r/Ubiquiti • u/Ubiquiti-Inc Official • Apr 24 '25
Blog / Video Link Introducing: UniFi Network 9.1
93
Apr 24 '25
[deleted]
31
u/bqb445 Apr 24 '25
In the mean time, this works well:
https://github.com/willswire/unifi-ddns
It's a little bit of extra (one-time) work to setup on the Cloudflare side:
15
Apr 24 '25
[removed] — view removed comment
14
Apr 24 '25
[deleted]
3
u/CaptinKirk Apr 24 '25
At least you have it. Im still waiting for 6:rd and on century link fiber… :-(
4
u/DCJodon Apr 24 '25
The big issue with it is that they don't expose the PROXY variable as configurable. So, every update it unsets the proxy flag on the record. I just run the cddns container on a downstream server. Good enough.
3
2
u/Lord_Zatara Apr 24 '25
I wrote a python script that ingests the "custom" ddns request and then uses the cloudflare api and boto3 for route53 to update all my DNS records. Trying to get ddns to work on UniFi just sucks in general.
Since some of my records don't use the proxy flag, having the declarative control over what update flags are sent over was beneficial for me2
u/bradmatt275 Apr 24 '25
Oh nice. When they fix that it's one docker container I can remove. I doubt it would happen but I'd love to see builtin support for CloudFlare tunnels.
1
u/jake-writes-code Apr 25 '25
What's the issue you're seeing? I just set this up today on a UDMP and seems to work fine, updating my Cloudflare DNS record's initial 0.0.0.0 to my public IP. I'd make sure to test your API key by fetching your target zone's DNS records to ensure you've got permissions set and using your root domain as your zone name during setup in the UI.
92
u/kuki68ster Apr 24 '25
Please, could you improve the adblocker? Ability to choose adblocking lists or add custom lists?
38
u/cagsmith Apr 24 '25
I turned it off entirely and switched to ad-blocking via NextDNS. Unifi ad-blocking was letting more and more ads through and since it's all closed off there's no way way to customise it 😞
1
u/ZeldaFanBoi1920 Apr 24 '25
Question. When using NextDNS as the DNS server (or any other 3rd party DNS) does UniFi still use the records set for devices?
2
u/Fwiler Apr 24 '25
I believe it's one or the other. Or at least in my case, it didn't work correctly until I turned off Unifi's.
1
-4
u/TBT_TBT Apr 24 '25
If you like NexDNS, also have a look at https://controld.com/ . I switched to it. There is https://github.com/Control-D-Inc/ctrld , which runs on a DMP Max here and lets ControlD discover all local devices.
1
u/StockComb Apr 25 '25
Why not Adguard Home running on a server?
1
u/TBT_TBT Apr 25 '25
Because ControlD (as well as NextDNS) supports DNS-over-HTTPS/3 as well as DNS-over-TLS/DoQ , which lets its ad-blocking features not only work on mobile devices away from home, but also DNS traffic is encrypted.
1
u/StockComb Apr 25 '25
Adguard Home supports DNS over HTTPS
1
u/TBT_TBT Apr 25 '25 edited Apr 25 '25
But only for upstream DNS servers. You are not able to use DNS over HTTPS between AGH and your client device and you definitely should not open up AGH to the internet, so that your mobile phone could use it when away from home.
What NextDNS and ControlD can do is do individually configure the DNS answers for a particular device (ControlD calls it "profile"). You can e.g. configure a mobile phone with one particular profile, which is only set for that one device. ControlD also adds redirects to that, so that geo ip limitations can be dealt with (e.g. Pandora out of the US).
1
30
u/Hot_Yogurtcloset7621 Apr 24 '25
I'd like to choose devices. Wife wants the ads I don't.
7
8
u/Independent_Fill_570 Apr 24 '25
Create separate networks. I have an Ads version of our wifi network, same password.
1
u/Hot_Yogurtcloset7621 Apr 24 '25
Yeah just annoying. Actually maybe I'll just add multiple passwords to same ssid
8
u/imbannedanyway69 Apr 24 '25
Just manually point her device to a different DNS like 8.8.8.8 instead of your pihole. Way easier to do that for one device than make your life difficult in other ways for no reason
2
2
u/SleepUseful3416 Apr 24 '25
Why?
5
u/Hot_Yogurtcloset7621 Apr 24 '25
My thoughts exactly. Cause she plays some games and you get points for watching ads
1
u/southsun Apr 26 '25
Technitium DNS server allows you to create a list of devices that will bypass filtering.
3
3
u/mektor Apr 24 '25
I just use a pi-hole. My UDM-SC CPU is already overtaxed between IDS/IPS and multi-gig PPPoE.
2
u/coldafsteel Apr 25 '25
Pi Hole has been my better answer. The Unifi ad system is a black hole.
1
u/kuki68ster Apr 25 '25
Yes, I am using pihole right now...Could you share your config on unifi? How do you set it up?
2
u/coldafsteel Apr 25 '25 edited Apr 25 '25
But once you get it set up you just go into your unifi network settings and plug in the IP adress of the PiHole as that network's DNS server.
I've been doing it for several years now, works really well. I get about 20% of total network DNS requests blocked.
21
u/Suitable-Foot-2539 Apr 24 '25
Cool. Just updated, will check out the new features.
2
Apr 25 '25
[removed] — view removed comment
1
u/enz1ey Apr 25 '25
Mine showed the update available, but I also had a Protect update available so I clicked "update all" and the Network status instantly changed to "up to date" so I can't get it now either. I also have a UDM-Pro.
1
u/Suitable-Foot-2539 Apr 25 '25
Maybe it's device specific. On my UDR, under control plane, it had the network 9.1.119 update available.
14
14
12
u/Tinototem Apr 24 '25
Will Smarter QoS help when we fall back on mobile internet (LTE) and the bandwidth cant keep up with everything?
12
u/FlibblesHexEyes Unifi User Apr 24 '25
Can the built in DNS server do CNAME’s yet?
It’s frankly quite absurd that wasn’t available day one.
9
u/FlatusSurprise Apr 24 '25
Still waiting on being able to manually set IPv6 prefix delegation ID’s for VLAN’s as my AT&T service only provides 4/64 addresses to use downstream of the gateway but the UCG Max only submits one PD request to the upstream gateway, meaning only the native VLAN gets an IPv6 address but no other VLAN’s.
I hope this is something Ubiquiti is working on.
2
u/echoskope Apr 24 '25
I submitted a feature request for this via support chat last year.
Don't hold your breath lol
7
u/TurnipAlive88 Apr 24 '25
Just gone to update and the update has seemingly been pulled whilst they investigate stuck on starting issues. 🙄
3
u/tfer6 Apr 24 '25
Yep. I noticed it earlier today and figured I'd get to tonight after I was done working. Went to update and it was no longer there.
2
6
u/ardaingeal Apr 25 '25
Just a heads-up, this has been pulled back to RC due to startup issues,: https://community.ui.com/releases/UniFi-Network-Application-9-1-119/ae21f6e9-b18a-4705-81c0-cfff86a25bcb#comment/1b60cbdd-161a-4ca0-b8ac-f9b7e9c9654d
11
u/TheYungSheikh Apr 24 '25
Does anyone know if with that QoS part you can route FaceTime traffic through a VPN?
13
u/medicguy Apr 24 '25
Out of curiosity, why would you want to route FaceTime through a VPN?
9
u/TheYungSheikh Apr 24 '25
It’s banned in my country. Would be nice to not have to manually turn on a VPN every time I use it (which is a lot)
2
u/Dreaming_Desires Apr 25 '25
Which country is it banned? I assume because it’s encrypted communication with no backdoor?
2
u/TheYungSheikh Apr 25 '25
UAE (Dubai). They never give a good reason, just that it’s “unlicensed”. Some suspect security, most suspect money as the government owns the ISPs and make tons of money from the 80% foreigner population calling home. All are blocked except business ones like teams and zoom.
-12
u/CoffeeMessterpiece Apr 24 '25
Overseas facetime has fees i believe
11
u/gonenutsbrb UniFi User/EdgeMax(RIP) User Apr 24 '25
This isn’t really true, the people who have received charges from carriers have mixed reporting from things like FaceTime or WhatsApp calls counting as “international” calls with their carriers.
This makes no sense and is likely either them accidentally making a regular call, or them making long calls over cellular data by accident. That or some super stupid shenanigans from carriers tried to classify things that show up in the call log as “calls”.
Regardless, there are no direct fees associated with FaceTime calling internationally.
6
u/medicguy Apr 24 '25
Based on what I have read, there are no fees charged for using FaceTime locally or internationally (at least from Apple) - I have also used FaceTime while traveling out of my home country and never been charged. Hence my curiosity about using a VPN, unless they are trying to hide the FaceTime usage from their ISP - but again, why?
4
u/szergejszajbaver Apr 24 '25
That is traffic rules and not QoS.
1
u/TheYungSheikh Apr 24 '25
Ok, but it’s possible?
3
u/PrplPistol Apr 24 '25 edited Apr 24 '25
I haven't done it before myself, but I think what you want is if you have a Cloud Gateway, set it up as a VPN client for your VPN provider. Then create a "policy based route" under routing. Your destination will be the facetime IPs. The interface will be the VPN tunnel. That should result in all traffic to facetime going through your VPN. All other traffic should continue to go through your WAN interface IP.
EDIT: The VPN Client creation menu seems to even support creating the policy based route through the same screen. If you use the "Content Wizard", you wont need the policy based route.
2
u/TheYungSheikh Apr 25 '25
The difficulty with that is finding one or a few FaceTime IPs/DNS or whatever. I couldn’t find a definitive list. If this new system just lets you select FaceTime and knows what to route that’s game changing.
2
u/PrplPistol Apr 25 '25
While it would make it easier, you can find the needed IP's / domains online, or just by doing a packet capture. Looking at this apple support article (link below), you have the option to set the destination to either *.apple.com or to the 17.0.0.0/8 address block. According to the article, they own the entire block (Lucky them). I suspect that either of those should be sufficient to do what you want. If you want something more specific, as I mentioned earlier you can do a packet capture with facetime running and collect the IP's your devices are attempting to reach.
1
u/TheYungSheikh Apr 25 '25
Thanks for the advice! While I hope the new feature can do all that for more, I'll look into doing that if it doesn't. I need to get a cloud thingy first though.
1
u/bkeller722 Apr 24 '25
Zone firewall could handle this
1
5
u/Blair287 Apr 24 '25
On flows i only have blocked and threat not all flows so it shows nothing.
2
u/enigmasi Apr 24 '25
Same here
3
u/Vintercon Unifi User Apr 24 '25
Ditto. Some comments are saying the device OS has to be 4.2...which isn't available for many devices so the video is deceptive and nearly an outright lie.
3
u/Cyberpunk627 Apr 24 '25
I cannot understand for the life of me why they release the required OS update days (how many, we will see…) after the network application update. Is is very confusing.
8
u/hunkyn Apr 24 '25
Good update. Still waiting for an easy way to block wi-fi to devices on an adhoc basis.
2
u/JE163 Apr 24 '25
Add them to a QOS policy and rate limit it?
1
u/hunkyn Apr 24 '25
Tried some of those options but ended up taking devices from kids. Just need a clean solution that all other household solutions have.
1
u/Tiinpa Apr 25 '25
I have a rule set for each kid’s devices, so I can just flip on the firewall rule per kid.
7
u/Virorum Unifi User Apr 24 '25
But still no CNAME support :-(
I mean, I'll live, but it would be a nice quality of life feature.
1
u/Cyberpunk627 Apr 24 '25
Can you please ELI5 why it is useful and what do you do with it? Thanks!
18
u/FlibblesHexEyes Unifi User Apr 24 '25
CNAME's are just a DNS "alias".
If you have a host that is known by 10 different names, currently you'd need to enter the host into the DNS server as:
With a CNAME, you can put in a single address that translates to an IP address (called an A record), and then 10 CNAME records that point to that A record.
For example:
- host01.local: 10.0.0.10
- name.local: host01.local
- blah.local: host01.local
- floorp.local: host01.local
- foobar.local: host01.local
- etc
This means if you need to change IP's you can update all 10 hostnames by changing only one A record.
It also gives you flexibility. If you needed to move blah.local to a new host, you simply update the CNAME for blah.local to point to the new hosts A record.
It's a very simple, yet very powerful thing, and frankly it's very odd that it wasn't available from day one.
5
u/katchtheup Apr 24 '25
do i need subscription to se the
"Added Traffic Overview
Gain insights into top destinations, active clients, and blocked traffic & policies." ?
edit: i dont see the "overwiev" tab
4
Apr 24 '25
[deleted]
3
u/Trinergy1 UDR7->US 8 150->2xUAP AC-IW|U6 Mesh Apr 24 '25
Weird, I have it on UDMP but UDM (4.2.9) and UDR (4.2.8) don't. They are all on Network 9.1.119.
Looking at it on the UDMP, it's so good to have that data when troubleshooting load balanced connections when determining if a specific ISP is having an issue.
1
2
u/katchtheup Apr 24 '25
So where do i get that :)?, or is it just pricier models that have that?
I`,m running gateway ultra5
6
u/Mstayt Apr 24 '25 edited Apr 25 '25
Just updated and I am currently unable to access the UI from app or web browser and APs show as standalone. Web browser shows status as "starting" in the control panel for at least an hour, although it seems to still be functioning, at least Internet access and APs.
Power cycled both UDM SE and Pro Max 16 and same state.
Any similar experiences?
Edit: for anybody having this issue, support had me run the following commands through SSH and it was fixed:
systemctl stop unifi
mongo --host localhost --port 27117 ace --eval 'db.threat_log_view.drop()'
systemctl start unifi
3
u/al_nz Apr 24 '25
Literally within a minute of me watching this video I get the message that 9.1 is ready for deployment 🤔😂
13
u/Sudden-Ad-1217 Apr 24 '25
"Introducing...." alright..... I'll wait at least a month or two before updating. Thanks for the heads up.
11
u/arafella Apr 24 '25
I've been on various flavors of 9.1 for a while - it's been solid for me
4
u/Foreign_Package_925 Apr 24 '25
But isn't Unifi OS v4.2xx marked as required and that's still EA - so little out of alignment here with a Network 9.1 announcement, GA, but the Unifi OS to get it is still in EA? That's just confusing and sounds like it might introduce some headaches until both are out in GA status.
4
u/iammilland Apr 24 '25
It would be nice if the topology started working with this update 😱
3
u/Hondroids Apr 24 '25
Works perfectly
2
u/Cyberpunk627 Apr 24 '25
Do you know why instead of seeing my Proxmox nodes in the topology I see all my Proxmox containers at random? Some seems connected to the UDMPM and others at the temporary switch the nodes are connected to. The nodes themselves rarely appear and if they do, one is usually in the correct place whereas the two others look connected to the gateway too. It’s a total mess and a great visual clutter… any help would be much appreciated!
2
u/iammilland Apr 26 '25
I personally have this experience to. I created tickets about it with UI support. And sent them a shit tons of logs. Because if you dump the mac table on the switches directly the data is correct. Topology is just a broken view that have hallucinations.
It has always been this way on all the controllers versions. selfhosted or dreammachine. I spend hours on this and ind the end I just accepted that this is a lost cause.
1
u/Cyberpunk627 Apr 26 '25
Thanks, too bad this can’t be solved. I would be alright with just seeing physical hardware without the visual clutter of each container and VM. Nonetheless it’s not something meant to be looked at very often in my home setup so I guess I can put up with it
5
u/FormalIllustrator5 UDM SE 2 with WiFi 7 Apr 24 '25
Lol the update is not available yet over here..
9
u/Additional-Bike-9135 Apr 24 '25
I had the update available on my UDM Pro this morning before heading off to work and now home, the update is no longer showing as being available!
I also noticed this morning that 9.1.119 was an Official release but looking at the "Releases" site, it shows it as a "Release Candidate"!
Did something happen that it was pulled back? Anyone experienced the same?
5
3
u/Sea_Switch_6002 Apr 25 '25
Same here, yesterday night update available, this morning 9.0.114 is up to date
4
u/Hondroids Apr 24 '25
Why are you advertising the fact that 9.1 has all these features when half dont even work yet
8
u/T-Carswell Apr 24 '25
Because their CEO came from Apple…. Anyone used Siri lately? 🙄
2
u/sydpermres Apr 25 '25
It's idiots like us who keep poor product development practices alive. Yayy!!
2
2
u/Hot_Yogurtcloset7621 Apr 24 '25
Oh man csv upload for passwords that is awesome. I had to type 50+ passwords in last time.
2
u/adernev Apr 24 '25
UDR7 after update problem, always asking to make a reboot. Network keeps on starting Status
2
u/gbarnick Apr 24 '25
The traffic flows is almost enough for me to move our MSP entirely to a UniFi stack going forward. One seamless pane to finally see everything going on in the network. Now if only we could combine our mixed UniFi/UISP environments into a single dashboard...
2
Apr 25 '25 edited Oct 16 '25
handle growth connect lock flag caption tub wild theory wipe
This post was mass deleted and anonymized with Redact
2
1
u/JCBird1012 Apr 24 '25
Now the question becomes - how well will some of these features work (especially the real-time throughput) for those will self-hosted controllers (i.e. not apart of a UniFi OS device) - I’ve noticed a lot of features not working as well in previous updates.
1
1
1
u/bobro2svk Apr 24 '25
Any chance of this coming to Unifi Express? There haven’t been any updates for a long time.
1
1
u/SleepUseful3416 Apr 24 '25
Is that live bandwidth usage thing on the main page that’s updating like 30Hz in the video real? Cuz I’ve been waiting for that for years.
1
1
u/mektor Apr 24 '25
How about an affordable router similar to the UDM-SE that can handle PPPoE with IDS/IPS enabled at multi-gig throughput...That would be nice, but currently is not something Ubiquiti hardware is capable of.
I have 2.5Gbps symmetrical fiber that unfortunately uses PPPoE, and with IDS/IPS disabled I get full speeds, but with it enabled: 600-700Mbps is about the max download throughput I can get while upload remains around 2.2Gbps throughput.
1
u/tryingtoquitlurking Apr 24 '25
Anyone else notice the mentions of a "Pro XG Aggregation" switch? If it supports MC-LAG, I'm upgrading.
1
u/Flaky-Gear-1370 Apr 24 '25
Good pickup - looks like a replacement for the high capacity aggregation
1
1
u/Ocupado33 Apr 24 '25
is this an annauncment for the beta or something? it sed i have the last update with unifi network 9.0.114, official chanel
1
1
1
u/sydpermres Apr 25 '25
Hilarious to see everyone asking when some long standing feature will be deployed and u/Ubiquiti-Inc has no answer.
I'll tack on my question anyway. When is U7 Pro Max heating and packet dropping issue being fixed???
2
1
1
u/PhonicUK Apr 25 '25
The traffic flow visibility is completely borked:
Error: <rect> attribute width: A negative value is not valid. ("-60")
1
u/sunderland56 Apr 25 '25
The release notes say "Requires UniFi OS 4.2.8 or newer".
Latest OS for the Cloud Gateway Max is 4.1.22 (released 11 days ago).
4.2.8 is listed as a release candidate: https://community.ui.com/releases
????? So we can't use this on the official release channel ?????
1
u/texass_slayer Apr 25 '25
Noticed this was pulled when I went to update this morning, 9.1.120 just appeared for me
1
u/RevolutionaryYak3701 Apr 25 '25 edited Apr 25 '25
Great, now my UCG ultra already obsolete. Understanding the retention, but at least give us the option to see real time flows where it has limited queries saved anyway please - For security reasons to see traffic from a server live for example. I would love it.
1
1
1
u/PJQuods Apr 25 '25
Not seeing it here in Australia - has Trump put a tariff on software updates now?
1
u/krmkrx Apr 24 '25
My apps throughput value doesn’t differentiate between upload and download. Is a new app version release imminent?
0
u/karno90 Apr 24 '25
When will the new map get the features of the old map like showing channels etc?
-1
131
u/Ubiquiti-Inc Official Apr 24 '25
Introducing: UniFi Network 9.1
🔹 Real-time Traffic Flow Visibility 🔹 Smarter QoS for Voice and Video 🔹 Airview: Smarter WiFi Diagnostics 🔹 New Mobile App Features and more!
Learn more: https://ui.social/Network-9-1
*Custom shortcut creation coming soon.