Support for using Local Lan protocol about lennoxs30api

[PeteRager]

As far as I can tell all the commands work - and HA is happy. I'm going to let it run over-night to see if it survives. Hoping for a Beta on the API and HA component soon after.

[PeteRager]

Initial pull request for the API, doing the same for the HA component in a bit

[dresslerc]

How do you know the iOS app supports this local communication? The Lennox S30 app has been horrible. The HomeKit implementation works local but doesn’t support zones

[PeteRager]

How do you know the iOS app supports this local communication? The Lennox S30 app has been horrible. The HomeKit implementation works local but doesn’t support zones

I observed the RTSP/OpenDDS traffic between the IOS device and thermostat in wireshark. To do this I setup an old WiFi router I has laying around as separate WiFi network (not as a router), plugged it into this device (Dualcomm DCSW-1005PT 10/100 Ethernet Network TAP w/PoE Pass-Through) and then into my main WiFi router that the thermostat uses. Output of that network TAP went into a PC running wireshark. This way I could see all the WAN and LAN traffic from the IOS device. I can upload those logs somewhere if that helps.

I discovered this because I was trying to monitor the API traffic to the cloud through BURP - which is how I created the cloud API - and nothing was being captured. Eventually I reached the conclusion that the updated version of the app was able to go local and then setup that TAP to verify. I was expecting it to be using the same REST API except locally - it is not - a completely different protocol. Google Lenox and OpenDDS you’ll find some hits.

[HyperActiveJ]

I was able to read my s30 over https on LAN. Perhaps there's more that can be done over it?
I put a proof of concept here:
https://github.com/HyperActiveJ/home-assistant-lennox-local-https

[PeteRager]

This is awesome. The structure looks very similar to the JSON we get back from the cloud.

We should be able to redirect this API to go locally.

Does it require authentication?

[HyperActiveJ]

I have not seen any authentication yet, though right now I have not tested sending any setting commands, only enabling diagnostics and reading data. It includes a bunch of other settings I haven't used yet, such as schedules, version numbers, serials, etc. It exposes a bunch of dangerous things, including wifi password in clear text. If it allows control it probably also allows you to configure settings that could damage the hardware or worse present a safety issue. It's potentially a bit of a security nightmare....

…

On Sat, Oct 23, 2021, 11:15 PeteRager ***@***.***> wrote: This is awesome. The structure looks very similar to the JSON we get back from the cloud. We should be able to redirect this API to go locally. Does it require authentication? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#11 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABQBVPPYZEW55AK6ANJ5UYTUIL3V3ANCNFSM5DXGBOZQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[PeteRager]

Looking at the code more, the command structure is identical to the cloud commands. As do the JSON responses. So it looks like most of it should work by redirecting to the local endpoint. I’ll try your code out this week. If you want a sample command to set zone temperature - let me know - I can post the JSON.

The lack of security is highly concerning, let’s take this offline / private and figure out how to get this reported responsibly.

[HyperActiveJ]

Right, seems very close if not identical. Code is very alpha, might not work first try. There is a test_lcc.py that you can try without home assistant by just setting an address and client id. Credit goes to the original creator I linked at the top of the readme. I think I found the command to set temp by looking at your code. Im afraid I didn't look at your work when I started, I assumed it would be diffent locally, would have saved me a couple hours if I had known! I supose in hind sight it's not surprising they would use similar interfaces! I'm not an HVAC expert, hopefully I'm wrong about my concerns or the dangerous settings are read only. See what you think when you see the full dumps. Get in contact with me any time.

…

On Sat, Oct 23, 2021, 14:08 PeteRager ***@***.***> wrote: Looking at the code more, the command structure is identical to the cloud commands. As do the JSON endpoints. So it looks like most of it should work by redirecting to the local endpoint. I’ll try your code out this week. If you want a sample command to set zone temperature - let me know - I can post the JSON. The lack of security is highly concerning, let’s take this offline / private and figure out how to get this reported responsibly. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#11 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABQBVPN3SXRVRRM5PUW46YLUIMP4LANCNFSM5DXGBOZQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[PeteRager]

I got the basics for read working, connects finds the zones, report the setpoints, outdoor tempearture. A few anomalies. Next step commands!

[dresslerc]

Very exciting

[HyperActiveJ]

Yay!

[dresslerc]

Awesome! If you need testers I am here.

I assume since its all local now, when you change the target temp the thermostat should react instantly too it?

[PeteRager]

I will need tester - thank you!

Yes, it is much faster. With the cloud API it can take a while (~15 seconds), with Local API I see about 2 second response.

[AlexSzlavik]

Been lurking, super excited about this! Will likewise test it out for a couple days and come back with any issues.

[PeteRager]

This is ready to go.

There is an update HA component here:

https://github.com/PeteRager/lennoxs30/releases/tag/v0.1.1

It should automatically pull the updated API which is version 0.1.0

Config should be like this - ip_address is the S30 ip (indentation is wrong here...)

lennoxs30:
email: myemail
password: mypass
scan_interval: 1
fast_scan_interval: 0.5
ip_address: 10.0.0.2

Will be useful to have debug on

logger:
default: info
logs:
custom_components.lennoxs30.s30api_async: debug
custom_components.lennoxs30: debug
custom_components.lennoxs30.climate: debug
lennoxs30api: debug

Open issues on the HA component or here.

[HyperActiveJ]

Suggestion: Time to update the name and README to include local!

[AirborneEagle]

This is probably the wrong place to ask this question, and I am happy to move to a forum you recommend . @PeteRager
Forgive my lack of basic system knowledge.
My goal here is to actually eliminate the lennox on-wall thermostats (s40) entirely. I am happy to implement any control protocol needed to do so. Dry contacts, analog signals, Modbus, Network calls, etc. Anything. Any Idea if this is possible?

If not, the next acceptable option would be to use your amazing integration, but it would be with a different software (Loxone Config).
Would you be willing to offer any assistance in applying the API to a different use case?
Or perhaps we could work to extract the API structure, parameters, documentation etc. into a template so that it can be more easily used by things other than HA?

[PeteRager]

Probably a good set of questions for a discussion here https://github.com/PeteRager/lennoxs30api/discussions