@@LiLBitsDK Yea look at the names Pro and Pro Max are apple naming stuff :P Could it havev been Tim that said one prevous Apple employee now works at Ubiquiti (Or something like that)
@@LiLBitsDK Backup SMB drives would be sweet. Surprised they haven't incorporated a NAS component to these. Btw, seems that 2 drives is sufficient for up to 8 cameras maybe
This is the best Pro Max review on TH-cam so far today. I bought one today. It will replace SE that is not handling 100 unifi devices, ~350 client devices and 5 vlans
This is a swing and a miss by Unifi IMO. How you gonna call something "Pro Max" and not have the switch ports be 2.5gbps? At least this doesn't make me regret purchasing my SE just a couple months ago.
My thoughts exactly. I was waiting for an upgrade with 2.5Gb switch ports and POE would have been a nice add. I'm still on the OG DM and not seeing a reason to upgrade. Still needs to chain to a distribution switch anyway.
@@willernst because it's not meant for prosumer users that have previously had the UDMP or UDM-SE. It is meant for larger business where there are upwards of 750 users and offerings from Cisco and other corporate-targeted brands are perhaps cost-prohibitive or beyond the capability of any support staff. The majority of larger business use-cases are going to be where downstream switches are likely going to be 10Gb, leaving the 8x standard 1Gb ports perhaps for devices that aren't capable of 2.5Gb. IMO, UniFi equipment will always be prosumer products for home users, perhaps even small to medium sized businesses. The UDM-ProxMax would be complete overkill, even as a single device, for anything less than the latter types I mentioned above. Even running two of these for the Shadow mode would be overkill for these types.
For testing the 10G WAN I think you could just hook the UDM Pro Max into any old random port in your existing 10G network. The WAN port would then get a DHCP IP plus DNS info from your existing network. Make a network on the UDM Pro Max with a different ip address range and you've then essentially just set up NAT. You could then probably do some trickery with iperf to go from behind the UDM Pro Max into your existing network, which would essentially be "the internet" It wouldn't be an exact test compared to having an actual 10G WAN, but you could at least test the performance through NAT/Firewall. Or, I could be completely wrong :)
Exactly this! Be your own internet. Make NAT rules so both sides know where the other "is" on the other network and then use iperf, or whatever other test you may want to put in place.
Like i was pretty happy with my udm se. Except for the price. I like how 2 of 8 the poe ports were poe+. Perhaps they could have compromised and did the same by adding 2 of 8 2.5Gb
All the speed tests were not impressive imo. The 10GE on the same VLAN is almost 1Gbps short of what it should be (yes I know it was Windows - I wish it would have been 2 Linux box doing the iperf3 test instead in order to have the true speed of the ports). Then the inter vlan routing at ~6Gbps is also kind of slow, but that device is stuck with a 4-core ARM running at 2GHz only and this was only 1 stream from 2 endpoints. With many endpoints, this will get lower and lower and that UDM Pro Max will not be able to keep up. I still think of the UDM line as cheap L3 switch that we added some firewall features.
@@Traumatree super common amongst hyperscalers, and you wouldn't have 5G without IPv6, and therefore those who develop software for those purposes need IPv6, at the very least to test in their homelabs.
@@lzcpg IPv6 is not required for 5G at all since they aren't working at the same network layers. Trust me, besides Amazon/AliBaba who might want an IP to each of their items they sells, no one need IPv6.
just did an inter-vlan test on my SE. Getting 2.0Gb/s using the 2 10G ports, and I'm also running protect in the background. All security features turned on.
12:00 So the 8 port 1Gbit switch is connected internally with 1Gbit connection to the rest of the device (maybe some 10-12 port chip)? Seems like a waste, especially if you have 2 Gbit internet uplink, you can't have 2 x 1 Gbit downloads at the same time. At the end of the day, that means you can only get 2.5 Gbit via the 10 Gbit SFP+ adapter.
What I found in my testing is that the connection from the 8 port switch over to the other group of ports (10G/2.5G) seems to only support 1Gb/s. That was also the case with the Pro/SE.
Pro Max doesn’t have PoE but otherwise the ports are the same. Pro Max has 2 hard drive slots instead of one on the SE. Pro Max has marginally better routing performance due to the CPU running 0.3Ghz faster than the SE. Pro Max has a higher max power consumption of 60W vs 50W on the SE (not counting PoE). That’s about it. Tech specifications can be compared on the ubiquiti’s website. I don’t see why it costs $100 more than the SE and I’d much rather have the PoE ports.
@@TechnoTim Eh? He was asking for a comparison between the two and I was listing off the 4 differences that would be relevant to an end user? But if we’re going to be pedantic for no reason, both the SE and Pro Max have the same dedicated 128GB SSD. 🤷
@@TechnoTim Thanks for the great video!!! Do you think it is worth it returning my newly purchase UDM SE for the UDM Pro Max? I already have the switch 48 Pro Max PoE for all my PoE needs
Remember too when that update comes out for shadow mode in OS4 all the other rackmount dream machine pro and SE will get it to they're just showcasing them on a dream machine promax
For your wan question application testing. You "should" absolutely be able to add any router with a "public ip" to mimick your ISP just make sure the mock ISP router and your UDM are in the same subnet. From there you can span that subnet to an IPERF host and try to get a throughput metric done.
@@TechnoTim It will :) FYI firewalls live at layer 4 of the TCP/IP stack alongside your portnumbers / protocol (tcp/udp) while the routing is at layer 3. IPERF when it creates its packets does encapsulate the traffic depending on the command flags you apply to it. So you will need to assign your host a "sudo public IP" and then in the UDM you'll need to port forward the IPERF server so then the IPERF sudo public client will connect to your fake public address like any normal client. Happy to answer any networking questions you may have, I do this as my day job :)
It would be nice if having shadow mode enabled would allow you to raid across the UDMs. The two drives in the primary udm could raid1 with the two drives in the shadow udm.
I think the secondary purpose for the internal drives is still helpful for those of us who have separate UNIFI "big boy" NVR Pro's - we don't use the internal UDM drives for Protect, but for those of us who use Access, the camera feeds from the door access controls with cameras are stored on the UDM's HDD - so at least we have some redundancy or extra space. Thanks for this great video!
@Ancaruin But that's all... its not something I really see warranting a "Max" branding the dual HDD bays and SSD on board are great but again this is what the SE should have been... the Pro Max should have had PoE on board 2.5Gbe ethernet 10Gbe WAN. It feel like a half measure
@@Asgard2693 Well lets face it, for large scale someone will probably have the Pro Max or the Enterprise switch, no need for PoE on LAN Ports. It would've been nice to have a 5GbE WAN Port though beside the SFP+ ports.
@Ancaruin I have the Pro in my Lab, I dislike having to have another switch just to do PoE, I mean sure I have a core switch doing 10Gbe SFP and that can do many PoE ethernet. But having all my Cameras and APs directly on the Pro would be nicer. Especially for a top end device!
Good question, I would assume so if I am understanding you correctly. The Secondary is on standby until Primary goes down. All configuration is mirrored so as long as you are mirroring the ports it Should Just Work™️
In your failover test, you simply pulled the power from the primary UDM-ProMax. I know it's a theoretical test, but in reality, are users really going to put each UDM-ProxMax on different AC power sources? Likely not. Obviously, if you disconnect the link between the primary UDM-ProMax and the switch, this would simulate the failover from the primary to the secondary? Would you not test WAN continuity by disconnecting the primary UDM-ProMax's WAN connection? With both UDM-ProMax's still powered on AND connected via the downstream switch, would this cause the secondary to become the active/primary?
Hi! Great Video! But im confused with the 10Gb LAN-LAN Test with IDS/IPS on, with two deices on the same network. I would consider that the traffic is only between the source and destination, and it isnt been routed through the firewall. How could IDS/IPS effect the speed in these szenario?! That would mean that the traffic would be redirected from the switch ports through the FW. I cant believe that, sounds crazy.
Do i have to wait a day after a blackout for it to work again? That is my only grip about mine. I get a blackout (home user) and the Dream Machine needs about 12 hours before it will reboot properly. I know I am far from the only person with this issue. The Squirrells in my yard fucking with my Transformers vs 12 hour reboots.
Wait, so this looks like a better router than the UXG Pro - especially with DPI etc enabled? Hmmmm... (Me trying to figure out the best upgrade path from the classic USG, had to disable some features to get gigabit speed when I got FTTP - and I didn't like it).
Hello. how are you? I have a question regarding this device versus a USG Pro 4. In the USG Pro 4, LAN ports 1 and 2 are independent ports, and I can configure an independent segment for each of them (each one on VLAN 1). Is this possible with this new line of devices? I purchased a UCG Ultra, and it cannot do this. The UniFiOS only allows creating VLANs, meaning it only has one network on VLAN 1 for the whole device. Which device would allow me to do everything I need? Thanks. Best regards.
I just remotely updated from 2.4.27 to 3.7.12 and it crashed. I know i have to go onsite but will it just need a reset or what happen. Why offer it remote if it wont work?
Apologies for this silly question but how can a single ISP be connected to two Max’s if the ISP modem device only has a single Ethernet connection when in modem mode? Thinking about it further, the ISP device has a switch and when DHCP enabled can support multiple users. Therefore, do I use ISP switch and connect both Max’s to it; would this cause double NAT issue?
@@kimthurnherr9052 Discovered the answer in a nutshell connect your internet router to a switch. Then simply connect both UDM-PRO-MAX to the switch and thats it. Switch Port 1 Connect to your modem router WAN port Switch Port 2 Connect to the WAN port of the UDM-PRO-MAX (Primary) Switch Port 3 Connect to the WAN port of the UDM-PRO-MAX (Shadow) Thats all you need to do. The shadow gateway will automatically enable the port on the switch (port 3) when shadow UDM takes over. Once the primary is back online then port 2 of the switch will become active and the shadow UDM will deactivate the port on the switch.
Last time I upgraded my router I decided against the UDM and built an opnsense box because back then Unify was a privacy nightmare with devices constantly phoning home and sending logs. The pro max seems like a great device, especially the 5Gbit IPS is great for the price. I was wondering if Ubiquiti has finally seized to spy on its customers or at least given them a proper mechanism to opt out, or if they still collect everything you do *anoymized*?
Why would they call it a pro max and not include the things that make other "max" switches "max"? No etherlighting and no additional 2.5G ports. Thats such a weird choice when they could just call it the UDM pro 2 or just retire the older UDM pro and keep the name for this box. Its a small thing, but their naming conventions for their products are very inconsistent it seems. Either way, enjoyed the video! Neat to see the new shadow mode feature.
I was so excited about this until I realized it's a very marginal upgrade from UDM SE and they are STILL using GbE ports in this machine which makes it obsolete even before it was released. Why can't UniFi realize that nobody wants 1GbE ports anymore? 🤦♂
Wow, the top 5-videos in my sub's list today are on this topic. Guess which one I told the algorithm it should be surfacing 1st and sharing to more people.
@@TechnoTim I think the units inability to actually handle failover of a single wan connection (or multiple for that matter) between units should be called out as a major flaw. This could only be done in hardware with a relay for example, so it'll never come to this device without yet another hardware re-design. Shadow Mode has been pushing the friendship of using the term HA from the start, and in a real world application, this latest rendition would still ultimately require user intervention.
Hmm.. failing back to the device that went off line as the primary is not something good. It should become the new shadow and pick-up the config of the new primary. And putting it back as the primary should be a manual intervention. Great video!
Good eye! Not yet! I am hesitant to rip it apart when it runs Linux great as is! When I have some more free time I will for sure because the hybrid drive in there needs to be replaced!
@@TechnoTim so 2 things temp sensor for the hhd -ifixit has adapters otherwise fans will go 100% at all times tape the screen to the case for testing before using the adhesive,..
At this price tag, the built-in 8-port switch is underwhelming to be honest. Then again, I'm probably not the intended audience for an all-in-one network appliance like this. Side note, it very much feels like the clip at 14:15 doesn't belong in this video. I don't see the connection between a GPU and network gear, pun totally intended.
@TechnoTim they need to be at par with the compeition when it comes to IDS/DPS buy assinging its own separate CPU, this way they can provide full wire speed without IDS/DPS being the bottleneck. This is nothing new, we just installed a new SonicWall 8 months ago that has this feature, I know Fortinet, Cisco and others have his feature too as I was checking them out while I was shopping for a new firewall. This new UDM Pro Max will be nothing more than a upgrade from the UDM Pro for home labs.
Meanwhile my Topton chineze mini PC with 2 SFP+ ports and 4 2.5 Gbe ports, pentium gold 8505 cpu, 16 GB DDR 5, running VYOS can do full 10gbps inter-vlan routing and 1Gbps OpenVPN DCO site to site, for almost half the price, while consuming 17watts.
I dont get it, why are they putting all thr effort into failover for gateway only if you want a truly redundant setup you'll also need dual core switch. So they need more 10gbe 2x WAN (10gbe) 2x LAN (10 gbe) 1x Sync/HA (1gbe) And what underlying protocol are they using? OSPF? VRRP? that failover time leaves a lot to be desired I've used meraki equipment using VRRP on wan and lan which can be no packet loss whatsoever. Understandably if someone was truly looking for HA and had the $$ for dual 10gbe WAN they wouldn't be looking at Ubiquiti.
I think all this is missing is POE which is a shame as the name would suggest this is the better UDM but there are plenty of people who still need POE on those 1gbps ports
Just not seeing the fit. If the mission is critical enough to configure full router failover (shadow mode), the two Protect drives seem somewhat consumer-ish. My 40-years experience in IT is that HDDs are inevitable points of failure. And my recent experience with Unifi's CloudKey Gen-2 Plus verifies that. Having (8) 1GbE instead of (8) 10GbE is a disappointment and seems somewhat last decade. Unifi always seems to land the ball about 6-inches short of the cup.
I dunno... I still feel like this is just a slightly OC'd UDM-Pro... and without side by side numbers from performance tests of the 2, I haven't been convinced otherwise. I feel there's no compelling reason to upgrade here.
:-( I really want to see a unit that can do 10Gb inter vlan and 10Gb to internet no IDS/IPS but the ability to enable IDS/IPS on some zones VLAN Office -> Internet for example but not VLAN DMZ -> Internet.
Unify should have sent you 2 switches also for true full redundancy. If the switch fails .... the entire network is down. If one goes redundant, then go all the way.
@@TechnoTim Honestly it makes no sense to have two "gateways/routers" and not two core switches. I could understand for home/small office use using one UDM Pro with two services that are redundant, where down time is not that critical, but once anyone thinks about dual gateways they need to go all the way or not at all. Anyway I enjoy your videos, keep on trucking.
"The UDM Pro Max has been upgraded in almost every way possible..." Tim... *narrows eyes* - No 2.5 GbE, still GbE (and latest UniFi APs support 2.5GbE) in 2024 on a "Pro Max" business gateway - No PoE, PoE+ or PoE++, the things used to power your... UniFi APs and UniFi Cameras, and was built-in to previous SE model - Replaced the super-obsolete quad-core Arm A57 CPU ... with a quad-core Arm A57 clocked 20% faster I guess I'll be waiting for the... UniFi Dream Machine Pro Max Special Edition or UniFi Dream Machine Special Edition Pro Max Oh, Ubiquiti.
Of course after I finally buy a UDM-PRO, they release a new version… Don’t worry guys: I’ll let you know when I upgrade so you know to wait a few weeks… 🤦♂️
Apple has to stop naming the devices like this..
Apple?
@@LiLBitsDK apple started doing the the "pro max" stuff with their phones a few yrs back and then alot a companies started doing it
@@LiLBitsDK Yea look at the names Pro and Pro Max are apple naming stuff :P
Could it havev been Tim that said one prevous Apple employee now works at Ubiquiti (Or something like that)
You don’t want the Dream Machine Cloud Express Pro Max Mini (PRODUCT)RED Ultra?
@@FunningRast if its atleast 2K USD and accessories to use the full product is required then maybe
Once again, price upfront and you decide if you want to see the remaining of the video or not... That deserved my immediate like.
Very great testing of all features, especially BW throughput for intervlan routing.
no POE. Why Unifi? You added extra drive slot for NVR. But left out POE+ for cameras.
So you are forced to buy a PoE switch :)
They probably left PoE away, so that they can launch a UDM Pro Max SE later on ;-)
would be nice if they let us use those NVR drive bays for NAS duties... like how many use vidcams anyways? seems kinda wasted on many
@@LiLBitsDK Backup SMB drives would be sweet. Surprised they haven't incorporated a NAS component to these. Btw, seems that 2 drives is sufficient for up to 8 cameras maybe
who buys something like that to run 8 cameras anyway
This is the best Pro Max review on TH-cam so far today. I bought one today. It will replace SE that is not handling 100 unifi devices, ~350 client devices and 5 vlans
Thank you so much for the kind words. A lot of work goes into these videos. I was up until 2 am finishing this one up!
This is a swing and a miss by Unifi IMO. How you gonna call something "Pro Max" and not have the switch ports be 2.5gbps? At least this doesn't make me regret purchasing my SE just a couple months ago.
My thoughts exactly. I was waiting for an upgrade with 2.5Gb switch ports and POE would have been a nice add. I'm still on the OG DM and not seeing a reason to upgrade. Still needs to chain to a distribution switch anyway.
Exactly! The U7 Pro takes 2.5GbE and POE+ which you can't do with a brand new Dream Machine? What are they thinking!? 🤯
@@willernst because it's not meant for prosumer users that have previously had the UDMP or UDM-SE.
It is meant for larger business where there are upwards of 750 users and offerings from Cisco and other corporate-targeted brands are perhaps cost-prohibitive or beyond the capability of any support staff.
The majority of larger business use-cases are going to be where downstream switches are likely going to be 10Gb, leaving the 8x standard 1Gb ports perhaps for devices that aren't capable of 2.5Gb.
IMO, UniFi equipment will always be prosumer products for home users, perhaps even small to medium sized businesses.
The UDM-ProxMax would be complete overkill, even as a single device, for anything less than the latter types I mentioned above. Even running two of these for the Shadow mode would be overkill for these types.
Nobody who is buying this is using the onboard switch ports…
@@b00573d Ya, because they're wimpy ports.
For testing the 10G WAN I think you could just hook the UDM Pro Max into any old random port in your existing 10G network. The WAN port would then get a DHCP IP plus DNS info from your existing network. Make a network on the UDM Pro Max with a different ip address range and you've then essentially just set up NAT. You could then probably do some trickery with iperf to go from behind the UDM Pro Max into your existing network, which would essentially be "the internet" It wouldn't be an exact test compared to having an actual 10G WAN, but you could at least test the performance through NAT/Firewall. Or, I could be completely wrong :)
Thank you! Seems right to me 👍
Exactly this! Be your own internet. Make NAT rules so both sides know where the other "is" on the other network and then use iperf, or whatever other test you may want to put in place.
I was going to suggest the same thing. I have used this technique to test firewall throughput before.
The lack of PoE is a miss for me. I only have a couple PoE devices and the UDM SE is perfect for that.
that lan switch limited to 1gb is unacceptable at this price
That Switch has like 24 Ports. And 2x 10 Gbit Connections.
Like i was pretty happy with my udm se. Except for the price. I like how 2 of 8 the poe ports were poe+. Perhaps they could have compromised and did the same by adding 2 of 8 2.5Gb
All the speed tests were not impressive imo. The 10GE on the same VLAN is almost 1Gbps short of what it should be (yes I know it was Windows - I wish it would have been 2 Linux box doing the iperf3 test instead in order to have the true speed of the ports).
Then the inter vlan routing at ~6Gbps is also kind of slow, but that device is stuck with a 4-core ARM running at 2GHz only and this was only 1 stream from 2 endpoints. With many endpoints, this will get lower and lower and that UDM Pro Max will not be able to keep up.
I still think of the UDM line as cheap L3 switch that we added some firewall features.
But can you finally create IPv6-only VLANs?
No one needs IPv6 pal. Move along. Nothing to see here.
@@Traumatree super common amongst hyperscalers, and you wouldn't have 5G without IPv6, and therefore those who develop software for those purposes need IPv6, at the very least to test in their homelabs.
@@lzcpg IPv6 is not required for 5G at all since they aren't working at the same network layers. Trust me, besides Amazon/AliBaba who might want an IP to each of their items they sells, no one need IPv6.
just did an inter-vlan test on my SE. Getting 2.0Gb/s using the 2 10G ports, and I'm also running protect in the background. All security features turned on.
I'll probably wait to upgrade until the UDM Pro Max Ultra SE.
I am genuinely surprised that they didn't make the 8, 1Gbe ports on the Front PoE++...
And 2.5 gig
@@TOMKO_ Should be 5 Gig.
@@eat.a.dick.google should be 10 Gig.
@@eat.a.dick.google why not 10 Gig while we are at it
the 8 ports needed to be 2.5/5G and POE, same for the WAN.
12:00 So the 8 port 1Gbit switch is connected internally with 1Gbit connection to the rest of the device (maybe some 10-12 port chip)? Seems like a waste, especially if you have 2 Gbit internet uplink, you can't have 2 x 1 Gbit downloads at the same time. At the end of the day, that means you can only get 2.5 Gbit via the 10 Gbit SFP+ adapter.
What I found in my testing is that the connection from the 8 port switch over to the other group of ports (10G/2.5G) seems to only support 1Gb/s. That was also the case with the Pro/SE.
Wasn't there a UDM Pro SE? Which if I recall you had switched to a couple months back. What's the comparison between Pro SE vs Max?
That has the same internals but with PoE ports and 2.5 GbE WAN
Pro Max doesn’t have PoE but otherwise the ports are the same.
Pro Max has 2 hard drive slots instead of one on the SE.
Pro Max has marginally better routing performance due to the CPU running 0.3Ghz faster than the SE.
Pro Max has a higher max power consumption of 60W vs 50W on the SE (not counting PoE).
That’s about it. Tech specifications can be compared on the ubiquiti’s website. I don’t see why it costs $100 more than the SE and I’d much rather have the PoE ports.
@@FunningRast I mean, if we're listing everything you missed double the RAM, double the eMMC, a dedicated 128 gb SSD😅
@@TechnoTim Eh? He was asking for a comparison between the two and I was listing off the 4 differences that would be relevant to an end user? But if we’re going to be pedantic for no reason, both the SE and Pro Max have the same dedicated 128GB SSD. 🤷
@@TechnoTim Thanks for the great video!!! Do you think it is worth it returning my newly purchase UDM SE for the UDM Pro Max? I already have the switch 48 Pro Max PoE for all my PoE needs
I read there is a new model in the works, the udm pro max ultimate max edition second generation
🤣
Can’t imagine why they keep forgetting 2.5g LAN with POE. Oh yeah I remember now.
why?
@@112Haribogreed
We will probably soon see the release of a UMD Pro Max PoE with all 2.5 ports ;)
Remember too when that update comes out for shadow mode in OS4 all the other rackmount dream machine pro and SE will get it to they're just showcasing them on a dream machine promax
That's right!
For your wan question application testing. You "should" absolutely be able to add any router with a "public ip" to mimick your ISP just make sure the mock ISP router and your UDM are in the same subnet. From there you can span that subnet to an IPERF host and try to get a throughput metric done.
Thank you for this! I wasn't sure if this would actually test the firewall (with the iperf port) but now that you say this it totally makes sense!
@@TechnoTim It will :)
FYI firewalls live at layer 4 of the TCP/IP stack alongside your portnumbers / protocol (tcp/udp) while the routing is at layer 3.
IPERF when it creates its packets does encapsulate the traffic depending on the command flags you apply to it. So you will need to assign your host a "sudo public IP" and then in the UDM you'll need to port forward the IPERF server so then the IPERF sudo public client will connect to your fake public address like any normal client.
Happy to answer any networking questions you may have, I do this as my day job :)
It would be nice if having shadow mode enabled would allow you to raid across the UDMs. The two drives in the primary udm could raid1 with the two drives in the shadow udm.
I think the secondary purpose for the internal drives is still helpful for those of us who have separate UNIFI "big boy" NVR Pro's - we don't use the internal UDM drives for Protect, but for those of us who use Access, the camera feeds from the door access controls with cameras are stored on the UDM's HDD - so at least we have some redundancy or extra space. Thanks for this great video!
How was the fan noise under load? I have a UDM: SE that run silent. This is great as it is in the same room I work in. Is the Pro Max audible?
What do you think about the protections vs pfsense/opnsense?
Where’d you get the rack? I have limit space for gear and this would work for me
UDM Pro SE also had a 2.5Gbe WAN, So far it feels like an OS update that could goto the original Pro and SE and some minor revisions.
Pro Max has 8GB RAM and +300mhz on the Quad Core CPU.
@Ancaruin But that's all... its not something I really see warranting a "Max" branding the dual HDD bays and SSD on board are great but again this is what the SE should have been... the Pro Max should have had PoE on board 2.5Gbe ethernet 10Gbe WAN.
It feel like a half measure
@@Asgard2693 Well lets face it, for large scale someone will probably have the Pro Max or the Enterprise switch, no need for PoE on LAN Ports. It would've been nice to have a 5GbE WAN Port though beside the SFP+ ports.
@Ancaruin I have the Pro in my Lab, I dislike having to have another switch just to do PoE, I mean sure I have a core switch doing 10Gbe SFP and that can do many PoE ethernet. But having all my Cameras and APs directly on the Pro would be nicer. Especially for a top end device!
I really appreciated the failover demo! That was cool!
Great video Tim :)
On e simple question. Is this new device able to handle 3 WAN’s ?. 2 WANS IN BALANCE Mode and a third one in FAILOVER?.
for 200 more you would think they would have upgraded the 8 lan ports to 2.5 gbe
I have UDM-PRO with two ISP's (load balance). Im looking to get two Max's (replace my single UDM-PRO) but will both ISP's work on the shadow device?
Good question, I would assume so if I am understanding you correctly. The Secondary is on standby until Primary goes down. All configuration is mirrored so as long as you are mirroring the ports it Should Just Work™️
FYI the UDM PRO SE has had 2.5gb WAN for years.
10G WAN test? What about a double NAT option, for this testing purpose? It's still a WAN/LAN setup. Does this would suffice your needs? :)
In your failover test, you simply pulled the power from the primary UDM-ProMax.
I know it's a theoretical test, but in reality, are users really going to put each UDM-ProxMax on different AC power sources? Likely not.
Obviously, if you disconnect the link between the primary UDM-ProMax and the switch, this would simulate the failover from the primary to the secondary?
Would you not test WAN continuity by disconnecting the primary UDM-ProMax's WAN connection?
With both UDM-ProMax's still powered on AND connected via the downstream switch, would this cause the secondary to become the active/primary?
WAN ports are unchanged from SE.
what brand/type of rack do you use?
Hi! Great Video! But im confused with the 10Gb LAN-LAN Test with IDS/IPS on, with two deices on the same network.
I would consider that the traffic is only between the source and destination, and it isnt been routed through the firewall. How could IDS/IPS effect the speed in these szenario?!
That would mean that the traffic would be redirected from the switch ports through the FW. I cant believe that, sounds crazy.
I can't help but noticed the case on your desk. It looks really sick! May I know what model it is?
is the UDM Pro MAx an Upgrade from the UDM Pro SE?
Exactly my question!
Content has been amazing! Love it all!
Do i have to wait a day after a blackout for it to work again? That is my only grip about mine. I get a blackout (home user) and the Dream Machine needs about 12 hours before it will reboot properly. I know I am far from the only person with this issue. The Squirrells in my yard fucking with my Transformers vs 12 hour reboots.
I bought a UPS for this exact reason. That way if I'm home I can gracefully power my network down.
When will they replace the super ultra version?
Wait, so this looks like a better router than the UXG Pro - especially with DPI etc enabled? Hmmmm... (Me trying to figure out the best upgrade path from the classic USG, had to disable some features to get gigabit speed when I got FTTP - and I didn't like it).
Hello. how are you? I have a question regarding this device versus a USG Pro 4. In the USG Pro 4, LAN ports 1 and 2 are independent ports, and I can configure an independent segment for each of them (each one on VLAN 1). Is this possible with this new line of devices? I purchased a UCG Ultra, and it cannot do this. The UniFiOS only allows creating VLANs, meaning it only has one network on VLAN 1 for the whole device. Which device would allow me to do everything I need? Thanks. Best regards.
Thanks for the demo and info, have a great day
I just remotely updated from 2.4.27 to 3.7.12 and it crashed. I know i have to go onsite but will it just need a reset or what happen. Why offer it remote if it wont work?
Apologies for this silly question but how can a single ISP be connected to two Max’s if the ISP modem device only has a single Ethernet connection when in modem mode? Thinking about it further, the ISP device has a switch and when DHCP enabled can support multiple users. Therefore, do I use ISP switch and connect both Max’s to it; would this cause double NAT issue?
my question as well!
@@kimthurnherr9052 Discovered the answer in a nutshell connect your internet router to a switch. Then simply connect both UDM-PRO-MAX to the switch and thats it.
Switch Port 1 Connect to your modem router WAN port
Switch Port 2 Connect to the WAN port of the UDM-PRO-MAX (Primary)
Switch Port 3 Connect to the WAN port of the UDM-PRO-MAX (Shadow)
Thats all you need to do. The shadow gateway will automatically enable the port on the switch (port 3) when shadow UDM takes over. Once the primary is back online then port 2 of the switch will become active and the shadow UDM will deactivate the port on the switch.
Hello! Nice video! Do you know if Uibquiti planned to have a version of the DM Pro Max sith POE? Tks!
We will probably soon see the release of a UMD Pro Max PoE with all 2.5 ports ;)
Last time I upgraded my router I decided against the UDM and built an opnsense box because back then Unify was a privacy nightmare with devices constantly phoning home and sending logs. The pro max seems like a great device, especially the 5Gbit IPS is great for the price.
I was wondering if Ubiquiti has finally seized to spy on its customers or at least given them a proper mechanism to opt out, or if they still collect everything you do *anoymized*?
In my opinion they should provide 10GB WAN and 2.5GB LANs
Why not compare it to the UDM PRO SE ?
Because it's called the UDM Pro Max and who knows if they will ever have a UDM SE Max?
If you have two 10Gb capable devices it would be pretty easy to test the WAN ports with one device on each side and using iperf.
how do you configure shadow mode with dual wan?
seems like not much of an upgrade over the SE
Why would they call it a pro max and not include the things that make other "max" switches "max"? No etherlighting and no additional 2.5G ports. Thats such a weird choice when they could just call it the UDM pro 2 or just retire the older UDM pro and keep the name for this box.
Its a small thing, but their naming conventions for their products are very inconsistent it seems.
Either way, enjoyed the video! Neat to see the new shadow mode feature.
Why update an existing ageing product for a similar price point when you can slap a "Max" badge on it and charge more money? /s
I like to see Tim showing us his new toys
Perfect video, thank you for all the info
its weird it doesn't come with all 2.5Gb ports
Yeah, its dated right off the bat.
I was so excited about this until I realized it's a very marginal upgrade from UDM SE and they are STILL using GbE ports in this machine which makes it obsolete even before it was released. Why can't UniFi realize that nobody wants 1GbE ports anymore? 🤦♂
Is the 8 port switch back end still limited to 1gb like it is on the udm pro
yep, they should have made them 2.5/5G with PoE.
Hello sir can you make a video on two games one CPU on proxmox rather than unraid
Wow, the top 5-videos in my sub's list today are on this topic.
Guess which one I told the algorithm it should be surfacing 1st and sharing to more people.
So how is your WAN pass thro, Do you have a dumb switch that goes to both UDM?
In my test I was just running it double NAT, having my (main) UDM SE give it IPs.
@@TechnoTim I think the units inability to actually handle failover of a single wan connection (or multiple for that matter) between units should be called out as a major flaw. This could only be done in hardware with a relay for example, so it'll never come to this device without yet another hardware re-design. Shadow Mode has been pushing the friendship of using the term HA from the start, and in a real world application, this latest rendition would still ultimately require user intervention.
can we use proxmox as 2 gamers 1 cpu like unraid and if we do plz make a video on it
Are those 8 1GB ports PoE?
Hmm.. failing back to the device that went off line as the primary is not something good. It should become the new shadow and pick-up the config of the new primary. And putting it back as the primary should be a manual intervention. Great video!
oooooo i see you put linux on that imac did you mx it out yet?? i remember you mention that in your desk tour
Good eye! Not yet! I am hesitant to rip it apart when it runs Linux great as is! When I have some more free time I will for sure because the hybrid drive in there needs to be replaced!
@@TechnoTim so 2 things
temp sensor for the hhd -ifixit has adapters otherwise fans will go 100% at all times
tape the screen to the case for testing before using the adhesive,..
Can you get a new UDM Pro Max and have it failover to an UDM Pro first edition?
Unfortunately no. They have to be the same model. The automatic failover is also coming to the Pro/SE with UniFi OS 4
At this price tag, the built-in 8-port switch is underwhelming to be honest. Then again, I'm probably not the intended audience for an all-in-one network appliance like this.
Side note, it very much feels like the clip at 14:15 doesn't belong in this video. I don't see the connection between a GPU and network gear, pun totally intended.
Good eye, I needed some B Roll of a repair and that's all I could come up with!
They timed this release perfectly i was just about to upgrade to the SE so ill just wait a bit now
I will be returning my UDM SE for the Pro Max, will loose on the 15% stocking fee
Amazing review
@TechnoTim they need to be at par with the compeition when it comes to IDS/DPS buy assinging its own separate CPU, this way they can provide full wire speed without IDS/DPS being the bottleneck. This is nothing new, we just installed a new SonicWall 8 months ago that has this feature, I know Fortinet, Cisco and others have his feature too as I was checking them out while I was shopping for a new firewall. This new UDM Pro Max will be nothing more than a upgrade from the UDM Pro for home labs.
Meanwhile my Topton chineze mini PC with 2 SFP+ ports and 4 2.5 Gbe ports, pentium gold 8505 cpu, 16 GB DDR 5, running VYOS can do full 10gbps inter-vlan routing and 1Gbps OpenVPN DCO site to site, for almost half the price, while consuming 17watts.
I dont get it, why are they putting all thr effort into failover for gateway only if you want a truly redundant setup you'll also need dual core switch.
So they need more 10gbe
2x WAN (10gbe)
2x LAN (10 gbe)
1x Sync/HA (1gbe)
And what underlying protocol are they using? OSPF? VRRP? that failover time leaves a lot to be desired I've used meraki equipment using VRRP on wan and lan which can be no packet loss whatsoever.
Understandably if someone was truly looking for HA and had the $$ for dual 10gbe WAN they wouldn't be looking at Ubiquiti.
I think all this is missing is POE which is a shame as the name would suggest this is the better UDM but there are plenty of people who still need POE on those 1gbps ports
Without 2.5gbe 😢 FAIL!!!
Ehh. As a enthusiast, the UDM SE makes sense. But i doubt businesses who this is meant for will use the 8 ports as a 2.5Gb switch.
We will probably soon see the release of a UMD Pro Max PoE with all 2.5 ports ;)
i love how they let anyone buy these. im so excited to buy a UDM pro
Just not seeing the fit. If the mission is critical enough to configure full router failover (shadow mode), the two Protect drives seem somewhat consumer-ish. My 40-years experience in IT is that HDDs are inevitable points of failure. And my recent experience with Unifi's CloudKey Gen-2 Plus verifies that. Having (8) 1GbE instead of (8) 10GbE is a disappointment and seems somewhat last decade. Unifi always seems to land the ball about 6-inches short of the cup.
But there’s no POE!!! It was almost perfect!
I dunno... I still feel like this is just a slightly OC'd UDM-Pro... and without side by side numbers from performance tests of the 2, I haven't been convinced otherwise. I feel there's no compelling reason to upgrade here.
1:18. Thanks for sharing the retail cost of $599 at launch. Many a creator should take note of this...
I think you have a typo on the price but no problem! 😅
@@TechnoTim thanks, fixed!
And right after I bought my second UDM SE lol. This looks awesome, thanks for the run down!
I just bought my first UDM SE but my return window still has two days, I think I will return it for the UDM Pro Max
I don't know why they don't just use dr;bd to sync the data, it's been part of the Linux kernel forever and they are just using Debian for ARM.
:-( I really want to see a unit that can do 10Gb inter vlan and 10Gb to internet no IDS/IPS but the ability to enable IDS/IPS on some zones VLAN Office -> Internet for example but not VLAN DMZ -> Internet.
No PoE on that switch which is meant for their PoE cameras? That is really disappointing.
They should have gone with 2.5/5G PoE ports to support cameras and wireless APs - such a missed opportunity.
Is this a ZimaCube in the background.👀👀👀👀👀👀?
Finally I can replace my DM 1st gen 👍
Unify should have sent you 2 switches also for true full redundancy. If the switch fails .... the entire network is down. If one goes redundant, then go all the way.
I like the way you think 😅
@@TechnoTim Honestly it makes no sense to have two "gateways/routers" and not two core switches. I could understand for home/small office use using one UDM Pro with two services that are redundant, where down time is not that critical, but once anyone thinks about dual gateways they need to go all the way or not at all. Anyway I enjoy your videos, keep on trucking.
waiting for POE version... oh, DM Pro Max SE where are you? ((-;
it will probably come with all 2.5 ports
"The UDM Pro Max has been upgraded in almost every way possible..."
Tim... *narrows eyes*
- No 2.5 GbE, still GbE (and latest UniFi APs support 2.5GbE) in 2024 on a "Pro Max" business gateway
- No PoE, PoE+ or PoE++, the things used to power your... UniFi APs and UniFi Cameras, and was built-in to previous SE model
- Replaced the super-obsolete quad-core Arm A57 CPU ... with a quad-core Arm A57 clocked 20% faster
I guess I'll be waiting for the... UniFi Dream Machine Pro Max Special Edition
or UniFi Dream Machine Special Edition Pro Max
Oh, Ubiquiti.
The failover was pretty slow in my opinion
Of course after I finally buy a UDM-PRO, they release a new version…
Don’t worry guys: I’ll let you know when I upgrade so you know to wait a few weeks… 🤦♂️
Lehner Station
Please help, भाई मुझे tecno spark 6air ke6 का सोर्स कोड चाहिए😊
Casper Path
Is there really a home user appetite for this? This cost over $1100 AUD each. 😬
Rasheed Courts
800 Hickle Island
kek max! ill stick to the udm pro se..
Jarrell Turnpike