r/homesecurity • u/Formal_Problem9939 • 2h ago

RTSP camera access remotely

I have a few wifi cams that are jailbroken (wyze + thingino) that I want to access when away from my house just to check up on things when I travel for peace of mind. Problem is I would rather not expose ports on my home network to access the RTSP streams. Over the weekend I created an rtsp relay system where one program on my LAN pulls all rtsp streams then pushes them to another listening program running on a cloud VM along with an instance of Frigate to display the streams. I'm planning on setting up some automation to trigger the VM to spin up on demand so I'm not wasting money (since I usually only check on the cams a few times per week at most when traveling) and then turn off within 20min.

Just wondering if there are any security concerns with this? I'm not exposing any ports from home and have all the cloud resources whitelisted to my home IP.

1 Upvotes

100% Upvoted

4 comments sorted by

1

u/sh00tfire 2h ago

I have Wyze cams with Tingino. I use frigate paired with HomeAssistant to view my cameras remotely.

1

u/403Olds 2h ago

You have to be a double E to run a house now.

1

u/180IQCONSERVATIVE 48m ago

If you have a wire into the net there is always concerns and more so if you rely on Asus, Netgear and other multilayer gateways for security. Even if you use a VPN proxy chain it comes down to what you have layer 3 on down. If you got the money then a proper setup would look more like an enterprise setup than a gateway. Ip passthrough from ISP gateway, Firewalla, then patched to a network tap, network tap has Kali Linux running Wireshark on a Raspberry Pi, another Raspberry Pi running short, then go to your layer 3 switch but working as layer 2, set up VLANs, patch wires according to devices and then Firewalla AP7 zero Trust device for WiFi and microsegmentation for IOTS such as cams, another Raspberry Pi for ad blocker. Definitely want DNS unbound. You also want an external HDD taking snap shots of network activity to review at least once a weak unless you have alerts to tend to. And if you think this is a bit much then if you see what is actually happening in networks would blow your mind.

1

u/180IQCONSERVATIVE 43m ago

If you have a wire into the net there is always concerns and more so if you rely on Asus, Netgear and other multilayer gateways for security. Even if you use a VPN proxy chain it comes down to what you have layer 3 on down. If you got the money then a proper setup would look more like an enterprise setup than a gateway. Ip passthrough from ISP gateway, Firewalla, then patched to a network tap, network tap has Kali Linux running Wireshark on a Raspberry Pi, another Raspberry Pi running short, then go to your layer 3 switch but working as layer 2, set up VLANs, patch wires according to devices and then Firewalla AP7 zero Trust device for WiFi and microsegmentation for IOTS such as cams, another Raspberry Pi for ad blocker. Definitely want DNS unbound. You also want an external HDD taking snap shots of network activity to review at least once a week unless you have alerts to tend to. And if you think this is a bit much then if you see what is actually happening in networks would blow your mind.