Kuyang'anira mavidiyo akunyumba. Dongosolo losunga zosungidwa zakale zamakanema popanda olembetsa kunyumba

Ndakhala ndikufuna kulemba nkhani yokhudza script yogwira ntchito ndi kamera kudzera pa protocol ya DVRIP kwa nthawi yayitali, koma zokambirana zokhudzana ndi nkhani zaposachedwa za Xiaomi zidandipangitsa kuti ndiyambe kuyankhula za momwe ndimakhazikitsira kanema wowonera kunyumba, kenako ndikupita ku zolemba ndi zinthu zina.

Tinali ndi phukusi la 2 ... Kotero, dikirani, iyi si nkhani yofanana.
Tinali ndi ma routers a 2 kuchokera ku TP-LINK, intaneti kuseri kwa wothandizira NAT, kamera yowunikira ya Partizan sindikukumbukira chitsanzo (kamera iliyonse ya IP yomwe imathandizira RSTP pa TCP kapena DVRIP idzachita) ndi VPS yotsika mtengo ya 4 euro ndi mawonekedwe: 2 core CPU 2.4GHz, 4GB RAM, 300 GB HDD, 100 Mbit / s doko. Komanso kusafuna kugula chilichonse kuwonjezera pa ichi chomwe chingawononge ndalama zambiri kuposa chingwe chachigamba.

Maulosi

Pazifukwa zodziwikiratu, sitingangotumiza madoko a kamera pa rauta ndikusangalala ndi moyo, kuphatikiza, ngakhale titakwanitsa, sitiyenera kutero.

Ndinamva kuchokera ku buluu kuti pali zosankha zina ndi IPv6 tunneling, kumene zikuwoneka kuti chirichonse chingathe kuchitidwa kuti zipangizo zonse pa intaneti zilandire adilesi yakunja ya IPv6, ndipo izi zingapangitse zinthu kukhala zosavuta, ngakhale zimasiya chitetezo. za chochitika ichi mu funso , ndi kuthandizira chozizwitsa ichi mu standard TP-LINK firmware ndi yachilendo mwanjira ina. Ngakhale pali kuthekera kuti m'chiganizo cham'mbuyomo ndikulankhula zopanda pake, choncho musamvere konse.

Koma, mwamwayi kwa ife, pafupifupi fimuweya iliyonse ya rauta iliyonse (mawu opanda pake kwenikweni) imakhala ndi kasitomala wa PPTP/L2TP kapena kuthekera koyika nawo fimuweya. Ndipo kuchokera pa izi tikhoza kupanga kale njira ya khalidwe.

Topology

Ndili ndi malungo, ubongo wanga unabala chinachake chonga ichi:

ndipo pakuwukira kwina ndidajambula kuti ndilembe pa Habr

Adilesi 169.178.59.82 idapangidwa mwachisawawa ndipo imakhala ngati chitsanzo chokha.

Chabwino, kapena ngati m'mawu, ndiye:

• Router TP-LINK 1 (192.168.1.1), momwe amalowetsa chingwe chomwe chimatuluka kunja kwa khoma. Wowerenga mwachidwi angaganize kuti iyi ndi chingwe chothandizira chomwe ndimagwiritsa ntchito intaneti. Zida zosiyanasiyana zakunyumba zimalumikizidwa ndi rauta iyi kudzera pa chigamba kapena Wi-Fi. Iyi ndiye network 192.168.1.0
• Router TP-LINK 2 (192.168.0.1, 192.168.1.200), momwe amalowetsa chingwe chomwe chimatuluka mu router TP-LINK 1. Chifukwa cha chingwechi, TP-LINK 2 router, komanso zipangizo zomwe zimagwirizanitsidwa nayo, zimakhalanso ndi intaneti. Router iyi imapangidwa ndi PPTP kugwirizana (10.0.5.100) ku seva 169.178.59.82. IP Camera 192.168.0.200 imalumikizidwanso ndi rauta iyi ndipo madoko otsatirawa amatumizidwa
  • 192.168.0.200:80 -> 49151 (webmord)
  • 192.168.0.200:34567 -> 49152 (DVRIP)
  • 192.168.0.200:554 -> 49153 (RTSP)
• Seva (169.178.59.82, 10.0.5.1), komwe router ya TP-LINK 2 imalumikizidwa. Seva imayendetsa pptpd, shadowsocks ndi 3proxy, momwe mungapezere zipangizo pa netiweki ya 10.0.5.0 ndipo motero mutha kupeza TP-LINK 2 router.

Choncho, zipangizo zonse zapakhomo pa intaneti ya 192.168.1.0 zimakhala ndi kamera kudzera pa TP-LINK 2 pa 192.168.1.200, ndipo ena onse akhoza kugwirizanitsa kudzera pptp, shadowsocks kapena socks5 ndi kupeza 10.0.5.100.

kusintha

Gawo loyamba ndikulumikiza zida zonse molingana ndi chithunzi chomwe chili pamwambapa.

• Kukhazikitsa rauta ya TP-LINK 1 kumatsikira ndikusunga adilesi 192.168.1.200 ya TP-LINK 2. Mwachidziwitso ngati mukufuna adilesi yokhazikika kuti mupeze kuchokera pa netiweki ya 192.168.1.0. Ndipo, ngati mungafune, mutha kusungitsa 10-20 Mbit (10 ndiyokwanira pavidiyo imodzi ya 1080).
• Muyenera kukhazikitsa ndi kukonza pptpd pa seva. Ndili ndi Ubuntu 18.04 ndipo masitepe anali pafupifupi awa (woperekayo anali chitsanzo blog.xenot.ru/bystraya-nastrojka-vpn-servera-pptp-na-ubuntu-server-18-04-lts.fuck):
  • Ikani phukusi lofunikira:

    sudo apt install pptpd iptables-persistent

  • Timabweretsa ku mawonekedwe otsatirawa

    /etc/pptpd.conf

    option /etc/ppp/pptpd-options
    bcrelay eth0 # Интерфейс, через который ваш сервер ходит в интернеты
    logwtmp
    localip 10.0.5.1
    remoteip 10.0.5.100-200

  • Timakonza

    /etc/ppp/pptpd-options

    novj
    novjccomp
    nologfd
    
    name pptpd
    refuse-pap
    refuse-chap
    refuse-mschap
    require-mschap-v2
    #require-mppe-128 # Можно раскомментировать, но мой TP-LINK c ним не дружит
    
    ms-dns 8.8.8.8
    ms-dns 1.1.1.1
    ms-dns  77.88.8.8
    ms-dns 8.8.4.4
    ms-dns 1.0.0.1
    ms-dns  77.88.8.1
    
    proxyarp
    nodefaultroute
    lock
    nobsdcomp
    

  • Kuwonjezera zizindikiro ku

    /etc/ppp/chap-secrets

    # Secrets for authentication using CHAP
    # client	server	secret			IP addresses
    username pptpd password *

  • onjezani ku

    /etc/sysctl.conf

    net.ipv4.ip_forward=1

    ndikutsegulanso sysctl

    sudo sysctl -p

  • Yambitsaninso pptpd ndikuwonjezera poyambira

    sudo service pptpd restart
    sudo systemctl enable pptpd

  • Timakonza

    iptables

    sudo iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
    sudo iptables -A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
    sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    sudo iptables --table nat --append POSTROUTING --out-interface ppp+ -j MASQUERADE
    sudo iptables -I INPUT -s 10.0.5.0/24 -i ppp+ -j ACCEPT
    sudo iptables --append FORWARD --in-interface eth0 -j ACCEPT

    Ndipo sungani

    sudo netfilter-persistent save
    sudo netfilter-persistent reload
    

• Kukhazikitsa TP-LINK 2
  • Timasungira adilesi 192.168.0.200 ya kamera yathu:

    DHCP -> Kusungitsa Maadiresi — Adilesi ya MAC — kamera ya MAC, imatha kuwonedwa mu DHCP -> Mndandanda wamakasitomala a DHCP
    - Adilesi ya IP yosungidwa - 192.168.0.200

  • Madoko otumizira:
    Kuwongoleranso -> Ma seva Owona - Doko lautumiki: 49151, Doko lamkati: 80, IP adilesi: 192.168.0.200, Protocol: TCP
    - Doko lautumiki: 49152, Doko lamkati: 34567, IP adilesi: 192.168.0.200, Protocol: TCP
    - Doko lautumiki: 49153, Doko lamkati: 554, IP adilesi: 192.168.0.200, Protocol: TCP
  • Kupanga kulumikizana kwa VPN:

    Network -> WAN - Mtundu wolumikizira WAN: PPTP
    - Dzina lolowera: lolowera (onani /etc/ppp/chap-secrets)
    - Achinsinsi: mawu achinsinsi (onani /etc/ppp/chap-secrets)
    - Tsimikizirani mawu achinsinsi: mawu achinsinsi (onani /etc/ppp/chap-secrets)
    - Dynamic IP
    - IP adilesi/Dzina la seva: 169.178.59.82 (mwachiwonekere, IP yakunja ya seva yanu)
    - Njira yolumikizira: Lumikizani zokha

  • Mwachidziwitso, timalola mwayi wofikira kutali ndi nkhope ya intaneti ya rauta
    Chitetezo -> Kuwongolera Kwakutali - Dongosolo loyang'anira intaneti: 80
    - Kasamalidwe kakutali IP adilesi: 255.255.255.255
  • Yambitsaninso rauta ya TP-LINK 2

M'malo mwa PPTP, mungagwiritse ntchito L2TP kapena, ngati muli ndi firmware yachizolowezi, ndiye chirichonse chomwe mtima wanu ukukhumba. Ndinasankha PPTP, popeza dongosololi silinamangidwe chifukwa cha chitetezo, ndipo pptpd, muzochitika zanga, ndi seva ya VPN yachangu kwambiri. Komanso, sindinkafuna kukhazikitsa firmware yokhazikika, zomwe zikutanthauza kuti ndiyenera kusankha pakati pa PPTP ndi L2TP.

Ngati sindinalakwitse kulikonse mu bukhuli, ndipo munachita zonse molondola ndipo munali ndi mwayi, ndiye pambuyo pa zonse izi.

• poyamba

  ifconfig

  idzawonetsa mawonekedwe ppp0 inet 10.0.5.1 netmask 255.255.255.255 destination 10.0.5.100,

• chachiwiri, 10.0.5.100 ayenera ping,
• ndi chachitatu

  ffprobe -rtsp_transport tcp "rtsp://10.0.5.100:49153/user=admin&password=password&channel=1&stream=0.sdp"

  Iyenera kuzindikira mtsinje.
  Mutha kupeza doko la rtsp, lolowera ndi mawu achinsinsi pazolembedwa za kamera yanu

Pomaliza

M'malo mwake, izi sizoyipa, pali mwayi wopita ku RTSP, ngati pulogalamu yaumwini imagwira ntchito kudzera pa DVRIP, mutha kuyigwiritsa ntchito. Mutha kupulumutsa mtsinjewo pogwiritsa ntchito ffmpeg, kufulumizitsa kanemayo nthawi 2-3-5, kuiphwanya kukhala zidutswa za ola limodzi, kuyika zonse ku Google Drive kapena malo ochezera a pa Intaneti ndi zina zambiri.

Sindinakonde RTSP pa TCP, chifukwa sichinagwire ntchito mokhazikika, koma pa UDP, pazifukwa zomwe sitingathe (kapena tingathe, koma sindikufuna kutero) kupititsa patsogolo madoko osiyanasiyana. kudzera momwe RTSP idzakankhira mtsinje wa kanema , sichidzagwira ntchito, ndinalemba script yomwe imakoka mtsinje pa TCP kudzera pa DVRIP. Zinakhala zokhazikika.

Chimodzi mwazabwino za njirayi ndikuti titha kutenga china chake chomwe chimathandizira mluzu wa 2G m'malo mwa rauta ya TP-LINK 4, yambitsani zonse pamodzi ndi kamera yochokera ku UPS (yomwe mosakayikira idzafunika yocheperako kuposa momwe ingakhalire. pogwiritsa ntchito chojambulira), kuphatikizanso, kujambulako kumatumizidwa nthawi yomweyo ku seva, kotero ngakhale olowa alowa patsamba lanu, sangathe kulanda kanemayo. Nthawi zambiri, pali malo owongolera ndipo chilichonse chimadalira malingaliro anu.

PS: Ndikudziwa kuti opanga ambiri amapereka mayankho okonzeka opangidwa ndi mtambo, koma pamtengo amakhala okwera mtengo pafupifupi kawiri kuposa VPS yanga (yomwe ndili nayo kale 3, kotero ndiyenera kugawa zinthu kwinakwake), ndikuwongolera pang'ono, komanso osakhutiritsa kwambiri.

Source: www.habr.com