Just a casual Unifi Controller running off of a MikroTik managing APs (Updated Container Vid)

[@TheNetworkBerg]

Hey guys, please use the pinned comments for reference material. I do realize that even though I mentioned MikroTik has made syntax changes I didn't really add those configurations to the unifi controller as they were not needed. I will make a video for pihole again without explaining containers and just do the setup to showcase the syntaxes. You can still see them in the docs though in the Environment Variables. Have fun labbing and practice safely! MikroTik Docker Docs: help.mikrotik.com/docs/display/ROS/Container What is a container: www.docker.com/resources/what-container/ My configs: pastebin.com/nRudUMyT

[@zadekeys599]

I've always said that UBNT AP's should always be use with MT & not UBNT's sad L3 / routing setup. I'd love to see a vid of a Mikrotik running Nginx reverse proxy in a container :)

[@michaelculley8790]

That's the setup I've always used (UBNT APs, MT routers). It would be nice to have MT come out with an AP that's the same quality as UBNT. I would like to switch but I see so many people list faults with MT wireless.

[@arifaisal6607]

Damn! this is what I want!!! thank you soo much broooo!!

[@MunsifRazaali]

If the Pakistani man has come to the Microtik container, then inshallah I will order it from him, now I have to do the listening of this container at my Microtik level, imitating you, you are very genius, very genius

[@KenMarfilla]

Got it working on my RB5009 following your guide. I set container envs MEM_LIMIT and MEM_STARTUP to 512, cgroup ram-high to 700MB. Still has spare 190.1 MiB memory.

[@TheNetworkBerg]

That's pretty awesome Ken :D!

[@KenMarfilla]

​@@TheNetworkBerg It's a perfect use-case for containers in router. I'm only managing 1 unifi AP for my home setup. Container boot up is slow AF but once running, page loads pretty quick. Also got an excuse to buy a faster (and low profile) USB 3 flash drive to replace the current old-gen drive.

[@1mrhamel]

How did you set "cgroup ram-high" ? With the new release of v7.5rc I was able to get it installed, and it's using 140MB now.

[@gunchag]

Damn man this is awesome! Can't wait to try this myself! Thank you very much!

[@albanselaj733]

Great job, mate! Well done!

[@TheNetworkBerg]

Thanks Alban, you definitely helped out with this one as well ^^, now I am going to remake my pihole video and see if there are a few other useful dockers we can bring online.

[@albanselaj733]

@@TheNetworkBerg Thanks, Johnny! Another amazing tutorial on your channel! Keep up the great work.

[@nikitasmith9720]

That is amazing

[@aliraad9958]

that's great, keep on going

[@oscarcam9804]

great information!

[@muhitshalgimbaev6602]

You the best men

[@lucasr4204]

I followed your guide it gives me status: error :(

[@dimm0k]

can't figure out what's wrong on my RB5009. followed your instructions and am able to get the docker container running and can ping 172.17.0.2 both on the router and a local PC, but nothing happens when I open 172.17.0.2:8443 - This site can't be reached, refused to connect. any suggestions?

[@gabrielporto.mikrotik]

What's up Berg. Great video. I did all the steps but unfortunately it didn't work at the end. I did some tinkering but yet not working. Then I decided to do some research. The container package is supported on ARM CPUs. Although the Unifi Controller Docker is supported only in ARM64 CPUs. Given that I think I should buy another RB. LoL. Mine is RB1100AHx4. I used a 64GB SD card. Long story short. I can ping both gateway and VETH1 IP adress. But can't access the VETH1 IP on the web browser. After that I verified that my CPU has ARM architecture. Anyway! It was worth the practice. Thanks for your knowledge Berg. =D

[@roberthilton2824]

Another great video, I have now set up 2 containers on my Mikrotik 5009 and Sandisk thumbdrive, pihole and the unifi controller. Successfully adopted my venerable old Unifi AC-LIte access point and it works sweet as a nut. Is anyine running a USB SSD on their mikrotik's USB port?

[@AKMS47]

Hi! Nice tutorial. Please help. I want use my Mikrotik as DHCP server , but cant run DHCP-relay on UDM Pro if its conneted to Mikrotik at UDM's WAN port. What I do wrong? Please make some tutorial.

[@josepharueyingho9417]

Great video sir

[@TheNetworkBerg]

Thank you very much!

[@TheBustedNutz]

I noticed that the linuxserver/unifi-controller has been deprecated. Should I consider deploying the newer linuxserver/unifi-network-application or use the deprecated controller? Since I will be setting this up as new (not restoring) should I use the latest mongo db?

[@user-uo7go8fd6v]

Great

[@TheNetworkBerg]

Thank you very much for the support, I appreciate it a lot!

[@UMTomaS]

I just tried it no hAP ax3, but after starting container, it starts eating all aviable RAM and in 2 minutes router restart. I can't even get to Unifi webpage. If I limit RAM for containers, it says container is running but no webpage loads and it doesn't seem to be running. With unlimited RAM it at least says connection not secure and after proceeding I get 404 page.

[@Anavllama]

Looking for a more realistic setup where there is an existing bridge with multiple vlans and then you want to add the dockers, lets say one for adguard and one for unifi as you have done. That would be more of a benefit as your AP scenario here was faked and all the other example you have include the magical single new bridge with one subnet. !!

[@TheNetworkBerg]

This is a more realistic use for dockers, you generally want to have a separate bridge to house all of your containers. You can run multiple containers on the new bridge and do whatever subnetting you want with it. Nothing is "faked" this is a real AP that is adopted to a Unifi Controller that is a container hosted on a MikroTik. Your scenario is that you want to replace existing infrastructure with this container and you would just like to have the controller on the same network as before. This would require a completely different lab. Perhaps post your question to MikroTik support or on their forums.

[@Anavllama]

Good idea!

[@Coffetek]

I just can't get to not getting an error. Any suggestions?

[@banjerboefify]

Very cool! I'm curious to see, if you set up a Nginx reverse proxy with Let's Encrypt, could you save/map this certificate to a location on disk and use this certificate in for example the MikroTik hotspot or SSTP/OpenVPN ? And what would the CPU impact be from for example an OpenWRT instance with Bondix installed on it (WAN bonding solution). Containers open up so much possibilities!

[@djdrastic1]

That's pretty baller. The load shedding not making it difficult to make these vids ?

[@TheNetworkBerg]

Yeah load shedding does make doing the videos terrible :C Sometimes quite frustrating.

[@jonneymendoza]

Hi, i am getting a error when truing to add the remote image contrainer command ie add remote-image=linuxserver/unifi-controller:latest interface=veth1 root-dir=usb1-part1/unifi mounts=etc_unifi,dnsmasq_unifi i get a error saying "failure: could not add"

[@KrisnaGaming-te3ug]

Great job mate! Can i add vlan in bridge docker for dhcp server? So the AP and client can get IP from mikrotik

[@Dazolers]

Can you make a tutorial how to install httpd/nginx on RouterOS docker? I'm trying to install them but it keeps giving a /usr/share permission denied error

[@user-tygzgroup]

I have added pihole to the container, why can't I add unifi-controller on the same network segment? After adding, the routerOS restarts, showing that there is a problem with the IRQ, and winbox cannot enter the routerOS.

[@TheNetworkBerg]

I have never ran into this issue before, have you created a separate VETH for your UnifiController? What equipment are you trying to run this on as the controller is quite a beefy container.

[@user-tygzgroup]

@@TheNetworkBerg veth1 to pihole (IP: 172.18.0.2), veth2 to unifi-controller (IP: 172.18.0.3), bridge (IP: 172.18.0.1). veth1 runs normally, but when veth2 runs, routerOS automatically restarts and reports an error, which fails to run normally. Should veth1 and veth2 be in different network segments? Thank you for your answer! ! ! Do you speak Chinese? I am from China

[@TheNetworkBerg]

@@user-tygzgroup Unfortunately I do not speak Chinese. The devices can be in the same network segment that should not produce any error. What model of router are you using?

[@user-tygzgroup]

@@TheNetworkBerg Thank you again! I use Router OSCHR7.8 Standard Edition P1 in esxi to connect to Netgear Nighthawk RAX200 (as a wireless AP and switch). I plan to replace it with RB5009UPr+S+IN (as a router and switch, because its network port can be powered by POE) to connect Unifi U6 pro and U6 Lite for mobile phones and ipads. But I just came into contact with RouterOS, so I don't understand a lot.

[@shailukov7440]

Hello - thanks for the great video. I do have a question about the setup that you did. do you have a mikrotik device that could acctually run the docker containers? as its shown in the video its a Mikrotik VM that runs on a PC right?

[@TheNetworkBerg]

That's right this video is on an x86 which is a virtual router. Some of my viewers have already successfully done this on other routerboards like the CCRs & RB5009's just a reminder that there is a prerequisite of having either ARM, ARM64 or x86 to do containers, any other architecture will not work sadly.

[@circuitfreak]

@@TheNetworkBerg Worth noting that I tested this on an rb3011 (32bit ARM) last night & the linuxserver image provided on Docker hub will start just fine & you can shell into it BUT won't actually start the controller if you enable logging & start the container it prints a message to the log saying 32-bit ARM is unsupported, citing "missing OS packages" This does not affect the container environment as a whole, just this specific image

[@TheNetworkBerg]

@@circuitfreak I have ran into this as well, some containers just won't work on MikroTik for whatever reason, even if you create the docker image yourself. Maybe something to send to MT support directly via email or on their forums. This does only seem to affect certain images and not the entire environment though.

[@sliddjur]

can you not add dhcp-server on dockers bridge interface for containers to automatically get an ip?

[@TheNetworkBerg]

You are welcome to try, but I do not know if this works with the current configuration as IP & Gateway needs to be added onto the VETH interface itself.

[@dimosabev4311]

On the RB4011iGS+RM, has anyone managed to get it running.

[@phillipsaw]

Unfortunately, you need an RB with ARM64 for the Unifi container.

[@midnightwatchman1]

what would be the point of that, I guess if only have your lab devices

[@TheNetworkBerg]

I know of some people running Unifi controllers on their CCRs and RB5009s for their production networks 😁 containers also have waaay more uses MikroTik has also released containers in the stable version of ROS so I am very interested in seeing what other solutions people start running off of their Tiks

[@aliraad9958]

I have CCR1036 and working OSPF and static route since 2 years v6.49.6 Can I upgrade to OS7 with no issues in the route table, last time just updated and got a lot of issues and my route table is gone lol, just downgraded and restore my backup, so now I decided to upgrade to use containers, Your advice is highly appreciated Thanks

[@TheNetworkBerg]

Hi Ali, the CCR1036 is still based off of the tile architecture as is the CCR1016 & CCR1072, upgrading any of them to v7 will not allow dockers or zerotier to work :( These are some of the common routers that support containers & other extended features RB4011 RB5009 CCR2004 CCR2116 CCR2216 x86 VM

[@aliraad9958]

@@TheNetworkBerg noted and thanks for your replay, for the v7 can i upgraded without issues?

[@TheNetworkBerg]

@@aliraad9958 OSPF and Static routing works pretty good on v7, so I cannot think of it causing any issues. Real problems are some of the extended features like BFD, BGP Confederations and MPLS signalled with BGP.

[@aliraad9958]

@@TheNetworkBerg thanks 🥰🥰

[@NetworkGamerBoy]

Can i use any AP ?

[@TheNetworkBerg]

Any Unifi AP you can join to this controller, but not any other vendor's APs

[@andreamastrangelo1122]

Hi, I would like to know an information: does cloud os router support docker? i couldn't figure out if it's only supported on x86 images. Thank you al