The older I get, the more I refuse to buy IoT stuff without being future proof.
Cameras, I only care for quality and Real-Time Streaming Protocol aka RTSP. I don't care if that device will never see internet again, I can use it until it dies and I cannot fix it.
My Asus wireless router running OpenWRT, it is no allowed to touch the internet itself, it is just a dumb access point providing radio, nothing else which again, I can use it until it dies even if OpenWRT projects is shutdown.
Found out recently that I can actually install/remove apps from my Samsung smartTV running TizenOS using my Linux PC by exploring is developer mode. Add a few more years to its lifespan.
I know I can hack into my robot vaccum but haven't had time to do that yet.
I run Linux everywhere at home so does my homelab and 3D printer.
IoT are blocked from accessing the LAN while OPNSense allows me to talk to them.
Block everything by default until something breaks.
The ones I cannot take control like my Broter Led printer, I just block its LAN access to prevent the manufacturer from acting like HP, I can still use its network feature but not the other way around.
Just like that, your devices will last way past a decade, you have full control, you have security measures in place, and spending is virtually null, buy it once and use until it breaks and you cannot fix it.
Author here. Spent a decade deploying IIoT: sensors, gateways, fleet management across industrial sites. These are the patterns that consistently separate systems still running from ones that got scrapped. Happy to answer questions.
>By default, all devices hit your main gateway through the wildcard CNAME. But you can override any individual device by creating a specific A record. Need to debug a misbehaving unit? Point it to your local development gateway. Rolling out to a new region? Route EU devices to Frankfurt without touching the firmware. Moving a customer to a dedicated cluster? Update one DNS record
The older I get, the more I refuse to buy IoT stuff without being future proof.
Cameras, I only care for quality and Real-Time Streaming Protocol aka RTSP. I don't care if that device will never see internet again, I can use it until it dies and I cannot fix it.
My Asus wireless router running OpenWRT, it is no allowed to touch the internet itself, it is just a dumb access point providing radio, nothing else which again, I can use it until it dies even if OpenWRT projects is shutdown.
Found out recently that I can actually install/remove apps from my Samsung smartTV running TizenOS using my Linux PC by exploring is developer mode. Add a few more years to its lifespan.
I know I can hack into my robot vaccum but haven't had time to do that yet.
I run Linux everywhere at home so does my homelab and 3D printer.
IoT are blocked from accessing the LAN while OPNSense allows me to talk to them. Block everything by default until something breaks.
The ones I cannot take control like my Broter Led printer, I just block its LAN access to prevent the manufacturer from acting like HP, I can still use its network feature but not the other way around.
Just like that, your devices will last way past a decade, you have full control, you have security measures in place, and spending is virtually null, buy it once and use until it breaks and you cannot fix it.
Author here. Spent a decade deploying IIoT: sensors, gateways, fleet management across industrial sites. These are the patterns that consistently separate systems still running from ones that got scrapped. Happy to answer questions.
>By default, all devices hit your main gateway through the wildcard CNAME. But you can override any individual device by creating a specific A record. Need to debug a misbehaving unit? Point it to your local development gateway. Rolling out to a new region? Route EU devices to Frankfurt without touching the firmware. Moving a customer to a dedicated cluster? Update one DNS record
Great idea !
Certificate expiration timeline...
You should be able to rotate the certificate on the device; this is not a major technical challenge.
Local hubs solve that pretty well, aside from still needing to update the hub.