Valid Generic HTML
SPDX-License-Identifier
CC-BY-SA-4.0

Home Automation in Redmond

James F. Carter <jimc@jfcarter.net>, 2026-01-20

Throughout this document, H.A. is used to abbreviate Home Assistant (web site here).

Our new home in Redmond, Washington, USA comes with, among other I.T. features, a Samsung SmartThings hub with a Z-Wave radio (and probably IEEE 802.15.4 Zigbee and 802.11 Wi-Fi, both in the 2.4GHz band). It controls three outside security lamps which are on per schedule in the evening. In our previous home we got good use from Z-Wave via an Aeon Labs Z-Stick and Home Assistant on a general purpose computer (VM) as the control software. I really liked Home Assistant, and I'm not looking forward to learning the idiosyncracies of the closed source Samsung hub. Plus, Zigbee/Matter is the way of the future while Z-Wave is from antiquity. So I want to make these replacements:

Automated Functions

What do we want the home automation system to do for us? This index is in order by importance:

Lighting Color Temperature (SAD)

Redmond is at latitude 47.7° north, and the long winter nights are giving us seasonal affective disorder (SAD). The well-known cure for this is artificial daylight, i.e. not our wimpy warm white 2400°K evening light, but 5000°K to 5500°K. Medical research has shown that an effective treatment is a bright panel (10000 lux) within the patient's field of view at wake time. (You don't have to stare at it continuously.) In addition to this we plan to replace existing static LED lamps with hue adjustable ones, running them at 5000K from sunset until twelve hours after sunrise, which around here in winter is four to six hours after sunset. Then the color temperature can be turned down.

Of course this means investing in a zillion new light bulbs with adjustable hue. Here's a list of how many light bulbs are in various zones. A star indicates that we're there a lot in the afternoon when artificial daylight is most needed, while the rest are less important for SAD resistance and could be converted later.

12 * Big room west
12 * Big room east (counting kitchen hanging lamps)
12 Den, entry, laundry, bath D (southeast quadrant)
8 Bedrooms east
13 Bedrooms west
24 * Light bulbs most important for SAD resistance
57 Total light bulbs (expensive)

Security Sensors

The house in Los Angeles had a fairly complete set of security sensors: window and door open, glass breakage, and interior motion. How much of our L.A. paranoia should we export to the more bucolic atmosphere of Redmond?

Very helpful would be deadbolt sensors: the doors to the outside, are their deadbolts locked as they should be? But digging on Amazon turns up no dedicated devices. An improvised solution seen in forum posts is to glue a magnet to the deadbolt and locate a magnetic door/window open sensor so it triggers when the deadbolt is closed. Absence of the closed signal means either the deadbolt is open or the sensor is out of battery.

Security Cameras

We currently have Ring cameras and a doorbell, having junked the Blink cameras that came with the house. Both communicate over Wi-Fi. Good features: the Ring cameras have excellent optical quality and low light performance (particularly compared with the old Blink ones). The user interface is comprehensible and does what we want (compared to Blink). Cloud storage of video is available at what we consider to be an acceptable price. Bad features: as far as I've seen on forums, Ring can't be integrated with a self-hosted security system; the closest you can come is to give Home Assistant your Ring password or API key and suck video off the cloud server. The present power-over-Ethernet interface has too many negative issues; we returned our first POE camera and went with a cockamamie mains power solution. We may convert that camera, plus the battery powered ones, to solar panels (expensive), because I'm not too spry any more and climbing a ladder to swap batteries may have been acceptable in the past but won't be in the future.

A major negative issue is, you have to store the video in the cloud, There's not much incriminating when a rabbit crosses our driveway or I take out the garbage bins, but this could change unexpectedly and without the possiblity of mitigation or defense in depth. A true self-hosted solution would much less excite our paranoia nerves. This is an advantage of the Blink cameras: half of them were able to use a local storage module.

On the other hand, motion detection is hard to get right, and the Ring cloud service has done a good job, I think, and I can't expect to do a satisfactory equivalent service locally.

The Ring system has earned its subscription price by helping us be aware of package deliveries and the like. It looks like the security camera system is one of the nasties where you can't satisfy all of the requirements at the same time: you have to give up something, to get the rest of the good parts.

Security Lamps

We want the lamps to turn on and off per a schedule, like they do now. How much hassle is it to convert (i.e. replace) the lamps to Zigbee/Matter? Comparing to the hassle of supporting the obsolete wire protocol just for this function, and dealing with a future broken radio and/or lamps.

Conclusion: We'll keep the existing Z-Wave communication in phase 1, but probably replace the bulbs in phase 2, leaving just the door lock on Z-Wave.

Away Mode

When we are away on a trip we give H.A. a schedule on which to turn on room lamps, to simulate presence of a live human (or dog). For several brands of smart lamps the proprietary controller app can set lamps to turn on and off randomly; this is called Away Mode. In the likely case that H.A. has a pseudo-integration of this kind, and if the pattern can be made more alive-looking (vs. truly random), we ought to use that instead of our fixed schedule.

Where do you suppose the intelligence lies for the random process? In independent and uncoordinated light bulbs? In the user's cellphone which may be in an airplane flying over Greenland? In the vendor's cloud server? Security, privacy and aliveness can be done much better by self-hosted H.A.

Door Lock

Our front door has a Schlage smart lock, powered by expendable batteries (4x AA cells). It has a physical key (normal Schlage) plus the possibility of setting multiple entry combinations, to be given to workers or guests and wiped when they're gone. Customer reports about other brands are not as quantitative as I would iike, but I estimate they are reporting about 1000 open-close cycles on one set of batteries. I think it's important that the door lock should open the door autonomously even if Home Assistant is unavailable, e.g. power failed.

This lock has a Z-Wave radio and currently it is connected to the Samsung SmartThings hub. Here's a list of things the integrated lock can do, and how much we value them.

On this topic, the door from the garage into the house has a normal keyed lock, and I do wish sometimes that I didn't have to dig out my key to open it, particularly in cold weather with gloves on my hands. In other words, I'm thinking about replacing it with another smart lock.

What about lockouts, when inevitably the smart lock breaks? We have three keyed locks including the smart lock, and we take our physical key whenever leaving the house (even to toss trash), so we think we have defense in depth against lockouts. Some smart locks have an exterior connector for a 9V battery, if you delay too long to replace or recharge the main battery. (One forum poster keeps one in his car.) But I think this feature is an invitation to vandalism and I would try to avoid it.

HVAC Thermostat

Currently it's a Nest device. Ben (our son) wasn't happy with his Nest and replaced with an Ecobee that can interface with Home Assistant, and we aren't enthusiastic about the Nest also, due to a difficult user interface. The bedroom areas and office are kept comfortably warm since the furnace is at their geometric center, but the big room is inadequately heated. Improving hot air flow from the furnace isn't going to happen, but it would be nice to put a temperature sensor in the big room as an aid to our complaining.

Ben has an Ecobee thermostat (what model?) and likes it. Many forum posters have and like Ecobee. Honeywell thermostats are also praised, and my wife liked the Honeywell thermostat in our previous home. But with home automation, a lot of smart controls are better handled by H.A. Here's a starting point for picking a thermostat:

Honeywell Home Smart Thermostat, X2S
$79.98, sold and fulfilled by Amazon.
Heat pump compatible, or separate furnace (2 stage) and air conditioning (1 stage). Energy Star certified. Requires 'C' wire. Matter over Wi-Fi communication. Set up and control from the front panel or the app. Has autonomous scheduling. Autonomously switches between heating and cooling. Monitors indoor humidity. Good reviews: 5* 73%; 4* 10%; lower 17%.

Water Leakage

We have one or maybe two sump pumps under the house; the ground in the Pacific Northwest is a lot wetter than in L.A. There is also a leak sensor on the water heater, which as far as we know is not integrated with the Samsung SmartThings system. Many if not all of our neighbors also have sump pumps and we see them (and us) discharging water occasionally. It would be a nice addition to let Home Assistant keep a record of water detection.

Weather Station

A nice addition, which we sort of need, is a home weather station, at least an outdoor thermometer, humidity sensor and rain gauge. The EVA product also has a barometer, which is useful.

Fire and CO Sensors

The house is equipped, per building code, with mains powered fire and CO detectors. They aren't integrated with the SmartThings, and they have a loud and annoying chirping behavior, usually starting at midnight, when at end of life. Is it worthwhile to bring them into the home automation system? Particularly appreciated would be advance warning that they need to be replaced.

Commercially packaged security systems rarely or never come with integrated fire and CO sensors; they instead have a listener which will do some automation, like setting off the main siren, when the sensor gives its audio alarm.

From New York Times Wirecutter: The Best Smart Smoke Alarm by Roy Furchgott, 2025-11-xx: Their favorite is the Kidde Smart Smoke + Carbon Monoxide Alarm, $72 on Amazon. It's hardwired, like the existing non-smart sensors. Not much tech-level detail here, and H.A. forums have few mentions of Kidde integrations and several of those are bad testimonials. On H.A. forums, a lot of people use X-sense products and like them, except short battery life. Several posts have this core message: put a listener next to a dumb sensor. That way you can get a wider selection of sensors, you can get the smart features you want like the air protocol (Zigbee/Matter not Wi-Fi), and you won't get design glitches that make the fire and CO sensing less reliable. But you don't get pre-warnings at end of life.

Bathroom Fan

This is probably not worth entangling with the home automation, but all the bathroom fans run for a fixed half hour, and I would like to replace them with ones that can run for a variable time.

Implementation Plan

Options for Hosting the Home Automation Server (Hub)

The only home automation software that we're considering is Home Assistant. Open source competitors like Domoticz and OpenHab are too old and are withering. Proprietary hub software is generally restricted to a particular vendor's ecosystem, like Apple Homekit or Samsung SmartThings. I like Home Assistant and am familiar with programming it, and it has a good WAF (wife acceptance factor) as well, all of which count for a lot.

We have three options for the hardware to run Home Assistant.

Naming Standards for Devices

I'll end up with a lot of devices: 57 interior lamps, at least 6 exterior lamps, and at least ten miscellaneous devices. They need systematic names. On the dashboard they will have more human friendly names like driveway camera.

Device Purchases, Phase 1

My first Amazon order will include these devices.

Device Purchases, Phase 2

Phase 2 of course can't be decided until phase 1 succeeds, but here is a quick selection of devices likely to be picked in this phase.

Background and Implementation Details

Network Layers Involved: Zigbee? Thread? Matter? Wi-Fi?

IEEE 802.15.4 specifies the physical layer and media access control for the Zigbee and Thread upper layers. It emphasizes inexpensive, low power, modest bandwidth channel stations; the basic channel will provide 250 kbit/sec. The maximum range between communicating 802.15.4 devices depends on a lot of factors: the longest range I've seen claimed is 300 meters outdoors, unobstructed line of sight, without trees or walls or competing devices or other interference sources. The shortest range I've seen complained about is 5 meters, indoors with all of the above troublesome aspects. The official documents claim 10 to 100 meters depending on circumstances. This blog post: Zigbee Range: You Must Know The Truth by Yucy (2024-06-26) has more extensive discussion of the range of Zigbee communication (and 802.15.4 in general).

For satisfactory operation you really need a mesh network overlayer, so distant communicating devices can relay their packets through one or more routers or repeaters that are not so far apart.

Compliant 802.15.4 radios operate in these no-license bands: 868MHz in EU, 0.6MHz wide, 1 channel; 915MHz in North America and Australia, 8MHz wide, 30 channels; or 2400MHz worldwide, 83.5MHz wide, 16 wider channels. The standard has been amended with other national bands and various modulation methods. The framing layer has a MTU (maximum packet size) of 127 bytes for most modulations.

6LoWPAN is a higher layer which specifies packet fragmentation and header compression to squeeze IPv6 packets into multiple 802.15.4 packets. It is the foundation of the Thread and Zigbee network layers.

Thread is often mentioned, but for historical reasons the use of Thread is concentrated in the Apple ecosystem, which I don't have, and I am concentrating on the Zigbee overlayer. Like Zigbee, Thread specifies an application layer, but a lot of modern devices instead use the Matter application layer over the Thread network layer.

Zigbee adds to 802.15.4 a network layer which assigns devices to roles as end devices, routers, and one coordinator. Battery powered devices almost never do routing, while mains powered devices like light bulbs and plugs usually can, but not always. Read the product description. Routers can send packets to their destination in multiple hops with non-unique routes: it's a mesh network. Zigbee also specifies an application layer and many product offerings support it. Like Matter over Thread, it's possible to replace the Zigbee native application protocol with the Matter application protocol, but (in 2026) there are fewer Matter over Zigbee devices than Matter over Thread.

Matter is an application protocol intended for smart home devices and other members of the Internet of Things. Its main goals are to improve interoperability between different vendors' IOT devices, to define a security layer that interoperates, and to facilitate and promote controlling IOT devices from a user interface that is on the same net and communicates directly with the controlee, not going through an off-site cloud server. Matter uses the IPv6 network layer and can function on any under layer that supports IP, such as Ethernet, Wi-Fi, Zigbee and Thread.

Apple HomeKit is an application layer analogous to Matter, but older, and both of these can operate over both Thread and Zigbee. H.A. has an integration called the HomeKit Bridge which can talk to HomeKit devices.

Matter vs. Zigbee: What's Your Choice for New Smart Home Devices? OP riiam Mo Riyami (2024-11-xx). He got a lot of replies but one subtopic stood out: In 2024-11-xx there were (and still are in 2026-01-xx) a lot more Zigbee over Zigbee devices than Matter over Zigbee (referring to the application layer being carried over the air protocol), and it's not a problem to use both. Also, Matter over Wi-Fi is a lot more common (on Amazon) than Matter over Zigbee, but home automation over Wi-Fi has too many negatives and I want to avoid it.

What's wrong with Wi-Fi? (Compared to Zigbee or Thread.) It takes more smarts in the dongle, and it has to send keepalive packets to the access point in order to stay connected. These increase the power used and the price. For this reason, Wi-Fi is unsuitable for battery powered devices. Both you and your neighbors use it for high volume data transport like streaming audio and video, squeezing out the home automation traffic. It's not a mesh network and you may need to buy dedicated routers, called range extenders, or multiple access points. Access points have a limit on how many clients they can associate with: as few as 8 for an old AP that I used to have.

Installing Home Assistant: Container vs. Virtual Machine vs. Hardware

In Home Assistant an integration is a piece of software or middleware which can accept commands in H.A's API ontology, reformat them to the ontology that the hardware entity expects, and send them on the air interface; or in the other direction it can receive status reports from the entity and reformat them in a form useful to H.A. Some of the more important integrations involve daemon-like processes, particularly the wire or air protocol integrations like Z-Wave and Zigbee.

Home Assistant web site.

Currently (2026) the H.A. docs describe two installation types:

Should HA OS be installed on a virtual machine, or its own dedicated hardware? The VM is something I know how to do, and I've already hosted H.A. on a VM, so phase 1 will re-use this VM. But in phase 2 I'm strongly considering separate hardware for H.A. to reduce the amount of home net functions that would be brought down by the loss of any one physical computer.

Network Design Issues

For home automation the devices do their jobs, like shedding light, in specific locations, so there isn't much opportunity to move them around to optimize the network. Here are some key points I'll need to deal with:

This long forum post gives invaluable information about avoiding EMI (electromagnetic interference): Zigbee Networks Optimization: a How-to Guide for Avoiding Interference and Adding Zigbee Routers… by Hedda (2024-09-xx). She could use a skilled editor but the content is important. Key points:

Product Selection Notes

Forum Posts Listing Favorite Brands

Now the plugs:

Favorite Smart Lamps and Plugs on Wirecutter

From New York Times Wirecutter by Thom Dunn, 2005-03-06. This review concentrates on dimmable normal hue bulbs, i.e. what you would use to replace incandescent bulbs. His brand favorite is Feit Electric: best color spectrum, most reliable, and smoothest dimming, so he says. I've also had good luck with Feit products.

A normal round light bulb has base E26 and shape A19. The small candelabra bulbs have base E12 and shape B10 (or C9 or C15 for the flame-tip variant). In color temperature, soft white generally means 2700K. Noon sunlight is 5000K to 5500K. Color rendering index refers to how well the bulb's spectrum imitates a blackbody, therefore showing targets in their proper colors as if illuminated by an incandescent bulb of the advertised color temperature. The CRI runs from 0 to 100, and according to this author, the best bulbs score 90 and up while cheap bulbs score 80 to 90. 60 watt equivalent is 800 lumens; 40 watt equivalent is 540 lumens by multiplication, but customarily 450 lumens is said to be equivalent to 40 watts. Beware, some bulbs are more isotropic than others; often intensity (lux) toward the sides is significantly less than out the top (the symmetry axis).

From New York Times Wirecutter: Best Smart Led Light Bulbs by Megan Wollerton, 2026-01-21. They give first place to the WiZ 60W A19 Color LED bulb ($11 on Amazon), and for office lighting the GE Cync Full Color Direct Connect Smart Bulb was their favorite. (But it's A21 shape, a bit larger than A19.) The WiZ bulb can change color temperature on a schedule. (This may be an automation in the app.)

Here's a list of bulbs that I've noticed in Amazon searches, which were tested for prior editions of this guide but which are no longer recommended because current models are better and/or cheaper. Cree Lighting Connected Max Tunable White + Color Bulb; GE Cync Direct Connect Smart Bulb; Kasa Smart Light Bulb KL125 and KL130; LIFX Color A19 Wi-Fi Smart Bulb; IKEA's Trådfri Smart LED Bulb; Tapo Smart Light Bulb L530E; three Sylvania Smart+ bulbs.

From New York Times Wirecutter: The Best Smart Plugs by Kathryn Rath, 2026-01-13. The TP-Link Kasa product line swept all 3 places. Which surprises jimc because I've had a lot of trouble with TP-Link networking accessories. Their favorites:

A List of ThirdReality Products

This list is to give me an idea what devices I might want to add in phase 2 or 3, not committing to Third Reality for every device class. These are from ThirdReality's store on Amazon; prices are on Amazon as of 2026-01-xx. All are Zigbee except as noted; some may be Matter over Zigbee.

Tidbits

Color Temperature and Moths

Moths are very important to our urban ecosystem. Presented with an artificial lamp or a candle, they tend to circle around it, orienting with their backs toward the brightest light source they see. So they use up resources, fail to feed (and pollinate), expose themselves to predators, and burn their wings. But this behavior is color dependent. Use a hue adjustable lamp and turn the blue channel all the way down, and you will do a big favor to the moths.

OMB Memorandum M-24-04

This memorandum discusses a lot of points in cyber security, of which zero trust is a major one. There's a good discussion of what it requires agencies to do, in Meeting FISMA (M-24-04) Requirements with a Unified Attack Surface Management Strategy by Chris McManus, Senior Product Marketing Manager, Qualys (2025-05-14).

The cost for Qualys' attack surface management product is $17.25 per IP address up to 500 IPs, down to $5 per IP for a big network.

A major issue is, you should have an inventory (list) of all hosts on your network including IoT devices. An illustration in a non-government white paper shows an iceberg labelled your hosts. The upper part has I.T. staff closely watching it, but the bottom, labelled IoT, is decorated with hackers, zombie bots, etc. The list should have these fields (from memory): manufacturer, model number, serial number, firmware installed, owner, physical location, fixed IP (if used), DUID (if DHCP), wild side IP address (if any), what it's for, rating for ease of being hacked, badness rating if it's compromised, contact address where higher level monitors can report problems.

We aren't a federal agency, but it would be best practice to keep track of IoT devices in this way.

Terrapin Attack

It's a man in the middle attack on SSH. See also the project's website. Discovered in late 2023. There's a vulnerability scanner. It was plugged in OpenSSH v9.6 (2023-12-18). I remember installing that patch. We currently have v10.0p2. Terrapin attacks (sic) are mentioned in the introduction to OMB M-24-04.

Selling a Smart Home

Steffi (2025-12-xx) says someone put in a lot of home automation without physical switches. Then sold the house. The new owner is having a hard time sorting things out. Moral: install the physical switches, leave them on, and do your H.A. thing, but the new owner can use the physical switches until he figures out the automation.

Questions for Ben

This is for phase 1. Here are Ben's comments (summarized) on reading this document: