[Setting Up WireGuard® on Unraid]

35 minutes ago, bonienl said:

There are not many other ports open on Unraid, it is not a fully fledged server with many different services to run.

On the management access page you can further tell what management services to open or close.

Services like http/https, ssh and telnet are all protected by a login authentication.

 

Well, If you are a hard docker user like me, you will know that when you map a port this port is binded to the unraid ip, so I have mulple services like sonarr, radarr, gitlab, etc binded to the unraidip:portservice. I´m interested to block this ports if were possible. If not I can use the udm vpn.

[Setting Up WireGuard® on Unraid]

7 minutes ago, bonienl said:

 

The WireGuard solution is intended to give only "trusted" users access, any "outsiders" can't make access because they don't have the WG keys to establish the session.

 

Who is accessing your Unraid server over WireGuard? It sounds like you are setting up some "public" service.

 

Any device on your LAN which runs on its own unique IP address (this may include docker containers and VMs) can be allowed or denied access over WG (configurable in the GUI).

 

I just want to give access to the shared folders to my family, but I'm not interested in expose all the ports of my Unraid server. Right now they are using a vpn with l2tp and I have multiple firewall rules only to give access to smb and block the rest.

[Setting Up WireGuard® on Unraid]

3 hours ago, trott said:

usually for wireguard, you only need to forwarder the wirguard port on UDM Pro to urnaid IP, all other port are still close to public

Hi, the point is allow to another users to connect to the shared folders and block the access to the docker services. With wireguard on unRaid I can't see the option.

[Setting Up WireGuard® on Unraid]

I don't know if anybody is at the same situation as me, I have a UDM Pro and I use the vpn integrated l2tp to access to unraid, so I can use the firewall rules to block all port services on unraid and on my lan, If I use the wireguard vpn to access to unraid all the ports are exposed and I don't know how to block them, because the gw is unraid and the firewall rules of my router doesn't work. So my question is simple, there's any way to block all the ports on unRaid and only allow to connect the shared services SMB, NFS?

 

 

[Unraid drops my usb box from the array]

2 minutes ago, johnnie.black said:

That one will work.

Thanks for the help, then I will go for it! 

[Unraid drops my usb box from the array]

1 hour ago, johnnie.black said:

Correct.

 

You're correct, with a SAS expander the cable from the HBA to the expander can be up to 10m long, though you should use one as small as possible, then from the expander to the SATA devices up to 1m.

Good to know, now my main concern is which card to buy, I've seen this card in eBay https://www.ebay.es/itm/LSI-9200-8e-6Gbps-8-lane-external-SAS-HBA-IT-Mode-ZFS-FreeNAS-unRAID-NoROM/132445000396 and says it will work with unRAID, but I can't see this card in the compatibility list. This card would be nice for me because have the external ports to connect the cable.

[Unraid drops my usb box from the array]

After thinking about that, I will go for the SAS box then I have just a question, I think the max length of SATA is 1M from the disks to the HBA PCIe card in my Gen10 Plus, is that true? and I can remove this limitation by buying the Intel RES2SV240. I'm wrong?

[Unraid drops my usb box from the array]

3 minutes ago, ChatNoir said:

I see that you have a x16 PCIe slot, is it occupied ?

If not, you could use a PCIe to eSATA or SAS in the future.

Yes, this PCIe right now it's empty, but as I don't have internal m.2 port my initial idea was to buy a PCIe adapter to add an m.2 ssd. So now, I need to choose between add the PCIe for more storage or to add the cache

[Unraid drops my usb box from the array]

4 minutes ago, trurl said:

The only difference between eSATA and SATA is the connector on one end of the cable. If you have a free SATA port you can get a SATA > eSATA cable

Nope, it doesn't have internal sata  https://h20195.www2.hpe.com/v2/getdocument.aspx?docname=a00073554enw I think I made the worst purchase ever in my life

[Unraid drops my usb box from the array]

Ok thanks for the advice

[Unraid drops my usb box from the array]

Just now, Lindworm said:

You could try to use an external housing with eSata or with Thunderbolt. I use a thunderbolt one and its working fine.

But this microserver doesn´t have eSata either Thunderbolt and the only PCIe that have I will use for a cache nvme disk

[Unraid drops my usb box from the array]

1 hour ago, trurl said:

Multiple disks on one connection is going to be a serious bottleneck for parity checks, rebuilds, etc. All disks must be accessed simultaneously for those.

 

And as noted, USB is a bad idea anyway.

Then do you have any idea to expand my storage capacity? I have a HPE Microserver GEN10 Plus.

[Unraid drops my usb box from the array]

2 hours ago, trurl said:

Why are you even bothering with those small external disks anyway?

This was test disks, I was thinking of bought 10TB disks to expand my storage capacity. I don´t know if the reason for the drop is because the box put the disks to sleep

[Unraid drops my usb box from the array]

Hi,

 

I have a USB box with 5 disks connected to Unraid by USB, it was working fine but now my disks are dropped from the array. I have attached the logs and an image with the array and the External USB's dropped as unassigned devices.

 

Has something similar happened to anyone?

 

 

Logs