Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Self-hosted open source IP security cameras?

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 45 posts

Re: Ask HN: Self-hosted open source IP security cameras?

#31

Post by wesapien »

peterhadlaw wrote: post #18
dervjd wrote: post #14

Once you step up from consumer level (Nest/Ring/Wyze) cameras, you'll find that nearly every IP camera supports the standard RTSP/ONVIF format. They don't need any internet access to function. Standard practice is to secure them by using a dedicated VLAN (so they can't talk to anything else on your network) and default deny firewall rules (so they can't get to the Internet or other parts of your network). It's defini…

I've been trying for a long time to learn how to setup this "separate VLAN" stuff. Do you have a resource you could recommend? :)

A VLAN is a separate broadcast domain in ethernet networks. VLANs prevent communication between different VLANs unless you set it up for inter-vlan routing. Thats why they suggest putting these untrusted devices on a separate VLAN (isolation). Typically you assign a whole new group of ip adresses for each Vlan ID.

For example: camera network - vlan 10 - 10.0.10.0 255.255.255.0

wifi network - vlan 11 - 10.0.11.0 255.255.255.0

wired network - vlan 12 - 10.0.12.0 255.255.255.0

Re: Ask HN: Self-hosted open source IP security cameras?

#32

Post by dTal »

the-smug-one wrote: post #8

Axis cameras aren't open source, but they're just Linux running systemd and Axis (or other) software. You can ssh into them, write your own apps, etc. They're not particularly locked down. They support ONVIF and VAPIX, which are API:s that VMS's such as Milestone and Genetec target. > poorly secured IoT devices will get repurposed for. Don't let it have access to the outside net then?

>Axis cameras aren't open source, but they're just Linux running systemd

How is this not a GPL violation?

Re: Ask HN: Self-hosted open source IP security cameras?

#33

Post by zikduruqe »

I am running Wyze v2 cameras with RTSP firmware on them, using Homebrige and Scrypted. People are also liking camera.ui too.

Homebridge - https://github.com/homebridge/homebridge

scrypted - https://github.com/koush/scrypted/wiki/Installation:-Docker-...

camera.ui - https://github.com/SeydX/camera.ui

Re: Ask HN: Self-hosted open source IP security cameras?

#34

Post by 7steps2much »

dTal wrote: post #32
the-smug-one wrote: post #8

Axis cameras aren't open source, but they're just Linux running systemd and Axis (or other) software. You can ssh into them, write your own apps, etc. They're not particularly locked down. They support ONVIF and VAPIX, which are API:s that VMS's such as Milestone and Genetec target. > poorly secured IoT devices will get repurposed for. Don't let it have access to the outside net then?

>Axis cameras aren't open source, but they're just Linux running systemd How is this not a GPL violation?

I think (but don't know if i am correct) that the original commenter was referring to the custom software running on top of Linux?

If they just run "stock" Linux then they can point their users towards that? Or maybe they just don't care until they get sued, also an option of course.

Re: Ask HN: Self-hosted open source IP security cameras?

#35

Post by spacexsucks »

bradknowles wrote: post #22
dervjd wrote: post #14

Once you step up from consumer level (Nest/Ring/Wyze) cameras, you'll find that nearly every IP camera supports the standard RTSP/ONVIF format. They don't need any internet access to function. Standard practice is to secure them by using a dedicated VLAN (so they can't talk to anything else on your network) and default deny firewall rules (so they can't get to the Internet or other parts of your network). It's defini…

The issue here is that HikVision is a Chinese company, and they have been widely known to supply equipment to the government to aid in the suppression of the Uighur people. Same with Dahua. The next problem is that both these companies operate under a very wide array of brands, hundreds if not thousands of names, some of which you might recognize and may have thought that they were separate. Lorex is one such brand.…

Thank you for those links. I tried avoiding Danua and Hikvision. I went with Amcrest, only to find it on the Danua list. :(

Luckily i only spent $150 for 3 cameras

Re: Ask HN: Self-hosted open source IP security cameras?

#36

Post by egberts1 »

lormayna wrote: post #5

I have several cheap chinese cameras (Sricam) in a separated VLAN without internet access in my home LAN. The camera are connected via ONVIF to a Raspberry running [motion]( https://motion-project.github.io/ ).

better off using VPN from the camera to your camera server … within your home LAN, unless you can create the camera firmware.

Many seccam have IRC beaconing of which your gateway should be firewalling off.

Re: Ask HN: Self-hosted open source IP security cameras?

#37

Post by lormayna »

egberts1 wrote: post #36
lormayna wrote: post #5

I have several cheap chinese cameras (Sricam) in a separated VLAN without internet access in my home LAN. The camera are connected via ONVIF to a Raspberry running [motion]( https://motion-project.github.io/ ).

better off using VPN from the camera to your camera server … within your home LAN, unless you can create the camera firmware. Many seccam have IRC beaconing of which your gateway should be firewalling off.

My camera server is in a separate VLAN and the traffic from cameras pass through a FW to reach it. The cameras cannot reach internet or any other hosts inside my home network. According to the logs on the FW, my cameras are beaconing in China through DNS.

Re: Ask HN: Self-hosted open source IP security cameras?

#38

Post by the-smug-one »

7steps2much wrote: post #34
dTal wrote: post #32

Earlier quoted context omitted.

>Axis cameras aren't open source, but they're just Linux running systemd How is this not a GPL violation?

I think (but don't know if i am correct) that the original commenter was referring to the custom software running on top of Linux? If they just run "stock" Linux then they can point their users towards that? Or maybe they just don't care until they get sued, also an option of course.

Yeah, any changes to the kernel would obviously also get GPL:d :).
Post reply on HN