Whistleblower: Ubiquiti Breach “Catastrophic”

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @03:28PM (#26639210)

I can't imagine that there isn't a market for this. Look at the number of people recommending Ubiquiti stuff to each other. There are entire YouTube channels dedicated to it. If your whole living space or small office can be covered with a single access point, get a 3-in-1 combo that has a WAP, a router, and a small switch. But if you don't, you are left with, what exactly? There is also some demand for mesh stuff, for people who rent and don't want to run Ethernet cable.

My plan: OPNsense on a PC Engines board for router + firewall, an unmanaged PoE-providing switch for switching, and something from 2-8 WAPs for indoor/outdoor Wi-Fi.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by 3np on Tuesday March 30, 2021 @11:47PM (#26643313)

There were/are some performance implication of pfSense/OPNSense on these boards specifically. It seems like this has improved significantly in FreeBSD 12+.

https://teklager.se/en/knowledge-base/apu2-1-gigabit-through...

> APU2, APU3 and APU4 motherboards have four 1Ghz CPU cores, pfSense by default uses only 1 core per connection. This limitation still exists, however, a single-core performance has considerably improved.

I can saturate 1GB/s with no problem OoB on Debian/OpenWRT on APU2/3/4, ymmv

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by bonestamp2 on Tuesday March 30, 2021 @07:40PM (#26641917)

I had a PC Engines board for awhile and I really liked it, but make sure the one you order can support your internet bandwidth. When I upgraded to 1 gig internet, I was pulling around 450mbps on my PC Engines apu1d4. I ended up getting a Ubiquiti Unifi Secure Gateway and then I was able to pull the full 1 gig.

It's pretty hard to recommend Unifi based on how they handled this breach, but the hardware itself has performed very well. Hopefully the new PC Engines boards can accommodate your needs.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by IgorPartola on Tuesday March 30, 2021 @08:21PM (#26642148)

Looks like the 1d4 used a Realtek network card while their latest boards use Intel which I guess is the recommended brand for pfsense/OPNsense.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by sjfidsfkds on Wednesday March 31, 2021 @01:28AM (#26643826)

You can connect the Google mesh routers together with Ethernet. I’d guess other competing products will do the same. It’s cheaper and much simpler than a full Ubiquiti setup for a few access points.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by ethanpil on Wednesday March 31, 2021 @05:34PM (#26653448)

How are you going to centrally manage the meshing and transition between APs?

[ Parent | on HN ]