Ubiquiti Dream 7 + Promox Adguardhome Setup...

[kuki68ster]

Hey everyone!

I kind of jumped the gun and bought a Dream 7. I also picked up a Topton N100 running Proxmox, where I’ve installed AdGuard Home.

I’ve already set the IP of my AdGuard Home machine as the DNS for my LAN — is that all I need to do?

Is anyone else using a similar setup? How do you guys have it configured?

 

[Tech9]

There are multiple threads on Ubiquiti Community forums about setting up Pi-hole with UniFi gateways plus when running VLAN segmented network and with examples of DNS interception and redirection rules. Your AdGuard Home does exactly the same as Pi-hole, your UDR7 runs UniFi OS >4.1.xx and Network Application >9.x like everything else modern UniFi. In addition your UDR7 has built-in DNS encryption option, one click ad-blocking with DNS interception feature, configurable Suricata IDS/IPS, per application or category traffic filtering and monitoring, plus region blocking on top. Not sure why AdGuard Home complication is even needed.

 

[kuki68ster]

There are multiple threads on Ubiquiti Community forums about setting up Pi-hole with UniFi gateways plus when running VLAN segmented network and with examples of DNS interception and redirection rules. Your AdGuard Home does exactly the same as Pi-hole, your UDR7 runs UniFi OS >4.1.xx and Network Application >9.x like everything else modern UniFi. In addition your UDR7 has built-in DNS encryption option, one click ad-blocking with DNS interception feature, configurable Suricata IDS/IPS, per application or category traffic filtering and monitoring, plus region blocking on top. Not sure why AdGuard Home complication is even needed.

Thanks for your reply!

I'm just having some fun exploring my new toy For some reason, I am getting a high latency warning when using the default UniFi DNS service. However, the issue disappears when I switch to AdGuard Home running on Proxmox. I also prefer having full control over the ad-blocking lists I'm using.

With AdguardHome:

Without AdguardHome:

 

[Tech9]

default UniFi DNS service

The Internet monitoring is quite sensitive, but customizable.

In Network Application click on your gateway (UDR7 in your case) icon on top left, go to Settings, see Internet Verification Server and DNS Verification. The default is ping.ui.com and Auto. If you want quiet Internet verification set the server to the ISP gateway address upstream (trace something and it's the first hop you see in results) and for DNS verification select something faster in your area. If you want to disable it (workaround) set Internet verification to your DDNS name.

You'll still see the latency to common services on your main dashboard:

 

[Toinks]

@kuki68ster Try disabling the browsing security service and parental control service, under Settings > General Settings.

 

[Tech9]

As far as I know Work and Family filtering is provided by CleanBrowsing and may slow down DNS resolution indeed. Extra processing involved. Ad-blocking is done locally and the blocklist is similar to defaults in Pi-hole/AdGuard Home. What was blocked can be seen in logs.