Video Surveillance: Multi-Location Live View (iOS/Android): How to Bypass the WireGuard Bottleneck Without Switching Profiles?

cam-da

Young grasshopper
Nov 3, 2023
39
2
Germany
Hello community,

I'm planning mobile video surveillance for three geographically separate locations and am looking for a practical solution for the end user.

The setup per location:

Main router (192.168.10.x) --> UniFi Cloud Gateway (172.25.x.x) --> NVRs + IP cameras

WAN gateway: Traditional main router (192.168.10.x).

Camera router: UniFi Cloud Gateway for a separate video network, which I can then secure with granular firewall rules within the UniFi Cloud Gateway. This wouldn't be possible with the main router. I also want to isolate the main router network from the camera network.

UniFi IP Networks (anonymized): No routing conflicts thanks to clean separation:

Location 1: 172.25.41.x

Location 2: 172.25.42.x

Location 3: 172.25.43.x

Goal: Central access to the three local NVR video streams via a smartphone app.

The Problem:

Requirement:
The end user wants to view live images from all locations simultaneously in a multi-view while on the go (iOS/Android).

VPN Limitation: The protocol used is WireGuard to the UniFi Cloud Gateway. Mobile operating systems are known to block the simultaneous activation of multiple tunnel profiles.

Usability: Manually switching between profiles in the WireGuard app is impractical for everyday use. A single-profile solution on the smartphone would be ideal.

How do you handle such multi-location scenarios in practice to enable simultaneous live viewing without manual tunnel juggling?

I look forward to your input and creative approaches.
 
What about hub-and-spoke topology from each of the UCGs to a central location, and then the users device establishes a tunnel to that one central location and can therefore route to all of your sites to via the one tunnel?
 
Consider using Tailscale or something like that. It might not be free depending on your operating scale but it will be a lot easier to configure!
thanks for the option but I don't want to rely on 3. party cloud services where possible. I tend towards wireguard
 
+1 for Wireguard