Refund me - Unexplained 900Mbps Data transfers to the cloud??

[seeg]

Dear HexOS / Linus Tech Tips Team,

I hope this message finds you well. I'm writing regarding my recent HexOS purchase, which I bought as an early access product expecting simplified TrueNAS management. 

Unfortunately, I've encountered challenges that have led me to request a refund, and I need your help disabling the service.

What I Experienced

After claiming my server

1. Unexpected Network & disk: With no backup configured, I saw sustained ~900Mbps outbound traffic to link.storjshare.io and api.hexos.com via the wsocat WebSocket tunnel (PID 17377, 1MB buffers). This matched high disk reads from my media vault.

2. Difficult to Control: Killing wsocat stops it temporarily, but it restarts. midclt call service.stop "hexos-agent" fails (service not found). No clear GUI toggle exists.

3. Dashboard Dependency: Blocking the tunnel (with my firewall) eliminates uploads but breaks HexOS Deck access ("Server not available"). - Even removing the server from the HexOS cloud service does not stop this data transfer.

4. Unexpected Cloud Service Lock in: I didn't expect to be required to rely on your cloud service to maintain my own server, this goes against self hosted as a concept..

Why HexOS Isn't Valuable for Me

Honestly, I don't see much value in continuing with HexOS for the price I paid:

• Limited Features: The cloud dashboard and "simplified" management haven't demonstrated significant improvements over stock TrueNAS Scale.

• Early Access Concerns: I purchased during early access expecting rapid progress, but haven't seen meaningful updates or enhancements that justify the cost.

• Misleading Expectations: The aggressive cloud sync behavior felt like data exfiltration rather than helpful management, without clear opt-out options or bandwidth controls.

I feel somewhat misled by the early access promise—I expected a product evolving toward clear value, but the core issues (uncontrollable uploads, poor disable process) persist.

My Requests

1. Full Refund: I'd like to return to standalone TrueNAS Scale.

2. Official Disable Instructions: Step-by-step process to permanently remove the HexOS overlay/tunnel without data loss or reinstall.

3. Data Confirmation: What was uploaded during the sync? (Metadata only? Full files from my media vault?) And can you confirm/delete any stored data?

Thank you for understanding my position. I wanted HexOS to work but ultimately find it doesn't meet my needs. Your assistance with the refund and clean uninstall would be greatly appreciated.

[jonp]

Hi Seeg,

Refund requests can be made by simply emailing support@hexos.com, but one of our moderators has already flagged your account for a refund..  The behaviors you are reporting are not due to HexOS or TrueNAS SCALE.  We do not "exfil" your data in any way.  We simply provide a management platform for your server through an API.  We do not store copies of any of your data anywhere.  The 900mbps sustained data transfer you are claiming is likely coming from a 3rd party application you installed or something else on your network.  Otherwise I'd ask you to post any logs or evidence to support this claim so we can investigate further, as we do not see that behavior on any of our test systems or other reports from customers.

It appears you used AI to write this post and I'm guessing it got a lot of things wrong that you weren't aware of.  Not a problem, we will process a refund all the same.  We don't want any unsatisfied customers.  Thanks for giving us a try and we wish you luck on finding a better solution that meets your needs.

 

[jonp]

Oh and regarding this:

1 hour ago, seeg said:

Official Disable Instructions: Step-by-step process to permanently remove the HexOS overlay/tunnel without data loss or reinstall.

You can unclaim your system from the Settings -> Reset page without losing any data. 

[seeg]

I appreciate the refund.

Here's a human written response, sorry the formatting isn't as fancy.

Correct - the post was summarized from a troubleshooting session late at night with Claude Sonnet 4.5
I got out of bed to notice this due to hearing "hard disk trying very hard" noises, which is unusual without someone using my Nas which alerted me to this issue (not the best alerting I admit)

I initially checked Disk reporting tab in TrueNas. Near 100% saturation of Sata lanes.
Then network tab (900Mbps of outgoing traffic)
Then I went to my router. I confirmed this was reaching link.storjshare.io (not something in my network, or a service I use)

There's no VM's on this Nas, no apps etc.
Just a simple disk pool. The only reason the Nas itself contacts the internet is to update etc. Usual traffic is very low.

I blocked this domain as I initially thought my network was comprised. This completely stopped hard disk activity and network activity in TrueNas reports.
Then when visiting Command deck I see I'm now unable to access my machine - this made me realize link.storjshare.io likely backs api.hexos.com - Can you confirm this?

Then, I toggled my new firewall rule - this then re-established deck.hexos.com connectivity. 
With the firewall rule paused I stopped my K3S cluster, which mounts this Nas as a share to rule this out - has done for a long time without issue.
The network / disk activity continues. It continues from TrueNas direct out to the internet. Not via any other server on my network.

The culprit:

www-data   17377  0.0  0.0   8636  4968 ?        Ss   18:30   0:00 /usr/local/libexec/wsocat --buffer-size 1048576 --ping-interval 30 --ping-timeout 60 --exit-on-eof --text ws://127.0.0.1:6000/websocket wss://api.hexos.com/server/<serverid>/<server_local_ip>

 

Out of interest, could you let me know what was wrong with my original post?
Unclaiming the server did not stop the network/disk activity issue as stated in my original post.