Starlink. It’s the internet, from space!

antiwraith

Ars Tribunus Militum
2,147
Subscriptor
*sigh*

Starlink is already suffering because it's oversold. Y'all aren't helping any. :(


On one hand, who am I tell someone else what to do with their money and internet situation.

On the other hand, if you have fiber I want to say to leave Starlink alone and save that bandwidth for those of us with literally none.

I mean if you are WFH full time and your neighborhood takes a tornado or hurricane surely your work would be accommodating to a natural disaster situation?
 

sryan2k1

Ars Legatus Legionis
44,493
Subscriptor++
I mean if you are WFH full time and your neighborhood takes a tornado or hurricane surely your work would be accommodating to a natural disaster situation?


The last massive storm we had left us without power and internet for 3.5 days (which is uncommon, but not impossible). We're in a slight depression and the nearest Verizon tower is on private property and doesn't have more than a few hours of battery backup, once that dies there is barely enough cell coverage to make a phone call, let alone use internet.


I've got a VZW 4G/LTE Microcell and a small generator. If we had Starlink I would have stuck the microcell and an Access Point out in my driveway and offered up limited cell/wifi service for the neighbors (rate limited per client, of course ;))

Having space-internet can make for some really fantastic DR offerings.



Edit: Also yeah, my dish sitting plugged in doing nothing 51 weeks a year isn't hurting anything.
 
I mean if you are WFH full time and your neighborhood takes a tornado or hurricane surely your work would be accommodating to a natural disaster situation?
Edit: Also yeah, my dish sitting plugged in doing nothing 51 weeks a year isn't hurting anything.

Actually it does. You're taking up TDMA time slices just to keep the uplink active, which means one less user can actively use that node, or at the very least at reduced capacity.

I understand the need for some disaster capability, but in all honesty if things are bad enough where power and internet will be out for multiple days odds are you have bigger problems than needing an internet connection. If your employer can't understand that either, that's just a shitty company to be working for honestly.

edit: But I understand your point regardless, just wanted to make that clear. It's a pretty nifty idea. It would be really nice if Starlink offered some sort of service like that where you could come online as needed without the possibility of getting cancelled otherwise.
 

sryan2k1

Ars Legatus Legionis
44,493
Subscriptor++
Actually it does. You're taking up TDMA time slices just to keep the uplink active, which means one less user can actively use that node, or at the very least at reduced capacity.


Uplink timeslices are dynamic. The algorithm used is likely proprietary, but the tl;dr is that each terminal is given a number of slots based on it's utilization over a time period. If all it's doing is sending keepalives, it's going to get a very tiny fraction of a user actually sending data.


xGPON works nearly identically, with more lasers and less radio.
 

antiwraith

Ars Tribunus Militum
2,147
Subscriptor
Fedex dropped my dish off a few hours ago. Got it up and running!

Several Dish firmware upgrades later, I think it's finally happy with that. Starlink speed tests showed 75 to 150 megabits down and 6 to 12 up. that's comparable to what my cable modem got when I lived in town. And it was the same monthly price Starlink RV is. However the starlink app warned me that I had bad wifi throughout the house, the SL router is the corner of a room on one end of the house not centrally located.



So I dusted off my Eero's (old gen 2 models) that haven't been used in 6 months or so since we moved. I plugged them in, thankful I went ahead and got the SL ethernet adaptor, and get them all up to date. Wifi throughout the house and very decent speed from Starlink. I guess one perk of living out in the middle of no where, I have zero neighboring wifi networks worry about. Where I lived before, there were 20 or so wifi networks I could pick up in my house and inference was an issue. The only problem here are interior walls and Eero has taken care of that. I even ran Cat6 when we remodeled, not sure if we'll need It or not but it's there if we want it.

As of right now, the starlink app reports 4 seconds of downtime in the last 2 hours. I can totally handle that. I guess now the question is do I leave Eero as a router and live the double NAT lifestyle, put Eero in bridge mode, or disable the routing of the SL router? Seems like if I disable the SL router, I lose all the neat tests and stats so I don't think I want to do that.

Still, very very good first impressions. :) :) :) :) :)
 

antiwraith

Ars Tribunus Militum
2,147
Subscriptor
Are there any contractual limitations on the ways subscribers can use Starlink? For example any prohibitions against streaming a camera 24/7?

The Terms of Service appear to be silent on this.


I don’t know myself, but would like to find out.

In that same type of data, I assume uploading camera video to the cloud aka ring or something similar would be fine? It certainly would not be 24/7. Though I’m curious about that too
 

stevenkan

Ars Legatus Legionis
15,662
^^
Very interesting. How much solar would it take to run a Starlink dish?

This would be an incredible solution for remote monitoring.
https://www.tweaktown.com/news/86320/in ... index.html

200 watts should do it, but extra capacity is always useful especially when you have less than optimal conditions. A battery will be required too.

Nice! $2,000 all-in, which isn't horrible. Not cheap, but not "Act of Congress"-money, either. I hope it's robust.
 
Gotta say I'm fairly impressed with Starlink. Finally got the ethernet adapter in so I was able to hook up my NAS finally. The router/AP is pretty damn strong - I have pretty solid signal coverage on the passable portions of my property (anywhere people would be typically) with just the one router. And I'm not really having much issue in terms of bandwidth. It's about half as fast as the fiber I had before I moved, at about 2x the price, but given my options here I'm not complaining.

And lastly, probably most importantly, I don't have dishy mounted anywhere, located in a non-optimal location, notifications of obstructions "every 3 minutes", and yet I typically am only seeing 2 or 3 obstruction disconnects a day for no more than a few seconds each. The connection to the satellites seems VERY resilient to be honest.

The only complaint I really have is permanent installation requires a larger-than-it-should-be hole wherever you want to run the cable through due to how they designed the connectors. Not a huge issue, but some forethought should have gone into that instead of asking users to drill a 1" hole in their wall for the sake of aesthetics on a cable connector you'll never see anyway.
 

stevenkan

Ars Legatus Legionis
15,662
I saw this the other day:

StarlinkWiFi.png
 

Xelas

Ars Praefectus
5,444
Subscriptor++
Gotta say I'm fairly impressed with Starlink. Finally got the ethernet adapter in so I was able to hook up my NAS finally. The router/AP is pretty damn strong - I have pretty solid signal coverage on the passable portions of my property (anywhere people would be typically) with just the one router. And I'm not really having much issue in terms of bandwidth. It's about half as fast as the fiber I had before I moved, at about 2x the price, but given my options here I'm not complaining.

And lastly, probably most importantly, I don't have dishy mounted anywhere, located in a non-optimal location, notifications of obstructions "every 3 minutes", and yet I typically am only seeing 2 or 3 obstruction disconnects a day for no more than a few seconds each. The connection to the satellites seems VERY resilient to be honest.

The only complaint I really have is permanent installation requires a larger-than-it-should-be hole wherever you want to run the cable through due to how they designed the connectors. Not a huge issue, but some forethought should have gone into that instead of asking users to drill a 1" hole in their wall for the sake of aesthetics on a cable connector you'll never see anyway.

The cable disconnects on the dish side, too, and the cable on that end can be straightened. You need nowhere near 1" to feed it through. My dish is loaned out to a site right now and we fed it through at least 50 ft of 3/4" conduit that already had 2 other cables in it to get to the roof, although it was a tight fit and we used lube and took it easy (that just sounds so bad, LOL). Technically, that connector is 5/8" in size.

I have the square dish. Perhaps the older round dish used fatter cables or different connections?
 

phoenix_rizzen

Ars Praefectus
4,236
Subscriptor
Fedex dropped my dish off a few hours ago. Got it up and running!

Several Dish firmware upgrades later, I think it's finally happy with that. Starlink speed tests showed 75 to 150 megabits down and 6 to 12 up. that's comparable to what my cable modem got when I lived in town. And it was the same monthly price Starlink RV is. However the starlink app warned me that I had bad wifi throughout the house, the SL router is the corner of a room on one end of the house not centrally located.



So I dusted off my Eero's (old gen 2 models) that haven't been used in 6 months or so since we moved. I plugged them in, thankful I went ahead and got the SL ethernet adaptor, and get them all up to date. Wifi throughout the house and very decent speed from Starlink. I guess one perk of living out in the middle of no where, I have zero neighboring wifi networks worry about. Where I lived before, there were 20 or so wifi networks I could pick up in my house and inference was an issue. The only problem here are interior walls and Eero has taken care of that. I even ran Cat6 when we remodeled, not sure if we'll need It or not but it's there if we want it.

As of right now, the starlink app reports 4 seconds of downtime in the last 2 hours. I can totally handle that. I guess now the question is do I leave Eero as a router and live the double NAT lifestyle, put Eero in bridge mode, or disable the routing of the SL router? Seems like if I disable the SL router, I lose all the neat tests and stats so I don't think I want to do that.

Still, very very good first impressions. :) :) :) :) :)

Put the SL router into "by-pass mode" and let the Eero handle NAT/routing. You might need to add a static route for 192.168.100.1 out the WAN interface (to allow access to Dishy).

You won't lose anything of value. The Starlink app will still work, you can still see all the stats, outages, obstructions, etc, and can still run speedtests (just not the phone-to-router test).
 

phoenix_rizzen

Ars Praefectus
4,236
Subscriptor
Gotta say I'm fairly impressed with Starlink. Finally got the ethernet adapter in so I was able to hook up my NAS finally. The router/AP is pretty damn strong - I have pretty solid signal coverage on the passable portions of my property (anywhere people would be typically) with just the one router. And I'm not really having much issue in terms of bandwidth. It's about half as fast as the fiber I had before I moved, at about 2x the price, but given my options here I'm not complaining.

And lastly, probably most importantly, I don't have dishy mounted anywhere, located in a non-optimal location, notifications of obstructions "every 3 minutes", and yet I typically am only seeing 2 or 3 obstruction disconnects a day for no more than a few seconds each. The connection to the satellites seems VERY resilient to be honest.

The only complaint I really have is permanent installation requires a larger-than-it-should-be hole wherever you want to run the cable through due to how they designed the connectors. Not a huge issue, but some forethought should have gone into that instead of asking users to drill a 1" hole in their wall for the sake of aesthetics on a cable connector you'll never see anyway.

The cable disconnects on the dish side, too, and the cable on that end can be straightened. You need nowhere near 1" to feed it through. My dish is loaned out to a site right now and we fed it through at least 50 ft of 3/4" conduit that already had 2 other cables in it to get to the roof, although it was a tight fit and we used lube and took it easy (that just sounds so bad, LOL). Technically, that connector is 5/8" in size.

I have the square dish. Perhaps the older round dish used fatter cables or different connections?

Round Dishy cable is permanently attached at the dish end, and is a standard RJ45 connector at the other end. 3/4" would be enough to get it through.

Rectangle Dishy cable is detachable with a straight connector on the dish end and a 90-degree connector on the router end. A 3/4" hole should work to pass the dish end through; a 1" or larger hole is needed to pass the router end through.
 

stevenkan

Ars Legatus Legionis
15,662
Fixed home LTE/5G service can also be surprisingly decent from T-Mobile where offered.
T-Mobile coverage is about to get a whole lot broader, too.

I can't find the other article, but I read that there's a significant probability that this might work with existing handsets. Mind. Blown.

edit: oh, here we go:

Here's how this will work: A slice of T-Mobile's 5G spectrum will be used for connectivity, meaning that existing 5G phones should be able to connect without modifications. On the other end will be Starlink's second generation satellites with bigger antennas, which are launching next year.
 

xoa

Ars Legatus Legionis
12,061
Subscriptor++
I'm still really happy to have gotten a round dish for my clients with no requirement for SpaceX's router/wifi thing. I hope by the time this thing fails it'll be possible to get a similar dedicated terminal again, even if it's a $2k+ "business" one, so long as it can still use a normal plan (or at least a cheaper business plan, $150-200/mo could be doable, $500/mo is a big jump from the perfectly decent service at $110).
There's now a Starlink terminal in Antarctica.

Does someone at Starlink have to adjust orbits to provide coverage in low-pop areas like this? Seems like their subscriber base would be limited.
As it says right in that article it's using the laser mesh (and polar orbit sats they've been launching for a while). Has nothing to do with low pop, with a bent pipe they need a base within, I forget exactly, but 900km or something like that? They're not ready to bring the mesh up officially for commercial service everywhere, but they've been testing it for a while now. The reveal on the mesh being up officially in general is the launch date for blue water maritime service, since same thing, it's infeasible without it.
Fixed home LTE/5G service can also be surprisingly decent from T-Mobile where offered.
T-Mobile coverage is about to get a whole lot broader, too.
That will certainly be cool if they pull it off but I don't think it has anything to do with fixed service. Only way Starlink would improve that theoretically is if SpaceX made their ground station level links (or future FSO hybrid ones or something) available to carriers with appropriate sat coverage so they could have a gigabit+ backbone anywhere which would then get redistributed via cell towers. But for fixed service via Starlink I think SpaceX would generally prefer people just get, well, Starlink. The main possible advantage I can see of Internet<>Starlink<>Cell<>fixed-LTE/5G-CPE<>LAN vs Internet<>Starlink<>LAN would be that the cellular is much better at dealing with obstacles and doesn't have any sort of LOS requirement, plus CPE can be smaller and lower power. For that though it requires a bunch more infra and injects another middleman. Not sure how that will sugar out over the next decade. The cellular partnership right now sounds more about last resort emergency phone access, just texting or very minimal voice/data. Incredibly handy in a crisis or for key warning information or the far from anything, but not what anyone would want to depend on for regular use either.
 

stevenkan

Ars Legatus Legionis
15,662
Starlink announces latency improvements:

“In the United States alone, we reduced median latency by more than 30%, from 48.5ms to 33ms during hours of peak usage,” the company wrote. “Worst-case peak hour latency (p99) has dropped by over 60%, from over 150ms to less than 65ms.”

The latency has also improved for users outside the US, with the median latency down by up to 25% and the worst-case latency reduced by up to 35%.

Their goal is 20 ms, typical, which would be pretty amazing.
 

stevenkan

Ars Legatus Legionis
15,662
https://www.tweaktown.com/news/86320/in ... index.html

200 watts should do it, but extra capacity is always useful especially when you have less than optimal conditions. A battery will be required too.
It looks like the square dish has significant efficiency improvements. If I care only about daytime use, and can tolerate cloudy outages, it looks like I could get away with 100W.

It looks like "beginners kits" are becoming more prevalent in the market as well, for people like me who don't know anything about solar.
 
  • Like
Reactions: continuum

phoenix_rizzen

Ars Praefectus
4,236
Subscriptor
I wonder when and how the purchase price of a Starlink dish will bottom out.

$500 + accessories is still too steep for a toy. It's an absolute bargain if you need it, but I don't need it. I would have purchased a Starlink terminal for $500 in a heartbeat back in 2017.
They were on sale for $299 CAD last year, and are currently selling refurbished units for $450 CAD. Convert that to USD and they're practically giving them away compared to the original price. :)
 
  • Like
Reactions: stevenkan
I almost posted this in a separate post but then realized this thread existed.

We're moving into a rural area where one neighbor has really slow satellite service and then the development about 800 feet away has Comcast. We're currently working with a local Fiber company that has between 300-500 users to run Fiber to both our house and our neighbor. The Fiber company is almost done wiring a neighbor half a mile down the road.

We're moving in about 90 days. If for some reason the Fiber company gets delayed I might get Starlink as a temporary solution.

Can anyone confirm the following:

1.Can Starlink be cancelled at anytime with no penalty or issues?

2.I have a ton of open land behind our house can I get a way without mounting the Starlink dish/receiver on our roof?

3.Depending on the time of day will Starlink work well enough for large downloads, Zoom calls, and streaming on multiple devices at once time?

4.Can Starlink be connected to a wireless router that's then fed into a switch for all our home equipment ie: 2 Apple TVs, 2 wireless POE APs, several ethernet based computers and a NAS box?

5.Are there any places that buy the equipment if we cancel? What's my best option to not get stuck with the $600 worth of equipment?

We're in VA.
 

Xelas

Ars Praefectus
5,444
Subscriptor++
I almost posted this in a separate post but then realized this thread existed.

We're moving into a rural area where one neighbor has really slow satellite service and then the development about 800 feet away has Comcast. We're currently working with a local Fiber company that has between 300-500 users to run Fiber to both our house and our neighbor. The Fiber company is almost done wiring a neighbor half a mile down the road.

We're moving in about 90 days. If for some reason the Fiber company gets delayed I might get Starlink as a temporary solution.

Can anyone confirm the following:

1.Can Starlink be cancelled at anytime with no penalty or issues?

2.I have a ton of open land behind our house can I get a way without mounting the Starlink dish/receiver on our roof?

3.Depending on the time of day will Starlink work well enough for large downloads, Zoom calls, and streaming on multiple devices at once time?

4.Can Starlink be connected to a wireless router that's then fed into a switch for all our home equipment ie: 2 Apple TVs, 2 wireless POE APs, several ethernet based computers and a NAS box?

5.Are there any places that buy the equipment if we cancel? What's my best option to not get stuck with the $600 worth of equipment?

We're in VA.
1. I'm pretty sure that, yes, you can cancel at any time. I have several Starlink accounts (business-related but using "cconsumer" accounts on Starlink) and have been able to cancel a few of them within a few months of opening accounts with no penalties.
2. Yes. Dish needs an unobstructed view of the sky in a fairly wide cone and a stable mount (not swaying or vibrating too much) to do best. There WILL be small "blips" that last for 1-2 seconds every once in a while as the dish "hops" to the next satellite that comes into view. Not that big of a deal, but FYI. You may need to pay extra for a longer cable to get to the dish - by default, it ships with a 75' cable, but they have a 150' option that you can buy. You may want to strap the legs of the dish down securely to prevent it from being blow over in a high-wind event, and if anything obstructs the view, even, for example, a dog taking a sniff at it, you will drop the connection. I'd elevate it at least somewhat or plunk it on a shed roof or something to keep ground clutter and animals off of it.
3. Generally, yes, but see #2 above. I've had very short "glitches" every few minutes via Teams calls where I'd lose 1-2 words when on Starlink, but that's about it. It's very usable.
4. Yes, but you may need to buy an additional adapter. The "router" they give you (my experience is with the Gen2 hardware) does not have an Ethernet port and needs a cheap adapter you can get through them (it was something like $25), but I think they added it back with the newest Gen3 hardware.
5. Not sure?

One thing to be aware of is that Starlink is 100% CG-NAT. You will NOT have a public IP and will not be able to VPN into or host any web-facing services directly on that network when using Starlink.
It's also a bit of a power hog - the dish and router use ~100W continously, which can add up quickly of your power is expensive or you're off-grid.
 

phoenix_rizzen

Ars Praefectus
4,236
Subscriptor
I almost posted this in a separate post but then realized this thread existed.

We're moving into a rural area where one neighbor has really slow satellite service and then the development about 800 feet away has Comcast. We're currently working with a local Fiber company that has between 300-500 users to run Fiber to both our house and our neighbor. The Fiber company is almost done wiring a neighbor half a mile down the road.

We're moving in about 90 days. If for some reason the Fiber company gets delayed I might get Starlink as a temporary solution.

Can anyone confirm the following:

1.Can Starlink be cancelled at anytime with no penalty or issues?
Yes, you can cancel service at any time, with no penalties. It will continue to work until the end of your "service period", which is whatever day of the month you activated service. Service starts on the 17th, cancel it on the 18th, it works until the 16th of the next month, for example.

You can also convert it to a Roam package and then "pause" the service, if you aren't sure you want to cancel it completely. When paused, you don't pay anything. You can activate it at any time, and pay for service as needed (min 1 month).

2.I have a ton of open land behind our house can I get a way without mounting the Starlink dish/receiver on our roof?
We ran ours from the backyard for almost 3 years. :) Always planned to mount it on the roof "next weekend".

3.Depending on the time of day will Starlink work well enough for large downloads, Zoom calls, and streaming on multiple devices at once time?
Time of day doesn't really apply, it's the same service throughout the day, month, year. What matters is how many other active users are in your cell.

When we started with Starlink, there were only a handful of users in our cell. We got 250+ Mbps downloads, 25+ Mbps uploads, and fairly consistent latency under 90 ms. This past year, after everyone and their dog around us activated service, we were lucky to get 50 Mbps downloads after midnight, and 30 Mbps during "prime time" (5 pm - 11 pm). During the day was better, which made working from home doable (Zoom, Teams, VoIP, etc), but it was getting worse due to overcrowding in the cell.

4.Can Starlink be connected to a wireless router that's then fed into a switch for all our home equipment ie: 2 Apple TVs, 2 wireless POE APs, several ethernet based computers and a NAS box?
Depending on the exact version of the Starlink hardware you get, you can either replace the Starlink router completely (gen 1 round Dishy), purchase an Ethernet adapter and put the Starlink router into "bypass mode" (gen 2/3 square, motorised Dishy), or plug directly into the Starlink router in "bypass mode" (gen 3/4 square unmotorised Dishy). Connect the router to a switch and plug all your other devices into the swtich.

5.Are there any places that buy the equipment if we cancel? What's my best option to not get stuck with the $600 worth of equipment?
You can sell your Starlink equipment to anyone. The process for transferring the hardware between Starlink accounts has been simplified over the year to where it's basically a few mouse click on the website to complete the transfer.
 

phoenix_rizzen

Ars Praefectus
4,236
Subscriptor
One thing to be aware of is that Starlink is 100% CG-NAT. You will NOT have a public IP and will not be able to VPN into or host any web-facing services directly on that network when using Starlink.
Inaccurate. Most residential accounts are behind CG-NAT, yes. However, sometimes you can end up with a publically routable IPv4 address (we had 1 a handful of times over the past 3 years). And you can always pay for a commercial account which includes a publically routable IPv4 address.

Regardless, IPv6 has been enabled and working for over a year now. You get a /56 (I think?) delegated to you via DHCPv6 and can use that on your LAN via prefix delegation (for /64 subnets or something like that?). Whatever setup it is, it's publically routable. So, if you have a router/firewall that support IPv6 and you have devices on the Internet that speak IPv6 (like cell phones) and you configure IPv6 on a device at home, then you can access that device remotely via IPv6.

Spin up a VM in "the cloud" that speaks IPv4 and IPv6 and you can tunnel into your Starlink-connected home that way.

It's also a bit of a power hog - the dish and router use ~100W continously, which can add up quickly of your power is expensive or you're off-grid.
It does not use 100W continuously. It's closer to 20-30W when idle with the heater is turned off, spiking to 50-60W when doing large transfers, and only hitting 100W when you turn on the heater to melt ice and snow off the dish. Depending on the generation of Dishy hardware, of course (some are more efficient than others).

We have a pair of little APC Back-UPS 600 that was able to keep Dishy (gen 1 round), Firewalla Purple, an 8-port PoE switch, 2 APs, and our file server running for just under 2 hours during power outages. Granted, this was during the summer with the heater turned off.
 
  • Like
Reactions: GaitherBill

Xelas

Ars Praefectus
5,444
Subscriptor++
Inaccurate.
Bullshit.
Most residential accounts are behind CG-NAT, yes. However, sometimes you can end up with a publically routable IPv4 address (we had 1 a handful of times over the past 3 years). And you can always pay for a commercial account which includes a publically routable IPv4 address.

Regardless, IPv6 has been enabled and working for over a year now. You get a /56 (I think?) delegated to you via DHCPv6 and can use that on your LAN via prefix delegation (for /64 subnets or something like that?). Whatever setup it is, it's publically routable. So, if you have a router/firewall that support IPv6 and you have devices on the Internet that speak IPv6 (like cell phones) and you configure IPv6 on a device at home, then you can access that device remotely via IPv6.


Spin up a VM in "the cloud" that speaks IPv4 and IPv6 and you can tunnel into your Starlink-connected home that way.
Notice the word "directly" that I wrote. Yes, you can spin up a VM somewhere to use as a tunnel, but that's not the definition of the word "directly".
Getting a public IP once or twice by accident is not something you can depend on.
Not every network has IPv6 enabled. Many public networks and residential networks still don't (Frontier doesn't even on their FIOS networks), so IPv6-only networks without routeable IPv4 addresses are useless for hosting without additional infrastructure (and cost) elsewhere.


It does not use 100W continuously. It's closer to 20-30W when idle with the heater is turned off, spiking to 50-60W when doing large transfers, and only hitting 100W when you turn on the heater to melt ice and snow off the dish. Depending on the generation of Dishy hardware, of course (some are more efficient than others).

We have a pair of little APC Back-UPS 600 that was able to keep Dishy (gen 1 round), Firewalla Purple, an 8-port PoE switch, 2 APs, and our file server running for just under 2 hours during power outages. Granted, this was during the summer with the heater turned off.

Well, good for you! The dish + router can certainly use 100W continuously in many climates, and you need to plan for the worse case scenario. The fact that your specific setup can use 50-60 watts with some caveats thrown in ("in the summer with the heater turned off", LOL) is a useless anecdote.
 

malor

Ars Legatus Legionis
16,093
Not every network has IPv6 enabled.
IPv6 counts for external connectivity. You can't really buy hardware that doesn't support it anymore. You might have to learn some stuff to get your home network working with it, but if you have a public IPv6 allocation, the only thing blocking you from reaching your machines at home will usually be you.
 

stevenkan

Ars Legatus Legionis
15,662
You guys are arguing different things. Xelas is talking about inbound VPN into your house. Everyone else is talking about outbound VPN to an employer/etc (which mostly works fine, no different than any ISP with CGNAT)
Thanks for clearing this up, as I've been wondering about this forever. So if I have CentralOffice with a real, public, IPv4, static address, I should be able to establish a site-to-site IPSec tunnel from a RemoteOffice1 that's running traditional NAT behind Starling's CGNAT?

And also from RemoteOffice2/NAT/CGNAT to CentralOffice?

How could I get from RemoteOffice1 to RemoteOffice2? If all 3 sites are running pfsense is there a way to route this traffic through CentralOffice if there's no way to do it directly?
 

Paladin

Ars Legatus Legionis
32,552
Subscriptor
IPv6 counts for external connectivity. You can't really buy hardware that doesn't support it anymore. You might have to learn some stuff to get your home network working with it, but if you have a public IPv6 allocation, the only thing blocking you from reaching your machines at home will usually be you.
I can't remember what it was but I was shocked the other day to find some pretty mainstream product line that had zero IPv6 support at all. Wish I could remember what it was now. It was like, no... really?!
 
  • Like
Reactions: malor

Xelas

Ars Praefectus
5,444
Subscriptor++
Thanks for clearing this up, as I've been wondering about this forever. So if I have CentralOffice with a real, public, IPv4, static address, I should be able to establish a site-to-site IPSec tunnel from a RemoteOffice1 that's running traditional NAT behind Starling's CGNAT?

And also from RemoteOffice2/NAT/CGNAT to CentralOffice?

How could I get from RemoteOffice1 to RemoteOffice2? If all 3 sites are running pfsense is there a way to route this traffic through CentralOffice if there's no way to do it directly?
Yes to all of the above. Each LAN and each VPN would need it's own unique subnet, and then you create routes on the CentralOffice router that will pass traffic between the subnets. In the interest of conserving VPN bandwidth, you might want to take this up a notch and use split tunneling on your remote office routers so that that only traffic that needs to hit something internal goes through the tunnel, and traffic that goes out to the internet bypasses VPN and goes straight out. There are pros/cons to both approaches (full vs split) where you balance bandwidth, VPN overhead, latencies, and security and this decision is specific to the requirements.
 

Xelas

Ars Praefectus
5,444
Subscriptor++
I can't remember what it was but I was shocked the other day to find some pretty mainstream product line that had zero IPv6 support at all. Wish I could remember what it was now. It was like, no... really?!
There are a LOT of hotel networks, public Wi-Fi networks, office/corp networks, etc and large ISPs that don't yet have IPv6. It's nowhere nearly as ubiquitous as some people seem to think, not even close.
 
  • Like
Reactions: Tobold