I segmented the cameras and Blue Iris video system into its own VLAN to reduce the traffic pfSense needs to process as well as help prevent unauthorized access. Remote access is monitored by Fail2ban and other means to prevent unauthorized intrusion or brute-forcing of passwords. This reverse proxy prevents the need to establish secure OpenVPN connections prior to connecting and reduces complexity for my less technical users to something manageable. Remote access is supported from web browsers or mobile Blue Iris clients via a Traefik reverse proxy which enforces HTTPS access from clients preventing eavesdropping. I use the camera’s image manipulation hardware to apply the timestamp to the video feed before it arrives at Blue Iris, this prevents Blue Iris having to do a lot of decoding, re-encoding just to add a timestamp to the video. My cameras are configured to provide video on primary (1920x1080) and sub stream (640x480) broadcasts and update at 15fps which is sufficient to track movement whilst reducing network load and storage requirements. These cameras have excellent night time performance thanks to the Sony ‘Starvis’ sensor as well as a motorized lens which simplified purchasing and fine tuning during installation. I deployed six Dahua IPC-HDW5231R-Z 2MP Starlight cameras around the perimeter of my home cabled with CAT-5 cable utilising power over ethernet (PoE) from my Juniper switch. Your own camera selection will be highly dependant on your physical needs, for example focal range and lighting will largely influence your decision. I use a Windsows Server 2016 virtual machine under ESXi with 4 vCPU and 4GB RAM allocated on a Xeon-d 1541 processor based system. There are also native mobile clients for Android and iOS as well as a great web based interface for remote viewing. The primary downside was the need for a Windows licence but this in itself wasn’t prohibitive. I selected Blue Iris security software for its combination of affordability, support and feature set.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |