← Back to all sparks
G

go2rtc

MEETINGS
Velocity2.5

Ultra-low-latency camera streaming server

go2rtc keeps adding vendor camera clouds, with Xiaomi the focus of the last three releases.

webrtcrtspcamera-protocolshome-assistantreverse-engineering
◆Current state
go2rtc turns almost any camera into a stream any client can use, and recent releases have worked through vendor protocols: VIGI, DoorBird and UniFi Protect via ONVIF in early 2025, then Tuya and Xiaomi in December 2025, a Xiaomi rework in January and more Xiaomi models in 1.9.15 on October 25. Between those came RTSP UDP transport, preload streams, a security release with path allowlists, and a Wyoming module for voice audio.
◆Where it's heading
Releases come every one to three months, and each widens camera coverage or tightens the server's attack surface rather than changing the architecture. The Wyoming module is the one move beyond cameras.
◆Prediction
The next release will likely add more vendor or firmware support; whether the Wyoming voice work expands is unclear from the feed.

◆Recent moves

  1. 8d ago

    go2rtc 1.9.15 adds more Xiaomi camera support

    go2rtc 1.9.15 adds support for several more Xiaomi cameras, including older firmware, and moves to Go 1.27. It widens camera coverage rather than changing the streaming core.

    View source ↗
  2. 9mo ago

    Xiaomi source reworked with TUTK and cs2 transports

    A large rework of the Xiaomi source added two months after it first appeared — TUTK protocol support, cs2 over TCP, cached cloud logins, captcha-affected account login fixed, and coverage extended to older cateye devices. The pace of follow-up fixes shows how much surface a single vendor cloud carries.

    View source ↗
  3. 10mo ago

    Tuya and Xiaomi camera sources arrive; HomeKit QR code in the web UI

    Two new vendor clouds land in one release, each with its own documentation page, plus backchannel audio fixes for specific Xiaomi models. The HomeKit additions — a pairing QR code in the web UI and a custom category ID — continue the pattern of go2rtc acting as a bridge rather than an endpoint.

    View source ↗
  4. 11mo ago

    Path allowlists and local auth added to api, exec and echo modules

    A release billed as a security update that adds allow_paths to the api, exec and echo modules, local_auth for the API, an explicit list of modules to initialise, and logic flagging insecure sources including ONVIF URIs. Necessary tightening for a component that other projects embed and expose.

    View source ↗
  5. 11mo ago

    RTSP UDP transport, redirects, preload streams and secrets management

    The broadest transport-layer release in the window: RTSP gains UDP transport and redirect following, streams can be preloaded, H265 gets codec priority in the JS client and corrected FFmpeg encoding parameters, and configuration secrets get proper handling. SwitchBot video doorbells are added on the vendor side.

    View source ↗
  6. 1y ago

    Wyoming module extends go2rtc from cameras into voice audio

    ⚡ SPARK

    The one release in this window that changes what go2rtc is for rather than what it connects to. A Wyoming module with speaker and microphone modes, event support and file playback puts go2rtc on the voice-assistant path, adjacent to but distinct from the camera streaming that defines it.

    View source ↗