Dahua and Hikvision are the largest manufactures, with most companies rebranding them. Even if you don't use Synology, this is a handy list. https://www.synology.com/en-us/compatibility/camera
I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…
Axis is cool, they once even had (still have?) their own CPU / ISA (ETRAX CRIS) plus a Linux port:
I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…
Can second the Axis recommendation. I've never had problems with them. You can also easily use them with other systems or without Internet.
I really like my "IN-9008 Full HD" from https://www.instar.com - I think it matches all the requirements. (They ship to the US an all cloud services they offer are optional)
I recommend explicitly blocking internet access for Amcrest devices. I configured my camera with a static IP and blocked it in my PF rules with logging, and my camera model was making 1000s (16k in 24 hours) of DNS requests for config.amcrestcloud.com. I don't use any of their cloud services.
Rather than play whack-a-mole with filters, it's simpler to put mystery-meat devices on a separate VLAN+subnet that doesn't route. Firewall will keep the camera from accessing the internet, but does nothing to protect other hosts on the LAN. The cloud thing can be disabled from their web UI or the HTTP API, but between all of the knock-offs out there (of any brand), and the eventual end of firmware updates, it's best…
This is doubly important now that devices are starting to use DNS over HTTPs
Had great experience with Mobotix cameras in internal non-internet-connected networks. There are also models that can write on SD-Cards and such. But I didn't really shop around and compare, don't know how that supplier was picked.
I recommend explicitly blocking internet access for Amcrest devices. I configured my camera with a static IP and blocked it in my PF rules with logging, and my camera model was making 1000s (16k in 24 hours) of DNS requests for config.amcrestcloud.com. I don't use any of their cloud services.
Rather than play whack-a-mole with filters, it's simpler to put mystery-meat devices on a separate VLAN+subnet that doesn't route. Firewall will keep the camera from accessing the internet, but does nothing to protect other hosts on the LAN. The cloud thing can be disabled from their web UI or the HTTP API, but between all of the knock-offs out there (of any brand), and the eventual end of firmware updates, it's best…
Absolutely agree a VLAN is the better solution to block an entire network, and I do use one in my case (protecting my other VLANs). But I still need to explicitly block Amcrest cam because I also have an RPI on that VLAN doing image processing, which uploads to an external site; hence I can't block the entire VLAN.
I have worked professionally with access control and surveillance. I can give you two manufacturer recommendations: Axis and Geovision. Axis cameras are high end and expensive, but they will, in my experience, do anything an IP camera could reasonably be expected to do, and they will do it well. They are European in origin and are available from various retail outlets to ship this week. Geovision cameras are low end…
Axis is cool, they once even had (still have?) their own CPU / ISA (ETRAX CRIS) plus a Linux port: https://www.kernel.org/doc/Documentation/cris/README Edit: Official Linux support was removed with 4.17 in 2018 https://lkml.org/lkml/2018/6/3/142
The ETRAX CRIS has been superseded by ARM Cortex-M in the latest ARTPEC (Axis Real Time Picture Encoder Chip) chips these days. For a period of time in between those two architectures the ARTPEC chips used MIPS as a core.
Another recommendation for Axis here. I've used dozens of them for almost 20 years now and they've been rock solid, technically and support-wise. But they're expensive. They do have cheaper models nowadays, though. In addition to explosion-proof ones: https://www.axis.com/en-us/products/explosion-protected-came...
Fun story re: the term "explosion-proof": I was given a tour of an industrial facility where conditions required explosion-proof equipment. The tour guide made a point of calling out the explosion-proof motors in one of the rooms. One of the other tour group members asked the question "Why would it matter if these motors survived an explosion?" I visualized the facility exploding in a fiery blaze and a motor, fully i…
> "Explosion-proof means that it won't cause an explosion."
Another industry term for this is Intrinsically Safe.