Enamik inimesi avab kodukaamerad internetti pordisuunamisega, jättes KOGU võrgu häkkeritele haavatavaks. Tailscale loob privaatse krüpteeritud tunneli, nii et kaameraid näevad AINULT sinu seadmed. Null avatud porti. Null riski. 100% avatud lähtekoodiga.
The way most people access cameras remotely is a security disaster.
You install a camera at home. You want to see it from work or while traveling. The internet says: „Seadista lihtsalt ruuteris pordiedastus!“ You open port 8080, point it at your camera's IP, and now you can see your camera from anywhere at http://your-public-ip:8080.
The problem? You just punched a hole in your firewall. That hole is visible to EVERY hacker, bot, and scanner on the internet — all 4+ billion IP addresses. Shodan.io (a search engine for internet-connected devices) indexes millions of exposed cameras within hours. Your camera — and potentially your entire home network — is now accessible to anyone who finds that open port.
❌ Opens a hole in your firewall visible to the ENTIRE internet
❌ Bots scan for open ports 24/7 — they WILL find yours
❌ Camera login pages are often weak (default passwords)
❌ Camera firmware has known vulnerabilities
❌ Attackers can pivot from camera to your entire network
❌ Your public IP exposes your location
❌ No encryption by default on most cameras
❌ Shodan indexes your camera within hours
✅ ZERO ports opened — firewall stays completely closed
✅ Nothing visible to internet scanners
✅ Only YOUR devices on YOUR Tailscale network can connect
✅ End-to-end WireGuard encryption
✅ Even if camera has vulnerabilities — it's not exposed
✅ Your IP address stays hidden
✅ Every connection is authenticated + encrypted
✅ Invisible to Shodan and all scanners
In 2020, researchers found 15,000+ avalikult ligipääsetavat Hikvisioni kaamerat with default passwords accessible on Shodan. In 2023, a family discovered their baby monitor was being watched by strangers — the camera was port-forwarded with the factory password. In 2021, a Ring camera hack allowed attackers to speak to a child through the speaker. Kaamerate portide suunamine on nagu välisukse lahti jätmine lootuses, et keegi sisse ei astu.
❌ PORT FORWARDING (Anyone can try to connect)
✅ TAILSCALE (Only YOUR devices can connect)
Tailscale is a mesh VPN built on WireGuard (kiireim ja turvalisim VPN-protokoll, mis on Linuxi tuuma sisse ehitatud). See loob privaatse krüpteeritud võrgu kõigi sinu seadmete — telefoni, sülearvuti, koduserveri ja Raspberry Pi — vahele, ükskõik kus maailmas need asuvad.
Unlike traditional VPNs (which route all traffic through one server), Tailscale creates direct, peer-to-peer connections between your devices. Your phone in a coffee shop connects directly to your home Raspberry Pi — encrypted, fast, and with zero configuration on your router.
Sõjaväetasemel krüpteerimine, Linuxi tuuma sisseehitatud
Behind NATs, firewalls, cellular — doesn't matter
Ei pordisuunamist ega tulemüürireegleid. Mitte midagi.
Up to 100 devices, 3 users — $0/month
Client code is open source on GitHub (BSD license)
Linux, Windows, macOS, iOS, Android, Raspberry Pi
Direct device-to-device connections, no relay
Juurdepääs seadmetele nime (nt "pi-camera"), mitte IP-aadressi järgi
Tailscale's client is open source (github.com/tailscale/tailscale, BSD litsents). Koordineerimisserver on omanduslik, kuid olemas on täielikult avatud lähtekoodiga alternatiiv nimega Headscale — a self-hosted Tailscale control server. For maximum independence: Tailscale client + Headscale server = 100% open source, 100% self-hosted, zero dependency on any company.
Here's the architecture for securely accessing home cameras from anywhere:
Key insight: The cameras NEVER touch the internet. They sit on your local network. The Raspberry Pi (with Tailscale) is the ONLY device that bridges your private Tailscale network to your local camera network. Your router's firewall stays completely closed.
From zero to secure camera access in about 30 minutes.
Tailscale's free plan includes 100 seadet ja 3 kasutajat — more than enough for a home setup. No credit card needed.
This is the machine on your home network that can see the cameras. It becomes the "bridge" between Tailscale and your cameras.
This is what lets your remote devices access the cameras' LOCAL IPs through Tailscale:
Pärast alamvõrgu marsruudi kinnitamist Tailscale’i halduspaneelil saab iga sinu Tailscale’i võrgu seade ligi igale koduvõrgu IP-aadressile (192.168.1.x) — including your cameras — as if they were physically at home!
Install the app, sign in with the same account, and enable "Use Tailscale subnets" (või töölaual "Accept routes"). Nüüd on su telefon või sülearvuti ühendatud sinu privaatse Tailscale’i võrguga.
Nüüd saad igast Tailscale'iga seadmest, kasvõi teise riigi hotellist, ligi kaameratele nende KOHALIKE koduste IP-aadressidega:
You're now accessing your cameras securely from anywhere. The traffic is encrypted with WireGuard. No ports are open on your router. No cloud service sees your video. Nobody except devices on YOUR Tailscale network can connect. You've achieved something that corporations pay thousands for — for $0.
Tehisintellektiga kaamerasalvestus + turvaline kaugjuurdepääs = parim kooslus.
Frigate (frigate.video) on avatud lähtekoodiga võrguvideosalvesti (NVR), millel on Objektituvastus tehisintellektiga. See töötab Raspberry Pi-l või mis tahes Linuxi arvutil ning:
• Records video from all your cameras 24/7
• Uses AI to detect people, cars, animals (kohalikult — pilveta!)
• Sends alerts only when it detects something interesting (not every tree branch)
• Stores recordings on a local hard drive
• Beautiful web dashboard to view all cameras
Combined with Tailscale, you get: Tehisintellektiga kaamerad + turvaline kaugjuurdepääs + pilvesõltuvuseta + tellimustasudeta. Ilma Ringi tellimuseta. Ilma Google Nesti tasudeta. Ilma ettevõtte ligipääsuta sinu videole.
Tailscale's client is open source, but their coordination server is proprietary. If you want zero dependency on Tailscale's company, kasuta Headscale — a fully open-source, self-hosted implementation of Tailscale's control server.
Tailscale client + Headscale server = 100% open source mesh VPN. Ükski ettevõte pole kaasatud. Andmeid ei saadeta kellelegi. Täielik sõltumatus.
Use Tailscale's free tier if you just want it to work with zero effort. Use Headscale if you want 100% independence from any company, if you're running this for an organization, or if you're philosophically committed to full open source. Both use the same WireGuard encryption — equally secure.
Ava telefonis Tailscale → ava kaamera IP-aadress → vaata otsepilti. Pilveteenust ei kasutata. Sinu tööandja IT-osakond ei näe kaamera liiklust (see on läbivalt krüptitud).
Oled puhkusel teises riigis? Ava Tailscale → loo ühendus → vaata oma kodukaameraid, nagu istuksid kodus diivanil. Töötab hotelli Wi-Fi, lennujaama Wi-Fi ja mobiilside kaudu — kõikjal.
Frigate detects a person in your driveway at 2 AM → sends notification to your phone → you open the camera feed instantly through Tailscale. Only alerts for people/cars, not every cat or shadow.
Lisa oma abikaasa Tailscale’i võrku (tasuta pakett lubab 3 kasutajat). Nüüd saab ka tema kaameraid oma telefonist vaadata. Jagatud paroole pole. Igal inimesel on oma autenditud juurdepääs.
Frigate records 24/7 to a local hard drive. Through Tailscale, you can browse past recordings from anywhere — scrub through the timeline, download clips, review events.
Tailscale doesn't just work for cameras — access your NAS, Nextcloud, Pi-hole dashboard, Home Assistant, Plex/Jellyfin, SSH — anything on your home network, securely from anywhere.
Factory passwords (admin/admin, admin/12345) are the #1 reason cameras get hacked. Even behind Tailscale, change EVERY camera's default password to something strong (12+ characters). This is defense in depth — multiple layers of security.
Camera manufacturers release firmware updates that fix security vulnerabilities. Check for updates every 3–6 months. Hikvision, Reolink, Dahua, and others have had critical vulnerabilities patched in updates. An unpatched camera is a liability.
For maximum isolation: put cameras on a separate network (VLAN) that has NO internet access. Cameras only need to talk to your NVR (Frigate), not to the internet. This way, even if a camera is compromised, it can't reach the internet or your other devices.
In the Tailscale admin panel, set up ACLs to control which devices can access which services. Example: your phone can access cameras, but your work laptop cannot. Your spouse can view cameras but not SSH into the server.
Paljud kaamerad üritavad „koju helistada”, saates andmeid tootja serveritesse (Hiinas, USA-s või mujal). Kui kasutad NVR-ina Frigate'i, pole kaamera pilvefunktsioone vaja. Blokeeri ruuteris/tulemüüris kaamerate kogu väljuv internetiühendus. Kaamerad peaksid suhtlema ainult sinu Pi-ga.
If recordings are stored on an external drive, encrypt it (LUKS on Linux). If someone steals the Pi or the hard drive, they can't access your recordings without the encryption password.
Security cameras protect YOUR home and family. They must NEVER be used to spy on neighbors, record areas beyond your property, or invade anyone's privacy. In Islam, the privacy of others is sacred — even when technology makes it easy to violate. Secure your cameras ethically: protect your family, respect others.
You've built something powerful: AI-powered cameras accessible from anywhere in the world, through an encrypted tunnel, with zero ports open, zero cloud dependency, and zero subscription fees. No corporation sees your video. No hacker can reach your cameras. Your home security is truly YOURS.
«وَأَلَنَّا لَهُ الْحَدِيدَ • أَنِ اعْمَلْ سَابِغَاتٍ»
„Ja Me tegime raua tema jaoks pehmeks — „Valmista täispikad soomusrüüd.““ Tailscale + Frigate = sinu digitaalne soomus. Kaitse oma kodu täpselt ja eetiliselt. ✨