يكشف معظم الناس كاميرات منازلهم للإنترنت بإعادة توجيه المنافذ — فيتركون الشبكة كاملةً عرضة للاختراق. ينشئ Tailscale نفقًا خاصًا مشفّرًا، فلا ترى كاميراتك إلا أجهزتك. بلا منافذ مفتوحة. بلا مخاطر. مفتوح المصدر بنسبة 100%.
The way most people access cameras remotely is a security disaster.
You install a camera at home. You want to see it from work or while traveling. The internet says: «ما عليك إلا إعداد تحويل المنافذ في الموجّه!» You open port 8080, point it at your camera's IP, and now you can see your camera from anywhere at http://your-public-ip:8080.
The problem? You just punched a hole in your firewall. That hole is visible to EVERY hacker, bot, and scanner on the internet — all 4+ billion IP addresses. Shodan.io (a search engine for internet-connected devices) indexes millions of exposed cameras within hours. Your camera — and potentially your entire home network — is now accessible to anyone who finds that open port.
❌ Opens a hole in your firewall visible to the ENTIRE internet
❌ Bots scan for open ports 24/7 — they WILL find yours
❌ Camera login pages are often weak (default passwords)
❌ Camera firmware has known vulnerabilities
❌ Attackers can pivot from camera to your entire network
❌ Your public IP exposes your location
❌ No encryption by default on most cameras
❌ Shodan indexes your camera within hours
✅ ZERO ports opened — firewall stays completely closed
✅ Nothing visible to internet scanners
✅ Only YOUR devices on YOUR Tailscale network can connect
✅ End-to-end WireGuard encryption
✅ Even if camera has vulnerabilities — it's not exposed
✅ Your IP address stays hidden
✅ Every connection is authenticated + encrypted
✅ Invisible to Shodan and all scanners
In 2020, researchers found 15,000+ كاميرا Hikvision مكشوفة with default passwords accessible on Shodan. In 2023, a family discovered their baby monitor was being watched by strangers — the camera was port-forwarded with the factory password. In 2021, a Ring camera hack allowed attackers to speak to a child through the speaker. إعادة توجيه منافذ كاميراتك تشبه ترك باب منزلك الأمامي مفتوحًا والأمل في ألا يدخل أحد.
❌ PORT FORWARDING (Anyone can try to connect)
✅ TAILSCALE (Only YOUR devices can connect)
Tailscale is a mesh VPN built on WireGuard (أسرع بروتوكولات VPN وأكثرها أمانًا، وهو مدمج في نواة Linux). ينشئ شبكة خاصة ومشفّرة بين جميع أجهزتك — هاتفك وحاسوبك المحمول وخادمك المنزلي وRaspberry Pi — أينما كانت في العالم.
Unlike traditional VPNs (which route all traffic through one server), Tailscale creates direct, peer-to-peer connections between your devices. Your phone in a coffee shop connects directly to your home Raspberry Pi — encrypted, fast, and with zero configuration on your router.
تشفير بمستوى عسكري، مدمج في نواة Linux
Behind NATs, firewalls, cellular — doesn't matter
بلا إعادة توجيه منافذ أو قواعد جدار ناري. لا شيء.
Up to 100 devices, 3 users — $0/month
Client code is open source on GitHub (BSD license)
Linux, Windows, macOS, iOS, Android, Raspberry Pi
Direct device-to-device connections, no relay
الوصول إلى الأجهزة بالاسم (مثل "pi-camera") بدل عنوان IP
Tailscale's client is open source (github.com/tailscale/tailscale، ترخيص BSD). خادم التنسيق احتكاري، لكن يوجد بديل مفتوح المصدر بالكامل يُسمّى Headscale — a self-hosted Tailscale control server. For maximum independence: Tailscale client + Headscale server = 100% open source, 100% self-hosted, zero dependency on any company.
Here's the architecture for securely accessing home cameras from anywhere:
Key insight: The cameras NEVER touch the internet. They sit on your local network. The Raspberry Pi (with Tailscale) is the ONLY device that bridges your private Tailscale network to your local camera network. Your router's firewall stays completely closed.
From zero to secure camera access in about 30 minutes.
Tailscale's free plan includes 100 جهاز و3 مستخدمين — more than enough for a home setup. No credit card needed.
This is the machine on your home network that can see the cameras. It becomes the "bridge" between Tailscale and your cameras.
This is what lets your remote devices access the cameras' LOCAL IPs through Tailscale:
بعد الموافقة على مسار الشبكة الفرعية في لوحة إدارة Tailscale، يمكن لأي جهاز في شبكة Tailscale الوصول إلى أي عنوان IP في شبكتك المنزلية المحلية (192.168.1.x) — including your cameras — as if they were physically at home!
Install the app, sign in with the same account, and enable "Use Tailscale subnets" (أو "Accept routes" على سطح المكتب). أصبح هاتفك أو حاسوبك المحمول الآن متصلًا بشبكة Tailscale الخاصة بك.
الآن، من أي جهاز يعمل عليه Tailscale — حتى من فندق بدولة أخرى — يمكنك الوصول لكاميراتك بعناوين IP المنزلية المحلية:
You're now accessing your cameras securely from anywhere. The traffic is encrypted with WireGuard. No ports are open on your router. No cloud service sees your video. Nobody except devices on YOUR Tailscale network can connect. You've achieved something that corporations pay thousands for — for $0.
تسجيل كاميرات بالذكاء الاصطناعي + وصول آمن عن بُعد = التركيبة المثالية.
Frigate (frigate.video) هو مسجّل فيديو شبكي مفتوح المصدر (NVR) مزوّد بـ كشف الأجسام بالذكاء الاصطناعي. يعمل على Raspberry Pi أو أي حاسوب Linux، ويؤدي ما يلي:
• Records video from all your cameras 24/7
• Uses AI to detect people, cars, animals (محليًا — بلا سحابة!)
• Sends alerts only when it detects something interesting (not every tree branch)
• Stores recordings on a local hard drive
• Beautiful web dashboard to view all cameras
Combined with Tailscale, you get: كاميرات بالذكاء الاصطناعي + وصول آمن عن بُعد + دون اعتماد على السحابة + دون رسوم اشتراك. دون اشتراك Ring، أو رسوم Google Nest، أو وصول الشركات إلى فيديوهاتك.
Tailscale's client is open source, but their coordination server is proprietary. If you want zero dependency on Tailscale's company، استخدم Headscale — a fully open-source, self-hosted implementation of Tailscale's control server.
Tailscale client + Headscale server = 100% open source mesh VPN. لا شركة معنية. لا تُرسل بيانات لأحد. سيادة كاملة.
Use Tailscale's free tier if you just want it to work with zero effort. Use Headscale if you want 100% independence from any company, if you're running this for an organization, or if you're philosophically committed to full open source. Both use the same WireGuard encryption — equally secure.
افتح Tailscale على هاتفك ← انتقل إلى عنوان IP الخاص بالكاميرا ← شاهد البث المباشر. لا توجد خدمة سحابية وسيطة. لا يستطيع قسم تقنية المعلومات لدى جهة عملك رؤية حركة بيانات الكاميرا (فهي مشفرة من طرف إلى طرف).
هل تقضي إجازة في بلد آخر؟ افتح Tailscale ← اتصل ← شاهد كاميرات منزلك كما لو كنت على أريكتك. يعمل عبر Wi-Fi الفندق وWi-Fi المطار وشبكة الهاتف — في كل مكان.
Frigate detects a person in your driveway at 2 AM → sends notification to your phone → you open the camera feed instantly through Tailscale. Only alerts for people/cars, not every cat or shadow.
أضف زوجك أو زوجتك إلى شبكة Tailscale الخاصة بك (تتيح الخطة المجانية 3 مستخدمين). سيتمكن أيضًا من مشاهدة الكاميرات من هاتفه. لا كلمات مرور مشتركة؛ لكل شخص وصول موثّق خاص به.
Frigate records 24/7 to a local hard drive. Through Tailscale, you can browse past recordings from anywhere — scrub through the timeline, download clips, review events.
Tailscale doesn't just work for cameras — access your NAS, Nextcloud, Pi-hole dashboard, Home Assistant, Plex/Jellyfin, SSH — anything on your home network, securely from anywhere.
Factory passwords (admin/admin, admin/12345) are the #1 reason cameras get hacked. Even behind Tailscale, change EVERY camera's default password to something strong (12+ characters). This is defense in depth — multiple layers of security.
Camera manufacturers release firmware updates that fix security vulnerabilities. Check for updates every 3–6 months. Hikvision, Reolink, Dahua, and others have had critical vulnerabilities patched in updates. An unpatched camera is a liability.
For maximum isolation: put cameras on a separate network (VLAN) that has NO internet access. Cameras only need to talk to your NVR (Frigate), not to the internet. This way, even if a camera is compromised, it can't reach the internet or your other devices.
In the Tailscale admin panel, set up ACLs to control which devices can access which services. Example: your phone can access cameras, but your work laptop cannot. Your spouse can view cameras but not SSH into the server.
تحاول كاميرات كثيرة «الاتصال بالوطن» — فترسل البيانات لخوادم المصنّع (في الصين أو الولايات المتحدة أو غيرهما). إن كنت تستخدم Frigate كمسجّل NVR، فلا تحتاج ميزات سحابة الكاميرا. احجب كل اتصال صادر بالإنترنت للكاميرات في الموجّه/الجدار الناري. ينبغي أن تتواصل الكاميرات مع Pi فقط.
If recordings are stored on an external drive, encrypt it (LUKS on Linux). If someone steals the Pi or the hard drive, they can't access your recordings without the encryption password.
Security cameras protect YOUR home and family. They must NEVER be used to spy on neighbors, record areas beyond your property, or invade anyone's privacy. In Islam, the privacy of others is sacred — even when technology makes it easy to violate. Secure your cameras ethically: protect your family, respect others.
You've built something powerful: AI-powered cameras accessible from anywhere in the world, through an encrypted tunnel, with zero ports open, zero cloud dependency, and zero subscription fees. No corporation sees your video. No hacker can reach your cameras. Your home security is truly YOURS.
«وَأَلَنَّا لَهُ الْحَدِيدَ • أَنِ اعْمَلْ سَابِغَاتٍ»
«وأَلَنّا له الحديد — أن اعمل سابغات». Tailscale + Frigate = درعك الرقمي. حماية منزلك بدقة وأخلاق. ✨