I was looking at a raspberry pi3 that was sitting on my desk and started thinking about the fact that it has both a wifi and an ethernet port - so I decided to see if I could use it as a secure interface to the camera.
Pi3 is on my home wifi.
Pi3 ethernet is directly connected to the ethernet port on a camera.
On the ethernet interface run the following services:
- ftp server
- ntp server
- dhcp server
- The ethernet network is set up to not forward packets - This lets us take complete control of what the camera can access and what can access the camera.
On the wifi port turn on ssh with key only authentication and an https proxy to the http port on the camera.
Notes on some of the cameras there is a streaming port that is separate from the http port so those will need to be enabled to passthrough as well - perhaps a proxy could be enabled after authentication with a specific ip...