PeteAsking

100% another docker is using the port. Just stop all of them and start only this one and then start the others one at a time until you find it.

The ids/ips stuff is only layer 4 and not really comparable.

Im saying in 2023 a layer 7 firewall that does traffic inspection is a must. As in tick a box to block youtube or a certain website or tick a box to block botnets and so on.

I think you guys should look into running opnsense with zenarmor as its cheaper and has more features and is overall a better product. The unifi routers are a bit in the weak side.

The very old devices are not supported by this version of the controller I am afraid.

I was under the impression the usg ran the controller software itself?

This is/was already noted on page 1. No you set it in the web interface under settings, system, timezone.

Its unclear to me why you dont just make a new self signed certificate. Isnt that the entire point of it - that its free and a new one can be generated anytime? In terms of your proposed change I cant tell you what will happen. The container is new and in beta so you would have to test it and post back what happens. Its just unclear to me why you are making your life harder than it has to be. Regenerating a self signed cert is pretty normal and most times an appropriate method to use. Reusing an old self signed certificate isnt the norm.

Always stick with a lower version if you dont know why to upgrade. New features are only beneficial if you actually need to use them. The v7 recommended is working well.

Ok then I guess there is no harm to try an upgrade if you can roll back easily. Let us know how it goes.

If you backup your docker images as per the normal way on unraid with the ca backup plugin then you can always try and roll back of its not working for you.

This is beyond the scope of the project unfortunately. Unifi provide a backup and restore method that seems to work and so doing more complex restores is not something we can support.

Most of the differences revolve around permissions since unraid is dissimilar to other linux OS’s in that root is still used and to avoid running a docker as root the ‘nobody’ group is used. Many dockers that are created dont take this into account requiring the ‘unraid specific’ changes that makes them suitable for unraid to run. There are a few less interesting differences but this one causes the most issues as unraid cant write files to the locations the docker is being run from which causes many problems. in terms of ‘the best solution’ I do agree LSIO have a proven track record and that is a very desirable benefit. Very little anyone can do about it. If you need their track record as part of your solution then the 2 docker method is the only path forward. It does function and over time it could become easier to setup. On the other hand the single solution does provide a simpler setup which is what many unraid users use unraid for. Otherwise why not just install a vm and manage your dockers under a debian vm without the need for unraid. Unraids entire benefit is the click and install and low maintenance approach. So for this benefit the single docker does meet the general requirement of ease of use and ease of management and so on. Obviously a track record can only be built up over time and since it currently doesnt exist the only thing to do check over time how reliable/well maintained it is. There are just 2 of us involved. Af for the LSIO docker images I have no way of knowing how many people are actually working on it. Depends on how many resources that company is prepared to spend I guess. So kind of thats the situation best I can describe.

Hi, no it wont be a problem but you will need to change the networking to be exactly the same prior to restore or devices will not be adopted as they will see a different ip and refuse to accept the new controller. I actually have never tested the self signed certificate during a restore but I imagine you would have to recreate this and it is not part of the restore process.

I feel like it would be better for everyone to have a consistent way to do things rather than a mishmash of different options but thats just me.

Good to see you guys are managing to update to 2 containers without too many issues. At some point the community needs to decide which direction they want to go so we dont have to maintain 2 different options for the same thing essentially.

Thats great. A few people helped iron out some of the early kinks so good to hear the experience is improving.

Thank you

Yes but this is a meaningless statement that does not actually explain what the issue actually is: ”Due to the way in which Ubiquiti package and distribute their software our Unifi Controllercontainer has reached a point where we cannot upgrade to newer supported packages without making breaking changes to the image.” I can read this and still have no idea what they are talking about.

If unifi go out their way to destroy their brand then the usual happens. Everyone just moves to another product when their devices eventually get too old and life goes on. We have seen this happen enough times to enough companies at this point to no longer need to worry. We know someone will eventually just make something better for free and screw the next big company over because we can and always will be able to. Thats why they resent us. Because we are just better than them. And we love it.

Probably the vpn is established on the unifi router so understandable it would not exist if you dont have one. I believe you cant use floor plan in the wifiman app if you dont have a unifi router so maybe this isnt the first time anyway. I wouldnt worry all that much about it. They are gimmicky features anyhow.

What features are missing? Personally would never change from opnsense to an inferior firewall so unclear what features are removed you are alluding to.

If you donate to a charity that supports a good cause like children in Ukraine or just any cause you feel strongly about or just even to Unicef or some other organisation then you have done more than 99.99% of people and everyone can raise a beer to you for your generosity.

This was done to the best of my ability.

Ok I will try fix this tomorrow