Home Security System
This is an overview of a Home Security System (Synology NAS + SSS + PoE IPC)
- NAS - IP Camera NVR/DVR - VPN Server
Contents
Costs
| Item | Average cost |
|---|---|
| Synology NAS | € 175 - € 2000 per NAS |
| NAS Camera License | after 2 cameras: € 50 per camera. |
| (PoE) Switch | € 40 - € 250 per switch |
| (PoE) Camera | € 50 - € 5000 per camera |
| HDD/SSD Storage | € 30 - € 350 per TB |
| UTP RJ45 Cables | € 0,25 - € 1,25 per Meter |
NAS
NAS
A NAS is basically a device that enables disks to be accessible via the network.
Synology is a popular NAS manufacturer, and their OS comes with "Surveillance Station", that enables you to also use your NAS as a security camera system.
This is a quite advanced security camera management system that you can use for free for up to 2 camera's. If you want more camera's, there's a one-time fee of about € 50 per 1 camera license.
You can also use this NAS to setup a VPN server, which is needed to be able to securely access this system remotely when we're outside of our home network.
The great advantage of this system is that we can also simultaneously use the NAS for it's original intent; using it as a network-drive, where we can store/share/backup folders and files.
[pic of Surveillance Station-app]
Storage
For the camera footage storage I've gone for 2x 4 TB 3,5" SATA HDD's (for NAS usage). Only 50% (4 TB out of 8 TB) will be usable (for more info - read Backups).
When choosing an HDD or SSD for your NAS, it is recommended to use "NAS" specified versions of those disks. The cheaper versions will also work, but will have a higher failure rate for 24/7 usage.
The amount of storage we need depends on multiple factors (amount of cameras + recorded quality + recordings retention period).
My camera's (1080p, high quality settings) produce about 2 GB per hour, thats 50 GB per day, 350 GB per week, 1.5 TB per month. For 1 camera.
In Surveillance Station, at the IP Camera's Recording settings, we can limit the storage per camera.
Backups
There are a lot of different ways to do backuping, I've gone for a RAID-1 configuration on my NAS.
In a RAID-1 configuration a storage disk is mirrored to another one, so that in the event of a disk failure you can continue operation, plus everything that was saved is still there.
The downside to this configuration is that you will need to buy twice the amount of disks you want, and use more bays in your NAS.
In the event of a fire or sabotage for example, I have no backup. But you can keep your NAS synchronized to another NAS in another location if you want to buy and setup this level of backup.
You can also use cloud backup services that are being offered, or you can manually plug in an external disk and backup the NAS yourself every once in a while.
If you're willing to risk sudden capture stop and total data loss (which doesn't happen often, but can still happen), then you can skip this part.
Network
Router
Your NAS its IP always needs to stay the same.
Go to your modem/router/firewall/server "DHCP" settings, and reserve the IP of the NAS.
You also need to configure your router to enable your VPN server to be accessed from outside your network.
Go to your routers "Port Forwarding" settings, and open port UDP 1194 (OpenVPN) to the IP of your NAS.
VPN
A VPN connection to the Home Security System's network is needed when you want to securely access the system from outside the home network.
Within DSM you can also setup a VPN server on your NAS. For this download the "VPN Server" package in Package Center.
Official documentation: https://kb.synology.com/en-af/DSM/help/VPNCenter/vpn_setup
The VPN protocols PPTP, OpenVPN, and L2IP/IPSec are supported. Here I will be using OpenVPN.
From the VPN Server app on the NAS, I can get an overview and log of all VPN connections, from which IP and Username was logged at what time and date.
I can also select which DSM users I want to give VPN access, and some more advanced OpenVPN server settings.
When a device needs to connect remotely, it needs to connect via the OpenVPN-app first. Links to software can be found below.
Camera's
I will be using IP Camera's (IPC) with Power over Ethernet (POE). This way I will be using only one cable per camera for both power and data.
There are wireless IPC's that connect via Wi-Fi but need a power cable. In my experience the distortion/digital snow is too annoying on the budget wireless cameras.
IPC's can be connected with a normal network cable (RJ45 connector) to a switch. Make sure these switch(es) have PoE support or else the IPC won't power on.
Take note that the maximum distance between a POE IPC and a switch is 100 meters. But chain linking with multiple switches is possible.
PTZ
PTZ stands for Pan Tilt Zoom, meaning that the camera can be remotely moved in direction.
Cheaper cameras often don't have PTZ, which means that you need to physically calibrate the view of the camera when mounting it.
SSS has options to automatically change the PTZ values based on a timetable or events. PTZ can also be remotely controlled live.
Doorbell
A PoE Doorbell is essentially just an IPC with PoE and some extra doorbell hardware+software, so we can also use it as a regular camera.
I have the "Reolink Wired Video Doorbell PoE" for € 100, and it is compatible for SSS.
I then added the doorbell as I would add a camera within SSS.
After configuring it, I can now choose to record the doorbell footage 24/7 if I wanted to, or record based on events such as person detection or doorbell button pressed.
This means I don't have to pay for a subscription to look at recorded footage, like most doorbell makers offer.
Using
Software
Phone/Tablet
Install OpenVPN-app iOS / Android.
Install DS Cam-app iOS / Android.
Computer
Install OpenVPN Windows / Linux / MacOS
Software: Surveillance Station Client Windows / MacOS
Web Interface DSM: http://yournasip:yournasport (replace yournasip and yournasport).
Web Interface SSS: http://yournasip:yournasport/webman/3rdparty/SurveillanceStation (replace yournasip and yournasport).
