Эта страница является
переводом страницы
IRidium studio 2019 Local Inet Cloud. Перевод выполнен на 100%.
Local and remote control, Cloud Gate
Variants of connecting drivers to equipment: in the local net, via an address in the internet, via Cloud Gate for remote connection of the i3 pro and iRidium server
Equipment, service, iRidium server, any resouce the i3 pro must interact with can be located in the same segment of IP-net (locally) with the app, or in different ones, when connection via internet (remote connection) is required.
For example, a smartphone with i3 pro can be connected locally to home Wi-Fi network and remotely when mobile internet is used.
Local connection is simpler and safer, but if it is required to control automation system remotely, it's not enough. Let'a have a look at different variants of connection to equipment via IP-network, its advantages and disadvantages:
Connection to local IP-address
It's a way to connection to equipment "by default". When you are located in the same local network with an automation object, it's enough to enter local IP-address and port (for example, address 192.168.0.100, port 80) of a device to connect to it.
Advantages:
- it works at once, it's not required to set IP-network
- it excludes (not totally) access of third-persons to an automation object via the internet
Disadvantages:
- a project can't be controlled remotely
How to set:
- learn the IP-address of controlled equipment to which i3 pro or iRidium server will connect, enter it in the Host field of the driver settings. It's highly recommended to use static IP-addresses
- learn a port via which equipment must be connected to in the documentation to the equipment or the driver and enter it in the Port field of the driver settings
- enter other connection parameters according to driver documentation
Example 1: i3 pro connects to iRidium server, that is launched on PC with IP-address 192.168.0.100. Используется режим "Direct connection" mode is used, an alternative to it is Cloud Gate, described further
Example 2: iRidium server connects to KNX IP interface with a static IP-address 192.168.0.220
Connection to external IP-address or domain
Devices, that can be accessed via the internet, have IP-addresses in the internet - external addresses. These addresses can be static - constant and dynamic - that changes with time.
Static IP-address in the internet is a service that can or can't be provided by your internet provider. If it can't be provided, connection via IP-address does not suit you. But you can use DNS technology to assign a constant domain name to a device with a dynamic IP-address. Thus, i3 pro or iRidium server addressing a domain name, will get the IP-address of the device and connect to it. The service of renting subdomains to realize the DDNS technology is provided by numerous free and commercial services.
Advantages:
- it gives access to automation system via the internet
- it suits perfectly if you dо not connect to a phisical device, but to web-site connection to which is protected with the help of SSL or another way of user identification and traffic protection (in this case disadvantaged listed below are not relevant)
Disadvantages:
- it's not safe if equipment is not protected from unauthorized access (e.g.: KNX, HDL, Modbus and many other systems). You can't avoid a possibility of unauthorized access to your equipment. If equipment supports protection, remember that security is provided only by the mechanisms of equipment itself, that may have been updated last a long time ago.
- you must set a router on an automation object;
- open access to the automation evice for external connections (forward a port or ports of a device on the router to create a possibility to access the device from external networks)
- set a router static (constant) IP-address in the internet, if an internet provider provides this service (yes, you have to get in touch with the internet provider)
- set DDNS, if a provider does not provide static IP-addresses and you want to use a domain
- set VPN but not DDNS, if you want to provide internet connection the security of which is provided not only by the mechanisms of equipement itself, but also by VPN mechanisms
Warning: We do not recommend to leave equipment available from the internet. If you can't use iRidium server with safe Gloud Gate, use VPN technology.
How to set:
- learn the static IP-address or the domain name in the interner of the controlled equipment, enter it in the Host field of the driver settings. If a device/service has a domain name, enter it in the Host field (without http://)
- learn the port via whoch your router accepts external connections to this equipment (it may be different from the local control port), enter it in the Port field of the driver settings. If it's a web-site address, enter 80 in the Port field
- enter the other connection parameters according to driver documentation
Example: i3 pro connects to a subdomain of thingspeak.com web-site to send GET-requests
Remote connection via Cloud Gate
If you use iRidium server, protected connection of i3 pro to an automation system can be realized with the help of Cloud Gate service that requires minimal settings.
Cloud Gate provides connection of i3 pro to iRidium server via the internet and data protection
Advantages:
- it provides access to an automation object via the internet
- a user is identified and traffic is encrypted
- it can automatically switch between locanl and internet connection
- it's free in the current iRidium license
- it's easy to set, no knowledge of net administating is required
Disadvantages:
- it does not work without iRidium server on an automation object. Server functions as a gateway between i3 pro and automation devices that are required to control via the internet
How to set:
IP-cameras via the internet
Проблема просмотра видео с IP-камер стоит довольно остро, т.к. каждая IP-камера – это, по сути, устройство автоматизации, к которому применимы все минусы, описанные для оборудования, "выставленного" в интернет, и в то же время, для них неприменим Cloud Gate, т.к. i3 pro получает видео с IP-камер напрямую, минуя iRidium server.
Варианты:
- использовать сервис, который обеспечит онлайн-доступ к видео в реальном времени. Для сервиса Ivideon существует одноименный lite-модуль, который позволит встроить видео-поток, транслируемый сервисом, в интерфейс i3 pro. В случае с другими сервисами, видео не удастся встроить в интерфейс, но можно будет открыть в браузере
- надеяться, что защита доступа, которую обеспечивает ваша IP-камера (по логину и паролю) – достаточно надежна, и злоумышленник ее не обойдет. Выставить камеры в интернет с помощью DDNS или статического адреса
- использовать VPN как единственный способ удаленного подключения ко всему объекту автоматизации
- отказаться от просмотра видео с IP-камер через интернет :)
