Re: Placing our Squeezeboxes in a separate IoT network?

rajdude wrote: 
> OH ok. thanks for the info
> 
> In my setup right now, for the 3 network segments (VLANs), DHCP and DNS
> services are provided by the Firewalla device. So I do not have to open
> the ports for those services
> 
Ehhh... yes you do. The point here is that for IoT (and squeezebox) you
want to treat the network segment as hostile, i.e. deny everything but
the essential. This means that unless the devices have a fixed IP you
need to explicitly allow it access to the DHCP server and the same
obviously applies for DNS

> 
> As for internet access for IoT devices, the research I have been doing
> is saying that it is acceptable for devices to have access to
> internet...........hence the name - IoT (internet of things).
> 

Not really. There is in fact no reason whatsoever for such devices to be
readable and/or writeable to the whole of the internet and thus there is
also no reason why it could not be confined to what is known as intranet
(aka LAN). The main reason why in practice you need to is because
manufacturers choose to make you depend on their servers, optionally
allowing to change it into a paid service in future.

> 
> However, I am also concerned by the need of these devices to go out to
> the internet so that I can control them from an app. I do understand
> that by doing it that way, I can control them from anywhere in the
> world. So I guess you lose some, but you gain some.
> 
> I also have Tuya devices here. When I setup my network segments I
> thought they would NOT need internet access, only access to my phone
> app. but no :-(

As said (or at least hinted) I *am* able to control my Tuya devices even
if internet is down and i am also able to access my local concentrator
from anywhere on the internet using either VPN or an x509 certificate to
its web based interface. I have this method shared on my GitHub.


------------------------------------------------------------------------
gordonb3's Profile: http://forums.slimdevices.com/member.php?userid=71050
View this thread: http://forums.slimdevices.com/showthread.php?t=116703