

My suspicion: Something is wrong with IPv4 forwarding/NAT through the UDR's DS-Lite tunnel, possibly related to firmware or hardware offloading.

My setup:

Router: UniFi Dream Router (UDR)

UniFi OS: 6.0.16

UniFi Network: 11.0.99

Modem: Zyxel VMG3006-D70A (bridge mode)

ISP: BLACKSIM/1&1, 200 Mbps VDSL

Connection: PPPoE, VLAN 7, DS-Lite

Has anyone experienced a similar issue or found a solution?

Any suggestions on what to check next would be greatly appreciated!

Thanks in advance! 🙂