• UniFi Controller on a Synology

    I've been using Ubiquiti's UniFi wireless access points for a few years around home. Until now I've only used the UniFi Controller application on an as-need basis (when setting the configuration or installing updates). But having the Synology DS1621xs on hand gives me an opportunity to try out its Docker support and in particular being able to run UniFi Controller continuously in a Docker container on the Synology.

    UniFi Controller screenshot

    I say 'UniFi Controller' but I gather that as of version 6.2 they've renamed it to 'UniFi Network Application'. Same software, just an updated name.

    Installing Docker on the Synology

    1. Open the Package Center
    2. Select All Packages and scroll down to the Third-party section
    3. In the 'Docker' package click Install

      UniFi Controller screenshot

    4. When installation has completed, the button changes to Open. Click on it to open the Docker UI.
    5. The first time you open Docker a welcome screen message is displayed. Select Don't show this again and close the message.
    6. Docker is now running on your Synology

    UniFi Controller screenshot

    Installing UniFi Controller

    1. Select the Registry page.

      UniFi Controller screenshot

    2. In the search bar enter unifi and click Search.
    3. Double-click on the jacobalberty/unifi image.

      UniFi Controller screenshot

    4. You now need to select a tag. Review the options to understand what the different tag values mean. (Choose latest to go with the latest stable version).
    5. The image is now being downloaded.
    6. Go to the Image page.
    7. When the download has completed, the Launch button will be enabled. Click on Launch.
    8. If desired, you can customise the Container Name.

      UniFi Controller screenshot

    9. Select Enable resource limitation.
    10. Click on Advanced Settings.
    11. Select Enable auto-restart.

      UniFi Controller screenshot

    12. Select Volume tab and click Add Folder.
    13. Select the docker folder and then click on Create Folder.
    14. Enter unifi and click OK.
    15. Click Select.
    16. In the Mount path column, enter /unifi. (See Volumes for volumes used by this image).

      UniFi Controller screenshot

    17. Select Network tab and select use the same network as Docker Host.

      UniFi Controller screenshot

    18. It is recommended to not run this image as root. Go to the Environment tab.
    19. Change the value of RUNAS_UID0 to false.
    20. As we will be binding to a port > 1024, we can also set the value of BIND_PRIV to false.

      UniFi Controller screenshot

    21. Click Apply.
    22. Click Next.
    23. Review the Summary details, then if they look correct click Apply.

      UniFi Controller screenshot

    24. Select the Container page.
    25. You can see the UniFi image is now running in a container.

      UniFi Controller screenshot

    If you have the Synology Firewall enabled, you will need to allow access to the application, the port needs to be opened in the Synology Firewall. In my case because I hadn't exposed the Synology directly to the Internet, the firewall was disabled. I figured it was probably a good idea to enable the firewall.

    From the Ports documentation there are a number of TCP and UDP ports to select.

    1. Go to the Synology main menu and select Control Panel.
    2. Select Advanced Mode and click on Security.
    3. In the Firewall tab, select the custom profile and click Edit Rules.

      UniFi Controller screenshot

    4. Click Create and under Ports select Custom and then click on Custom.
    5. Ensure Protocol is set to TCP.
    6. In the Ports field enter 8080,8443,8843,8880,6789.

      UniFi Controller screenshot

    7. Click OK, and OK
    8. Click Create and under Ports select Custom and then click on Custom.
    9. In Protocol select UDP.
    10. In the Ports field enter 3478.

      UniFi Controller screenshot

    11. Click OK, and OK
    12. Click OK to save the firewall profile changes.
    13. If it is highlighted, click Apply to save firewall changes.

    Accessing UniFi Controller

    1. Navigate to https://your-synology-box:8443/ (replacing your-synology-box with the DNS name of your Synology).
    2. As the UniFi Controller comes with a self-signed TLS certificate you'll need to tell your browser to trust the certificate.
    3. After this you should see the UniFi start-up wizard. If this is the first time you've used the software, proceed through the wizard following the steps. Alternatively (like me) if you're migrating from another installation you can click the or restore setup from backup to upload a back from the old system.

    UniFi Controller screenshot

    And with that you should be good to go!

    Final thoughts

    The ability to run Docker containers on a Synology is a great advantage. The UI is easy to use but flexible enough to allow you to run useful Docker images. Do check out my review of the DS1621xs, and check it out on amazon.com or amazon.com.au

    Acknowledgements

  • Passed AZ-204

    I just passed the Microsoft Exam AZ-204: Developing Solutions for Microsoft Azure, which qualifies me for the Microsoft Certified: Azure Developer Associate certification.

    Microsoft Certified: Azure Developer Associate badge

    View my verified achievement from Microsoft

    If you take a look at the skills measured for this exam, it really does cut across a lot of Azure technologies. I hadn't had deep exposure to all of those even though I've been using Azure a lot lately. So to maximise my chances in the exam I also spent time complementing my hands-on experience with some learning and training content:

    1. Completing all the learning paths listed under Microsoft Learn's AZ-204 Two ways to prepare heading.
    2. I also reviewed all the content in Pluralsight's Developing Solutions for Microsoft Azure (AZ-204) certification path. Use this link https://referral.pluralsight.com/mQlUV3B to get 50% off your first month or 15% off an annual subscription!

    Like my previous exam in January I took this one at home. One slight hiccup was that despite Pearson VUE's website clearly saying an external monitor, keyboard and webcam are acceptable as long as your laptop lid is closed (mentioned under 'Make sure you have the right equipment, Required if using an external monitor with a laptop'), the proctor insisted that was not allowed. I wasn't going to argue but it was a bit confusing.

    I'm thinking the next exam on my list might be AZ-400: Designing and Implementing Microsoft DevOps Solutions, as when that is combined with today's effort I'll be eligible for the Microsoft Certified: DevOps Engineer Expert certification.

  • Which Western Digital Red 4TB NAS hard disk should I buy?

    Back in April I mentioned purchasing two Western Digital Red NAS 4TB hard disk (Model WD40EFRX).

    I'm thinking about buying another one or two similar drives, but on closer inspection I noticed that there's a few different WD Red 4TB drives to choose from.

    Western Digital Red 4TB SATA Drives

    Model number Transfer rate Internal rate Cache RPM Recording Technology Approx. Date Spec sheet Amazon AU Amazon US
    WD Red WD40EFAX 6 Gb/s 180 MB/s 256 MB 5400 SMR Aug 2020 Link AUD134 AUD127
    WD Red Plus WD40EFRX 6 Gb/s 150 MB/s 64 MB 5400 CMR May 2014 Link AUD165 AUD273
    WD Red Plus WD40EFZX 6 Gb/s 175 MB/s 128 MB 5400 CMR Jan 2021 Link AUD163 AUD162
    WD Red Pro WD4003FFBX 6 Gb/s 217 MB/s 256 MB 7200 CMR Sep 2020 Link AUD217 AUD192

    Notes:

    • Prices were at 15th July 2021, and were captured in Australian Dollars (your currency may differ). Click through to the links to get the latest price. Most Amazon links above are affiliate links.
    • Dates are from the oldest specification sheets I've found for that model.
    • Recording technology: SMR - Shingled Magnetic Recording, CMR - Conventional Magnetic Recording. More info

    I also found a useful overview of the Red, Red Plus and Red Pro lines.

    Looking at that data it does look like for the 'Pro' line the WD40EFZX represents better value, but for the home enthusiast the WD40EFAX seems reasonable.