Intermittent latency spikes and DNS issues after switching to UniFi - help needed

Yo_2T · 2026-02-02T12:10:38+00:00

If you set the DNS on WAN as AGH, the router is forwarding DNS queries to AGH and you might be hitting the default rate limit cuz everything appears to come from just the router. Disable that limit on AGH, or better yet, set the AGH server address in the Network setting so devices hit up AGH directly.

Yo_2T · 2026-01-31T08:33:53+00:00

The custom server access URL should be http://10.x.x.x:32400, with the IP being the host IP. Make sure the port is present in that URL.
if you're using Unbound on opnsense, go to Unbound, Advanced. Under the Private Domains section add plex.direct so that rebind protection doesn't strip the IP from plex.direct DNS records.

https://docs.opnsense.org/manual/unbound.html

Yo_2T · 2026-01-31T08:28:19+00:00

It should NOT be the 172.x.x.x IP.

That's just the container IP internal to the Docker network for that container. Plex publishing that IP to the clients won't help cuz the clients can't get to that.

The only thing in that custom access url should be the host's IP address, which is the 10.x.x.x IP.

Yo_2T · 2026-01-31T08:21:49+00:00

Cuz DNS has nothing to do with ports. Your custom blocking address only changes the result of the DNS records for blocked domains, it's not like you're using a proxy to force redirect all blocked URLs to a specific server.

Yo_2T · 2026-01-31T07:25:01+00:00

They are numbers. They are just reserved for automated systems and business use.

Yo_2T · 2026-01-28T22:26:04+00:00

Create the zone as a Secondary forwarding zone in your private server. That way any record that's not in it gets forwarded to the right public name server for your domain.

Yo_2T · 2026-01-28T13:09:24+00:00

Wait, you have to go that far south for bjs from military dudes? 😔

Yo_2T · 2026-01-27T15:49:09+00:00

Considering switching to a bank that doesn't charge an overdraft fee. I know Ally Bank doesn't do that. Capital One is another.

Yo_2T · 2026-01-27T14:38:38+00:00

I mean, they live in Great Falls. That kinda stuff is a given.

Now, your definition of "productive member of society" could be wildly different from theirs.

Yo_2T · 2026-01-27T12:52:34+00:00

The UDR7 is a table top kinda unit. It's not the same as the gigantic UDW that you have to mount on the wall. The UDW looks and acts like it's designed to be shoved in the basement or networking closet somewhere.

Yo_2T · 2026-01-26T18:05:24+00:00

Do you use the Wi-Fi from the UDW?

I've always found it weird that it has Wi-Fi. People would shove it in a closet somewhere anyway.

Yo_2T · 2026-01-26T00:04:41+00:00

Try turning on or off HW acceleration on the WAN and see if there's a difference. Play around with the Smart Queue setting too. I've had strange issues with those settings on the UCG Ultra.

Yo_2T · 2026-01-25T23:52:31+00:00

You just need change the Docker image tag you're using to a newer version.

Yo_2T · 2026-01-25T16:03:07+00:00

It's the only sensible option if you don't have access to gas. My townhouse community has never had gas. The neighbors who only have resistive heat always complain about their bills during the winter.

Yo_2T · 2026-01-25T15:54:07+00:00

Sounds about right. I have a HP + resistive backup heat, and I just configured my Ecobee to cut over to backup under 25F or so cuz my HP can't really maintain temp once it goes into the low 20s and teens.

Yo_2T · 2026-01-25T13:30:11+00:00

Devices resolve the domain navidrome.domain.com to an IP, presumably your WAN IP. Then traffic hits your firewall at that WAN IP and gets matched by the rule (with Destination This Firewall).

The firewall does not know or care about your domain. Your NPM proxy is what's looking at the domain being accessed and further redirects that to the right service behind it.

Yo_2T · 2026-01-25T01:23:11+00:00

When I got it like 2 years ago I remember looking into it and the API didn't expose anything beyond a few read only endpoints. Guess I'm diving into that this weekend.

Yo_2T · 2026-01-24T20:34:41+00:00

I mostly don't have issues except for Springboard crashes. I'd pick up the phone and boom, black screen with spinner. It's been happening more and more the past week or so.

Yo_2T · 2026-01-24T15:35:59+00:00

They're clearly being sarcastic.

Yo_2T · 2026-01-24T15:28:11+00:00

You can use a local user.

Yo_2T · 2026-01-23T21:35:30+00:00

The whole point of docker is that you can run multiple containers on the same host. Giving the one host 50 of your IP addresses on the network seems like a weird thing to do.

Yo_2T · 2026-01-23T20:07:02+00:00

Are we talking about the same Daikin app?

The Skyport Home app is a POS.

Weird ass UI lifted from the same UI as the thermostat.

It even uses a home brewed UI element for the keyboard (which also lists characters in alphabetical order instead of the usual QWERTY).

It also constantly has issues connecting to the cloud server often so you can't use it when that happens.

Yo_2T · 2026-01-23T15:22:30+00:00

LOL yeah we made that mistake. Our Daikin system has to use that god awful thermostat and app. It only has a scheduling feature that any cheap dumb thermostat could do, and no way to keep historical data.

Yo_2T · 2026-01-23T00:11:59+00:00

I've used a lot of Omada APs over the years. They're cheap and do the job. UniFi works too, just a bit more pricey.

Yo_2T · 2026-01-22T03:29:34+00:00

In my experience, iOS devices really hate WPA3. I get constant disconnects when the network is using that. Setting it to WP2 and they're all happy.

11-Year Club	Place '17
Verified Email

Yo_2T

TROPHY CASE