Cameras and NVRs without the vendor cloud
Most camera systems reach your phone through the maker's cloud, because the recorder at your site can't be reached directly. That works until the cloud changes, goes away or starts charging. A static address for the site lets you connect to your own recorder, on your terms.
Why cameras lean on the cloud
Your recorder (NVR) sits behind your router. To watch it from outside, your phone has to reach it. On lines behind CGNAT, such as Starlink and 5G home internet, nothing from outside can reach it, so camera makers relay the video through their own servers. You are then tied to that brand's app, account and terms.
The direct way
- Give the site a static address with TunnelNet Business.
- In the portal, open only the port your recorder's app uses, pointed at the recorder.
- Set the app, or the recorder's own viewer, to the site's address.
The address stays the same on any line, and if your router moves to a backup line, it comes along.
Lock it down first
A camera recorder open to the whole internet is a target. Before you open anything:
- Allow only the people you name. Each port can be limited to a list of addresses, such as your office or your monitoring company. Nobody else can even try to connect.
- Never open the admin page to everyone. Open the viewing port, not the setup page, and only to your list.
- Change the default password and keep the recorder's firmware up to date.
- Prefer a remote-worker connection for yourself on UniFi gateways: your laptop joins the office network, and no camera port is open at all.
Country blocks and a login wall in front of any port are coming soon.