ZFS data replication to offsite backup from TrueNAS to TrueNAS over SSH.
Remote video editor to work with files over Samba on to my NAS.
I’m wondering if I should use:
UniFi’s built-in site-to-site or L2TP.
OpenVPN via TrueNAS.
An off-the-shelf solution I can purchase.
Also, do I need Dynamic DNS to get this working?
Offsite Backups
I could do direct SSH, but I’m not sure if that’s very secure or if it’d be better to use a VPN because I’d have to have a TrueNAS box’s SSH exposed publically.
Both locations have a UniFi controller, but not a gateway.
Remote Video Editor
I was thinking VPN + Samba for ease-of-use. TrueNAS has OpenVPN, and that looks pretty simple to setup. It also directly connects to the NAS box and nothing else in my network.
UniFi built-in wireguard VPN seems like the best option to me.
You only need Dynamic DNS if your work doesnt have a static IP (often costs $10-20 a month extra to get one on a basic business plan from Frontier, Spectrum, etc)
I don’t think openVPN supports cpu acceleration (at least it didn’t on pfsense when I looked and both truenas and pfsense are FreeBSD) so I’d just use general
IPsec Ike v2, which does.
May or may not be an issue for you depending on your replication bandwidth needs, but for me with 1000 odd users I figured acceleration would be important.
Depending on what CPU your NAS is running you might not have great performance with OpenVPN running in the NAS. You should run a bandwidth test through the remote connection and see what you can do. Wireguard VPN is known to be faster than OpenVPN, but none of the UniFi products have great CPUs either
Wireguard looks good. Never heard of it. At this point, I’ve really only ever used OpenVPN because it was more secure than PPTP 15 years ago.
OpenVPN is working for me, but Wireguard looks a lot nicer. If I could install a jail for it, that’d be easier than setting up a Docker container. While I have an Eypc, my other host has an Intel Atom CPU.
Not sure how to do speed tests from FreeBSD, but if performance is bad, I’d definitely want to find a better solution.
These are both to the same TrueNAS server; and all of these machines are on the same network connecting through the Internet over VPN.
I know it’s using the VPN because this is what I get from that same Windows machine using an in-LAN address:
Even with these ~100MB/s stats, both the read and write speeds are limited to 12MB/s over both FTP + TLS and Samba.
I tried this using two zpools. One filled with 10 mirrors + optane cache + optane log + optane metadata. The other was made up of 3 mirrors of 2TB SATA SSDs.
