2 ms·
Nope, you're not. I solved the problem of nosy IoT-things by creating a VLAN specifically for these things where they get to spy on each other without being abl
by the_third_wave 4y ago
Nope, you're not. I solved the problem of nosy IoT-things by creating a VLAN specifically for these things where they get to spy on each other without being able to phone home. The inverter connects to the VLAN through an untagged port on an access point using an Ethernet cable (no WiFi for this type of application, please) which makes it possible to access the web features for those who have access to this VLAN. I proxy the management interface to the outside world through a reverse proxy, this way I can access all features on the device without it being able to phone home or auto-update or do whatever else it could do if it had internet access. I'm using a Fronius inverter which is an Austrian brand, I specifically did not want to have a Chinese device for this application. Updates can be manually uploaded when required, configuration can be done through the wired Ethernet connection, it is not necessary to use any specific "app" (which, of course, is available and pushed but it is not necessary).
I installed everything myself - built the barn on which the panels are mounted as well - so I know what is where. The only net-connected part of the solar installation is the inverter, once I hook up battery that'll probably have a network connection as well so it can join the fray on the IoT-VLAN.
This solution with a separate network - VLAN or physically separated is up to you - which is reverse proxied onto the wide world gives the best of both worlds in that you remain in control while you still can use the networked functions of whatever it is you're dealing with. You won't be surprised by updates, the equipment does not get to phone home, nobody gets to data mine you.