Best solution for ip Cameras

banosr

I have ip cameras in 3 different sites and my NVR doesn't let me use ddns to setup a camera, just ip addresses.

I got to netgate checking Tailscale options but now I don't know what is te best option.

Site 1 where the NVR is located internet 750 Mbps
Site 2 I have 20 cameras and 300 Mbps symmetrical internet.
Site 3 I have 15 cameras and 750/350 Mbps internet

What solution do you recommend, I am an accountant, a little tech savvy but no engineer.

I will really appreciate any ideas

Jarhead

@banosr So you're looking for a way to record them all to one NVR? You weren't very clear about that but that's what I'll assume.
I would set up Wireguard VPN's between the sites.
You could do Tailscale, but they use Wireguard too and now you'd be going through their servers when you could just do it yourself as easy.
OpenVPN is another option but you'll get better throughout with WG.

banosr

@Jarhead Thanks for your reply, I do want to record everything to the NVR. What hardware do you suggest I deploy wireguard from. In one of the sites I just have the isp Modem and a Velop wifi mesh network, no server and no additional infrastructure.

johnpoz

@banosr While sure you can send your camera feeds over the wire to some other site.. But 20 feeds with constant record is going to add up to some bandwidth.. Depending on what resolution your recording.

But If I call up the 3 feeds all at once, in 4k mode and only at 15fps.. Maybe your only like 720 and the streams use much less bandwidth?

Lets call it 10Mbps each, time 20 cameras - your looking at 200Mbps.. That is over half of your site 2 bandwidth.. Is that something you want to do?

And then site 3 15 would be 150mbps that is like 1/2 of your upload there..

Now your main site would have 350 coming in.. Like half of your 750mbps..

I would want the NVRs to be local to where the cameras are - and sure if you want to view a feed or keep an eye on them and display the video, but at a lower res, etc. at your site 1..

I mean it can be done sure - but I don't think I would do it.. Also so what if your connection is down, now you have no video of what went on..

I would put in NVRs at the site(s) where the cameras actually exist to be honest. And then put them on a network that doesn't flow over your normal network.. Mine cameras are all on a isolated vlan behind the NVR.. So unless I am actually viewing something on my pc remote or tv other device.. That traffic is just between the cameras and the nvr - my other other networks never see that traffic go over the same wires as their traffic.

banosr

@johnpoz I know the bandwidth requirements, The internet in each location is devoted to the cameras and I also have DVRs in each location. The main site is a showroom to demo the cameras to potential clients and I am not streaming 24/7.

johnpoz

@banosr well then its as simple as just using a vpn, shoot you don't even have to use a vpn to be honest, something as simple as gre tunnel could be used. I mean your not worried about securing the traffic?

What vpn you choose could be ipsec, could be openvpn, could be wireguard, tailscale..

banosr

@johnpoz That much I had gathered I just need a recommendation as to what hardware to use in each site to create the tunnels

Dobby_

@banosr

In each location a good NAS as a video surveillance for recording and
then VPN from the main office (central) to the branch offices for getting
in touch with the video files or plain being able to watch them over.

So you don´t waste the throughput for the video upload, but if you want or
must watch them you can easily connect.

It is like we have realized it.

johnpoz

@banosr said in Best solution for ip Cameras:

what hardware to use in each site to create the tunnels

Pretty much anything.. Like I said doesn't have even be a vpn tunnel - could be simple gre tunnel.. Which wouldn't have the overhead that vpns have - which would allow you to use smaller boxes.

So you have any concern that the traffic would be intercepted and viewed? I mean someone would have to be in your path.. Like some router in the middle saying oh look someone is passing video inside a tunnel - lets intercept it and watch it ;)

What do you have at the sites now?

banosr

@johnpoz Just isp modems and a Velop Router at one site. I had ddns in the routers and port forwarding but in this nvr I am unable to use ddns.

Patch

@banosr said in Best solution for ip Cameras:

I just need a recommendation as to what hardware to use in each site to create the tunnels

Many users with video security cameras want the ability to remotely view what is being recorded, a function supported my most such systems.

If you also want that functionality and have a network video recorder at each site, then why connect the sites at all? Just use the remote access from each built in.

johnpoz

@banosr get some proper sized netgate appliances for your bandwidth.. 2100 should prob work for the remote sites.. But prob want something bigger at the site 1.. If your talking ipsec vpn the 2100 should be able to do your bandwidth, then get a 4200 for your site one.

banosr

@johnpoz Thanks, that's all I needed to know