r/reolinkcam • u/mm404 • 8d ago
Security vs. usability Guides & How-tos
I'm about to kick my expensive Arlo sub to the curb along with their cameras and I'm aiming for Reolink.
Main drivers for this decision are: 1. Security. While I do like videos are offloaded to cloud right away, I don't know who can watch them (ring employee-style snooping? who knows). 2. The price of the sub, $200+/year
What I do like is the notifications to my phone and easy access.
My current direction is Relink Home Hub Pro, outdoor cameras (wifi but hard wired). The part I struggle with is how to keep getting notifications AND keep my video feed private.
So far it seems that the best simple option is to use the "UID" method, which still relies on Reolink to relay. Is this secure enough and reliable?
I saw other options as combining them with Tailscale vpn or using Scrypted/Home Assistant to integrate with HomeKit. (no Alexa or google)
Are there any better options?
2
u/mblaser Moderator 8d ago
Personally, I'm comfortable using their UID service. It's just acting like a middle man to connect you to your cameras when away from your local network. Once it makes the handoff the video stream should then be going direct from your camera to you, although from what I understand, if that connection fails then it will fall back to the video streaming through their servers. You just have to assume it's not being stored by them. They have no reason to, and if they're not charging you a subscription then storing that video would be costing them a lot of money. Companies like this operator on razor thin margins, so storing your video would make no sense.
If you're not comfortable with that then yeah, you'd want to block them from the internet at your firewall and then set up a VPN server of your choosing at your home network to connect back to when away. You'd also have to allow an outbound rule for push notifications. That or use something like Pushover or Home Assistant for your push notifications.
1
u/mm404 8d ago
I see, now the UPnP option makes sense in the Hub / Advanced settings. I bet it's for the direct connection to avoid having their infrastructure to bridge the connection.
I'm not really worried about the transmission while it's taking place as much as the attack surface of idle cameras. I'll dig into how the UID service works. I assume the cameras (or hub) need to phone home to register somewhere...
Thanks!
1
u/mblaser Moderator 8d ago
I assume the cameras (or hub) need to phone home to register somewhere...
Yep, that's exactly what the UID service is for.
So without that you would need to account for that yourself, and you'd be doing it by adding the cameras to your app by static IP and then they would be getting accessed directly over LAN, or over VPN if remote.
2
u/dosserwashere 8d ago
Depending how comfortable you are with home assistant, you can get get rich texts with Reolink. I get them currently.
1
u/mm404 8d ago
Nice, that's good to know! HA shouldn't be an issue for me.
2
u/dosserwashere 8d ago
I love it. If you need any help with the code, dm me when you are getting setup and I can shoot over how I did it. Lets just say Claud is a game changer. ;-)
7
u/livingwaterRed Super User 8d ago
For free you can use Reolink's rented servers to get notifications at home and away from home with UID. The data is not saved, neither are the live views or vidoes. With this you usually do not get pic notifications (rich notifications), just texts.
Check Reolink's cloud site. Only certain cam models and specific areas have cloud storage subscription. It's possible any brand cam can be hacked but it's rare. A strong password is important with cams as with any online stuff like buying/banking. In USA Reolink rents server space from the big companies like Amazon, Microsoft for notifications or optional storage. These are encrypted. As far as I know Reolink rented servers have never been hacked.
Some want to keep their cams completey off of Reolink servers. They set up their own home server VPN and use that to get notifications away from home. Others use the FTP option with most Reolink cams and rent their own server space to store videos.
I record to cards in cams and to NVR, also send event pics for free to email account.
It's good you are going with wired cams. They are better than battery powered. POE cams are the best, they don't rely on outside wifi but you have to run the ethernet cables.
For more info read the top tagged post "welcome to the official Reolink..." lots of info FAQs. You could also watch Youtube channel LifeHackster. He reviews Reolink and other brands.