New write-up: LEGO RFID Scanner, using ESP8266 and Node-RED

[Cory Guynn]

Hey Guys,

I just did a cool write-up on using an RFID scanner with Node-RED. It demonstrates good use of MQTT and the UI.

Blog post: http://www.internetoflego.com/rfid-scanner-wemos-rc522-mqtt/

Flow: http://flows.nodered.org/flow/92b43bcf393589364f85fa3033d78e4e

[Zenofmud]

Cory,

Do you realize that with this flow, it looks like I can receive and send to your MQTT and potentially mess your internetoflego? It’s great to see what you have done, but you may want to change your subdomain for the mqtt so others can’t mess with it.

Where do you have your MQTT setup? Is it on a Pi?

--
http://nodered.org
 
Join us on Slack to continue the conversation: http://nodered.org/slack
---
You received this message because you are subscribed to the Google Groups "Node-RED" group.
To unsubscribe from this group and stop receiving emails from it, send an email to node-red+u...@googlegroups.com.
To post to this group, send email to node...@googlegroups.com.
Visit this group at https://groups.google.com/group/node-red.
For more options, visit https://groups.google.com/d/optout.

[Cory Guynn]

Good catch. Didn't realize the export included my server configurations (ugh). Fixed the flow info. Now's a good time to put some additional security systems in place ;)

I use a free EC2 instance on Amazon AWS to run a master Moqsuitto broker. I also have a local broker installed on a Raspberry Pi.

This allows me to tie into all kinds of distributed MQTT aware devices without having to create firewalls for local network.

This flow just used a quick lab, so nothing I'm worried about. But now's a good time to explore authentication, encryption and other IoT security methods.

Cheers!

You received this message because you are subscribed to a topic in the Google Groups "Node-RED" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/node-red/clT-jtKeb5s/unsubscribe.
To unsubscribe from this group and all its topics, send an email to node-red+u...@googlegroups.com.

To post to this group, send email to node...@googlegroups.com.
Visit this group at https://groups.google.com/group/node-red.

To view this discussion on the web, visit https://groups.google.com/d/msgid/node-red/7EA030D0-E1A7-4749-B3EF-D9DA2A2A93B8%40zenofmud.org.

[Julian Knight]

Yes, we could do with a good write-up on how to do a secure distributed MQTT setup.

I'd be happy to collaborate with that though I don't think I've time to do the whole thing myself right now.

It would need, I think, at least:

• Public facing MQTT broker with:
• TLS
• secure users
• secure restrictions on certain topics
• at least one topic that is publicly available
  
• A private MQTT broker, also with TLS & secure users with:
• at least one topic (or better, a topic hierarchy) pushing to the public broker over TLS that can only come from the private broker - e.g. will not be accepted except from a known user from the private broker over TLS
• As above but receiving from the public broker
• at least one topic (hierarchy) that cannot be sync'd, that only works on the private broker

What have I missed?

[Jörg Wende]

There are a number of existing documents available:

• HiveMQ - MQTT Essentials
  
• Owntracks - MQTT Broker Setup

Either use them as a reference or as guidance ... 

Cheers

Joerg

[Cory Guynn]

Awesome. Thanks guys for the input. I'll start putting together a guide for best practices, using Node-RED as a tool for demonstration.

Cheers,

Cory

--

http://nodered.org
 
Join us on Slack to continue the conversation: http://nodered.org/slack
---
You received this message because you are subscribed to a topic in the Google Groups "Node-RED" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/node-red/clT-jtKeb5s/unsubscribe.
To unsubscribe from this group and all its topics, send an email to node-red+u...@googlegroups.com.
To post to this group, send email to node...@googlegroups.com.
Visit this group at https://groups.google.com/group/node-red.

To view this discussion on the web, visit https://groups.google.com/d/msgid/node-red/e30eb30d-7836-467f-85ac-fd596b78645a%40googlegroups.com.

[Julian Knight]

Thanks for that. I'd forgotten the Owntracks one. Be nice to have one that ends with a test system with security in mind throughout. Started something but I've no idea when I'll get time to do it justice. Hopefully Cory will beat me to it ;)