This is a bit of a continuation from my previous post about Adguard. Because the whole reason I changed over to Adguard Home was to replace pfblockerng. Which meant I actually replaced my edge firewall with something new, the Unifi Fiber gateway. I wanted to write up a quick review on it an a high level recap.
I have 3 unifi AP’s, and a few Unifi protect cameras. I like it because I was able to consolidate my cloudkey gen 2 plus features into it. So the protect NVR, wifi/network management and Unifi management pane. Key things I used pfsense for that I needed in Unifi fiber, and it’s done them all so far.
Took me a hot second to figure out the new zones method you can do for firewalling and routing. But I am able to do all of the same fancy policy routing I was with pfsense. So specific devices go out specific wireguard VPN’s and pass dnsleak tests properly with a kill switch if the VPN goes down. I was also able to setup VLANS for my IOT, non internet devices and guest usesrs for wifi.
I also overall like being everything unifi now, that was the big push. I did lose pfblockerng, but I opted to go for Adguard Home, instead of pihole or technitium. Adguard had built in DOT/DOH for DNS lookups, so nothing in the clear, cause why give away DNS lookups to my ISP for free. It imported all of my block lists and started working immediately with minimal setup requirements actually. It also has much better reporting and a user interface over pfblockerng. So that was a nice upgrade.
The only thing I lost from my pfsense over unifi fiber was tailscale on the edge. I had to spin up a VM on my proxmox box to handle that. It works fine, but I always preferred having it on my edge.
Bonus points for when I get our 2gbps internet it’ll handle it like a champ. And hopefully I can SFP straight in without an ONT as others have done.