Martin's corner on the web

X post

Separate network for your IoT devices at home

I am curious if you folks have a separate network for your IoT devices at home? Bonus read on the subject: https://robpickering.com/ubiquiti-configure-micro-segmentation-for-iot-devices/ The poll results are interesting. Looks like 80% of my tech-savvy followers do not have a separate network for their IoT devices, which means either they DIY all of their IoT hardware and…

Arduino code in production

I am frequently contacted by folks who were advised to use Arduino to build commercial product and are now running into the full spectrum of issues related to using a rapid prototyping platform in production. Someone's giving them the wrong advice and that costs a lot. Also using Arduino code means all of your object…

ESP32 OTA rollbacks

Implemented ESP32 OTA rollbacks if the new firmware crashes within 45 seconds of first boot, doesnt manage to connect to MQTT or the device enters degraded operating mode due to failed hardware initialization. This gives me a peace of mind when pushing mass OTA updates. #IoT

AWS IoT pricing calculator

AWS IoT pricing calculator

Checking an AWS IoT pricing calculator, running a 10K IoT fleet costs $1.8K per year. This is not insignificant. Link to the calculator: https://d1.awsstatic.com/IoT/assets/AWS_IoT_Core_Pricing_Calculator.fcc37410fa03431c28b59d8509f1b4e370c88402.xlsx

Basic PKI PoC

I need a node.js guru volunteer to work with me on creating basic PKI PoC that provisions #ESP32 devices with client certificates; node-forge looks right for the purpose. I have the complete solution architecture figured, just need a node.js guru that can code it for free πŸ™‚ Couple volunteers already, thanks @eliofilipe and @MrQinEL ;…

MQTT certificate based mutual authentication

MQTT certificate based mutual authentication

Implemented #MQTT certificate based mutual authentication for my home automation with access policies for publish/subscribe, much like Amazon AWS #IoT, only #DIY . It is now much more secure #esp32 #mosca Added certificate revocation list functionality. Took extra effort to make it work without MQTT broker restart. Next is profivioning API for the nodes