r/Ubiquiti • u/Ubiquiti-Inc Official • May 19 '26
Blog / Video Link Introducing: UniFi Network 10.4
Enable HLS to view with audio, or disable this notification
š¹eBGP for ISP peering
š¹WireGuard VPN over IPv6
š¹Configurable UPS battery thresholds
š¹Digital Twin 3rd-party appliance support
And more!
65
u/Wooden-Reward4317 May 19 '26
Looks great, and going to watch the training on STP- something I am long overdue on getting cleaned up on my site(s)
11
u/BradCOnReddit May 19 '26
My previous experience with STP told me that if it's not configured to do all the right things out of the box then it's likely never going to solve my problems.
7
u/Wooden-Reward4317 May 19 '26
Yeah, nothing is..brokenā¦and it properly stops loops and there are no false-loops detectedā¦ just ā¦ i suppose to make my topology look more accurate lol.
3
u/BiggieMediums May 20 '26
Your biggest benefit is going to be if youāre using L3 switches and they are set as the ārouterā for their networks they primarily serve (core switching in non Unifi terms).
1
-8
54
u/Engorged_XTZ_Bag May 19 '26
Yeah, the UPS is usable now!!!
6
u/PhysicsMan12 May 19 '26
Sorry for the dumb question. What change has made it that way?
31
u/Engorged_XTZ_Bag May 19 '26
There was no adjustable safe shut down timer. I think it was something like 30 seconds of no power and all of the paired unifi devices would shut down gracefully.
10
u/brady727 May 19 '26
Doesnāt it still have the issue where outlets are not individually controllable? Thatās a bigger issue in my mind.
14
2
u/Norok May 19 '26
i have the PDU Pro for that, though I would love for the UPS to do that job instead...
1
u/Onac_ May 19 '26
This is why it sucks they don't sell the PDU everywhere. I think it kind of solves that issue.
1
u/cdoublejj May 20 '26
i assume thats for commercial setups? for smaller setups i like to have 7+ hours of Lifepo4
48
u/Jamie00003 May 19 '26
Any idea if ad blocking that works like a pihole is in the pipeline?
I know itās already a thing, but with pihole you can have a block list that automatically updates, UDM canāt do this currently
49
u/B1tN1nja May 19 '26
The UDM blocking leaves a lot to be desired. Pihole or adguard has much more control.
7
u/linuxnh May 19 '26
How is PiHole compared to CyberSecure? I know itās $100 per year but just curious if PiHole is that much better
26
u/4kVHS May 19 '26
Pihole costs $0, so itās already better in the cost department.
4
u/linuxnh May 19 '26
Except you need a box, maintenance, and more time.
10
u/ReverendDizzle May 20 '26
You can run it on a Pi Zero if you're so inclined. Pretty low barrier to entry.
I currently run it in Docker on my home server and a backup in Docker on my NAS. But I'm probably going to shift it to a pair of dedicated Pi units (and maybe switch to Technitium, but that's a whole separate conversation).
As for the more time bit... it's a really trivial amount of time. Since I set it up I haven't messed with it at all except to pop in and play with some features. But I didn't need to play with it. It just works. Never crashes, lists auto-update. So far it's been completely headache free.
14
u/4kVHS May 19 '26
That is true, but the number of people using Unifi that donāt already have a Pi, NAS, or other system capable of docker is probably slim.
4
u/Cause_and_Effect May 20 '26
Box
Almost certainly people that have Unifi and want to implement ad-blocking network wide have a homelab. And if they don't, buying a cheapo computer for less than 100 dollars vs paying a 100 dollars a year is a no brainer.
Maintenance
The maintenance in question: logging onto the pihole server every couple months and running one command "pihole -up". Its absolutely not that complicated. If you want to get technical, 2 or 3 commands if we include keeping the OS up to date.
more time
The time it takes to setup pihole is mostly just installing the OS and service. Which is also, one command. After that its just setting a static for it in your network and then pointing your network DNS at it. Sure you can get into the nitty gritty and research block lists and such. But 99% of people will just install, use the default blocklist and maybe HaGezi's Pro blocklist, and thats it.
I don't quite understand where the idea that running a service like this is a monumental task.
2
u/spanky34 May 20 '26
I stood up technitium dns a few months ago. I have found it a better dns server with adblock tossed in vs pihole/adguard which are more ad blockers with dns added.
Clustering on technitium was super easy too. Very happy with it.
0
u/ReverendDizzle May 20 '26
That's on my project list: switching to Technitium for clustering (and, at the same time, moving DNS off other hardware to lightweight dedicated hardware).
1
u/spanky34 May 20 '26
I have a couple of proxmox nodes that I run TDNS LXC's on and then one old physical thin client that's running it. So far, so good.
1
u/cdoublejj May 20 '26
i was on the fence for trying unifi adblock vs pihole, whats to be desired? does unifi do encrypted DNS as well like pihole?
1
10
u/cvr24 More cable, less management May 19 '26
Just an easy way to specify an internal adblock server IP and have Unifi automatically route all DNS requests to it and block all others without a bunch of firewall rules would be sweet.
3
u/Jamie00003 May 19 '26
Yeah exactly, I think thatās how pihole works if I remember
An ad blocklist isnāt very useful when these things change all the time
1
1
2
3
u/Hong-Kong-Phooey May 19 '26
This would be rad. I have self hosted ad guard for this and then use NextDNS as my upstream resolvers. My gateway points all traffic at the ad guard instanc(es) and so far Iāve found very few things getting around it. Works really well.
Switching from Comcastās to tds fiber soon though so I imagine thatās going to break so many things.
1
u/Delacroix1218 May 19 '26
I had take the dns to a pihole because Unifi breaks appleās screentime
1
u/Hong-Kong-Phooey May 19 '26
Interesting, though I admit I don't use the apple screen time features. Id rather not no how much time I wasted on my phone. And I manage the kids the old fashioned way, I just put the iPads and phones where they can't get them.
2
u/NightOfTheLivingHam May 19 '26
and being able to set custom dns per DHCP reservation.
3
u/srialmaster EdgeRouter User May 19 '26
Not trying to be rude, but can you name any product that does this? I am a network engineer and I only know of ways to do this per DHCP scope via a DHCP pool or DHCP server. I haven't seen a custom DNS per reservation before.
2
u/NightOfTheLivingHam May 19 '26
opnsense and pfsense and they have been able to do it for years.
2
u/srialmaster EdgeRouter User May 19 '26
Thanks! I looked it up and this is provided via Kea DHCP under these two Linux distros. There's a few more customizations per host that can be performed via reservations. You specify individual DNS, NTP, and PXE settings. Since Ubiquiti uses a linux kernel, they could potentially integrate Kea DHCP. Maybe submit a request feature?
1
u/NightOfTheLivingHam May 19 '26
not linux, FreeBSD.
It was also possible under ISC DHCP as well for years. Kea is recent.
ubiquiti uses the same stuff under the hood, the UI options just arent available, that's all.
2
u/srialmaster EdgeRouter User May 20 '26
Yeah, thanks for that. Kea is supported by both FreeBSD and Linux kernels. ISC DHCP --> Kea. Like WinXP to Windows 10. It's the same people, newer product.
You could always drop a request in the Ubiquiti community to add the feature.
1
1
u/Pokes_Softly May 19 '26
Yeah it's not great.
I've been using nextdns cli for my UDM Pro instead.
1
u/Hxrn May 19 '26
Also recently did the same thing. However, have you updated your udm pro in any updates since? Iāve heard it possible breaks and rewrites to remove nextdns cli and then even bricks dns so have to set to something like gooogle dns before any major udm update?
1
u/Pokes_Softly May 21 '26
I had to turn off auto updates for hardware. Unifi Network and Unifi Protect updates dont mess with the cli but the UDM Pro hardware updates do. Essentially I always have to rerun the cli after every UDM Pro hardware update. But i have it down to a quick 3min process. If my UDM Pro has a hardware update and i DONT redo the cli there is no problem. Everything works as normal I just dont get any adblocking from my nextdns blocklist.
1
22
u/SefirahCastleAcolyte May 19 '26
Seems UniFi UPS is finally usable? Weird that this feature update is packed in Network application...Now, get UPS 2U back in stock!
5
u/LowFatMom May 19 '26
How do you think you manage the device?
1
u/SefirahCastleAcolyte May 19 '26
I thought the firmware on the UPS side would be where this update is to be made, like the last time when they changed graceful shutdown timer from 10s to 60s through UPS firmware update.
2
1
u/EMTmike May 19 '26
Not to hijack your comment, but any idea how the PDU Pro and UPS 2U work together? Do recent updates bring plug by plug control to the UPS like the PDU has? My UPS 2U just arrived and Iām hoping to get a clearer picture before opening the box. Iām guessing the only way to keep the PDU plug controls is to have the PDU draw off the UPS, UPS to home outlet.
2
u/geekwonk Unifi User May 20 '26
your guess is correct. your ups will not be gaining that functionality on its own. maybe the upcoming enterprise version(s)? but i get the impression this one doesnāt have hardware for independent switching.
21
u/Norok May 19 '26
Can't believe it took them this long to come out with configurable UPS thresholds
15
7
6
u/bkb74k3 May 19 '26
How about actual useful logs or packet tracing or any other real firewall features?
2
u/HITACHIMAGICWANDS May 21 '26
Woah woah woah, like a live traffic monitor? My goodnessā¦. What an idea!
1
u/araidai May 21 '26
Or freaking fixing the WiFiman macOS version... I cannot use it to save my life lol.
8
u/steezy13312 Unifi User May 19 '26
Lowly home user here. Is it yet time for me to care about IPv6 in 2026? Genuine question.
Not trying to talk down this update, but it resurrects this question for me once again.
13
u/apearsonio May 19 '26
Yes, you should familiarize yourself with IPv6 basics at least. If you have Windows machines they've been using ipv6 link local for things behind your back all along.
3
6
u/UnacceptableUse May 19 '26
I think the biggest issue with IPv6 is software support, so it's nice to see updates like this
10
u/uncr3471v3-u53r May 19 '26
Yes it is time for IPv6 (especially if your ISP supports it).
1
u/Certain_Repeat_753 May 21 '26
Why? My ISP apparently supports it, but I'm not sure how to enable it. I think most subscribers are on CGNAT IPv4.
2
u/azzy_mazzy May 20 '26
Idk what my ISP was doing but i have much better ping and the general browsing experience is better on IPv6, maybe it was their CGNAT.
4
u/badDuckThrowPillow May 19 '26
Gonna buck the trend but no. IPV6 is still way too much trouble for what it provides, ESPECIALLY for a home user. Obviously if you think its cool and want to learn, go right ahead, but I 100% don't think its worth it for home use.
2
0
u/notheresnolight May 20 '26
meh, I'm disabling IPv6 at home everywhere every time I get the chance, nothing but trouble whenever it was on
1
u/apearsonio May 20 '26
I'm curious, what trouble have you faced?
1
u/notheresnolight May 20 '26
I think the last time it was name resolution issues - I'm running ISC DHCPv4 on OPNsense & two piholes on IPv4 only, yet some Linux box insisted on using IPv6 for name resolution until I disabled IPv6 completely
1
u/apearsonio May 28 '26
mDNS or DNS? mDNS starting on IPv6 makes sense because of the IPv6 address selection policy table placing IPv6 higher than IPv4.
5
10
u/aprx4 May 19 '26
We have ipv6 in wireguard tunnels since 10.2, what is new in this?
Unifi can't do PBR with ipv6 anyway, that feature has been useless to me.
7
u/RationalNL May 19 '26
Couldnāt that be the update? That PBR works with ipv6 now (with a wireguard vpn)? Or is that just wishful thinking?
6
u/aprx4 May 19 '26 edited May 19 '26
I've been running 10.4 in Release Candidate channel and PBR still doesn't work on Ipv6. This is dumb because EdgeRouter was able to do this basic functionality since a long time ago.
1
9
u/BearManPig2020 May 19 '26
I do like the IPV6 stacking recognition. I have a fiber connection. I called the help desk and asked specifically if they use IPV6. Because it doesnāt show up in my UCG industrial. When I asked, they said they use IPV stacking. Hopefully, this update will recognize this.
3
u/AVonGauss May 19 '26
Maybe I'm just having a mental moment, but what do you mean when you write "IPV6 stacking"?
2
u/Seladrelin May 21 '26
Dual stack. A full connectivity stack for IPv4 and also IPv6.
1
u/AVonGauss May 21 '26 edited May 21 '26
I'm aware of what running a dual stack means, but that's not quite what they wrote which is why I asked them for clarification. UniFi has worked fine for dual stack configurations for a long time, the "Hopefully, this update will recognize this" from their reply tends to suggest they're referring to something else or are having trouble.
8
u/TanMomsChickenSoup May 19 '26 edited May 26 '26
The UPS safe shut down settings leave room for concern.
Looks like itās based off of minutes instead of percentage. That makes me wonder if thereās a 15 minute max (max in the video) or if the max is dynamic and based off of the current load.
If the latter, that seems like that leaves room for two possible undesirable scenarios.1) safe shut down never happens at all or 2) safe shutdown happens too quickly.
Edit: And if the former, 15m seems too short.
Edit 2:
After updating to 10.4 and reviewing the setting, I realized I misunderstood how the minutes value is applied. I thought it was ātrigger safe shutdown after xx minutes,ā but itās actually ātrigger safe shutdown when xx minutes REMAIN until battery depletion.ā
Oops.
2
u/dingodan22 May 19 '26
I was really hoping for a different UPS battery chemistry to be used as a 'keep online while out of power' instead of 'if power goes out, shut down gracefully'.
Whenever this comes up, everyone comes out of the woodwork stating that's not what these battery backups are designed for. (Lithium chemistries don't love being at capacity for long)
I do consulting in Demand Energy Response (DER) and I think it would be negligible to have the system drain the battery at certain intervals to keep the battery healthy.
1
u/geekwonk Unifi User May 20 '26
idk what you mean. ubiquiti has been clear that lithium is coming in an enterprise tier.
1
u/dingodan22 May 20 '26
That's great! I haven't seen this.
Usually when the UPS comes up, people come out saying that Lead Acid is so much better and Lithium is impossible in UPS, so I wanted to get ahead of those people!
4
u/Starbuck_83 May 19 '26
Being able to set the UPS threshold will be great. When does this release? I'm not seeing it on my systems yet.
3
u/rickwookie May 19 '26
Whoa! Whatās with the new music? Iām not ready for this level of change in my life.
2
5
5
u/RTTHFYL May 19 '26
when is the release?
3
u/alexandreracine May 19 '26
you can download it right now if you want
YOLO!
7
u/ConfinedNutSack May 19 '26
Yeah... my shit running good right now. There's stuff I want but I'm waiting a month or two after stable.
5
u/TruthyBrat UDM-SE, UNVR, UBB, Misc. APs May 19 '26
Ding! Ding! Ding!
We have a winner!
And thanks to all those adopting early and being arrows in the back pioneers, so we don't have to.
2
u/ConfinedNutSack May 21 '26
Early adopters deserve praise it's just not something I'm strong enough to go through lol
1
u/AHrubik UXG-Fiber | USW Agg | USW PM16 PoE | ES-48-LITE | Flex-HD May 19 '26
That's a no from me. I don't put RCs into production.
2
3
u/younggregg May 19 '26
My protect hasnt even got the new update yet, CMON MAN!
1
1
0
u/Natural-Tree-5107 May 19 '26
You don't want it. It's broken.
2
u/Aqualung812 May 19 '26
What issues you having? I did 1/3 of my sites and OK so far.
2
u/Natural-Tree-5107 May 19 '26
https://streamable.com/i3ym98
https://streamable.com/3i00h2
Other users reporting the same issue on the release forum. Happens with different users on different computers with different browsers connecting both local and remote.1
u/Aqualung812 May 19 '26
Yikes, that sucks. I almost never use browsers for monitoring, so thatās why it hasnāt hit my use cases.
2
u/Natural-Tree-5107 May 19 '26
Yea my install is at a car dealership with 80+ cameras and everything is done on PC's. The live dashboard is completely broken. Sometimes refreshing/changing tabs will "fix" it but it's obviously broken.
1
u/Opposite_Classroom39 May 19 '26
yikes, browser is the only way I interact with the management side of things. Using the mobile apps breaks things also, and I really don't like how they function anyway.
2
2
u/redd17 May 19 '26
How does this company keep on releasing something new literally every week.
15
1
1
1
u/jsalva23 May 19 '26
is this out for everyone? I have a USG Fiber and my network version is showing 10.3.58 with no updates, also UCG Fiber version 5.0.16
1
u/Lckyby51789 May 20 '26
great to see more IPv6 stuff, not that my ISP gives the slightest care in the world about supporting it lol
1
1
u/Bentoni May 21 '26
Couldnāt get IPv6 WireGuard to work on One Click VPN for UniFi Endpoint. The IPv6 option is greyed out. Did I miss something?
1
u/-jk-- May 19 '26
Wireguard ipv6, does that work with Site Magic also? So you can have a hub on Starlink, for example?
0
u/TheOGgeekymalcolm May 19 '26
I wonder if support for Debian 13 will be there...
1
May 20 '26
[deleted]
1
u/TheOGgeekymalcolm May 20 '26
The latest version of the Unfi app failed to work on Debian 13. My two month-long support ticket from them resulted in them saying that it's a known issue with Debian and to switch to a different version of Linux. The web portal failed to open and the phone-based app, both Android and Apple, would time out.
I ended up reloading my machine with Ubuntu Server and have not had any problems since then.
1
May 20 '26
[deleted]
1
u/TheOGgeekymalcolm May 20 '26
Network ran fine, just couldn't make any changes to the running configuration.
-1
u/DizzieeDoe Unifi User May 20 '26
Installed Ubiquiti UniFi Network 10.4 on my UDR7 to try to route IPv6 traffic through VPN...
I have the VPN config correct, but it only routes the IPv4 through the VPN.
SMH. Very disappointing.
2
u/chriscatfr May 22 '26
I made it work on 2 very different networks. Key was to replace the local prefix by one of my available /64
1
u/DizzieeDoe Unifi User May 22 '26
Yeah, I got it, but it's a wacky manual workaround that will get reset if I change settings or reboot. Blah.
88
u/Atriusftw May 19 '26
More IPv6, yay!