Unifi USG for BT Fibre 900

Hi is anyone using the Unifi USG or USG Pro with BT FTTP fibre 900?

Looking for advice on doing away with the BT hub and going the full Unifi route (APs, switch and USG) but not sure if the USG can handle the WAN speeds. Was also looking at Amplifi Alien, Amplifi HD or the Dream Machine as other options but again i'm not sure how well they work on fibre 900.

Thanks.

I'm not sure what they are like now but but they were horrendously buggy in the past.

If it is for home this is the option I went with.

https://www.servethehome.com/topton-intel-j4125-4x-i...

It is a relative inexpensive device which you run Proxmox on then your router etc is virtualised.
It should be more than powerful enough for 900 mbit and have capacity for some small appliances including one for the Unifi APs, Pihole, OpenVPN etc (I also do this).

You may ask why would you want to do this?
Being able to take a snapshot of a running machine before an update in just a few seconds and also backing it up to a NAS or USB SSD gives you some peace of mind.

It is low cost, power efficient and silent.

The USG will not cope. The USG Pro will, but how long it will be around or supported is debatable as the UXG Pro has been released. For something with an embedded UniFi controller they have the UDM & UDR which will not cope with IDS/IPS enabled, the UDM Pro & UDM SE which will.

Whilst the APs and switches are fine they just don't seem to have got their act together on the router side of things. They do have a tendency to come up with some random idea for a new product, find it doesn't sell well and abandon it.

Having a shiny UI to control everything is all well and good, but when it gets confused things really break spectacularly usually requiring a factory reset and reinstall from a backup to resolve things.

Not had any experience with the AmpliFi range so can't comment on its potential throughput.

As not particularly needing the IDS/IPS stuff (which has its own set of issues) I tend to use Mikrotiks for routing, the RB4011 or newer devices will easily handle gigabit throughput, but as it is just a custom UI on top of linux you have to manually construct a setup to your needs.

And if you are not aware if you ditch the BT hub you loose access to the Digital Voice service. However not an issue if you are not using it.

Seconded. RB4011 plus 2 x Unifi AC Lite here. Very nice setup.

However the RB4011 is a router not a "security appliance" - so if you want IDS, that will have to be something separate. Or else use something like pfSense for the router, with an IDS package installed.

In this age of HTTPS-everything is there much value in IDS outside of corporate environments where you can push certificates to everything to allow intercept?

Outside of my experience. My customers either gave up on it or doubled down and invested heavily in on-premises and cloud proxy solutions.

As already mentioned, USGs will not cope but the UDM Pro or UDM SE will if you want to stay with Ubiquiti..

In reply to a post by MHC:

As already mentioned, USGs will not cope but the UDM Pro or UDM SE will if you want to stay with Ubiquiti..

Some much more capable equipment for routing and basic firewall available elsewhere for sure. One of these will happily handle a couple of gigabit PPPoE services - https://mikrotik.com/product/rb5009ug_s_in