# Starlink and Synology NAS: How to Enable Inbound Remote Access - Link: https://www.agilicus.com/case-study/starlink-and-synology-nas/ - Published: 2023-07-16T00:28:23+00:00 - Author: Don Bowman 1. [Home](https://www.agilicus.com/) 2. Starlink and Synology NAS: How to Enable Inbound Remote Access ![sat-nas](https://www.agilicus.com/www/d4e0af65-sat-nas.svg) **How to Enable Inbound Remote Access** --- ## **Starlink and Synology NAS** Learn how Agilicus AnyX can enable inbound remote access to environments with no public IP (Starlink, Mobile, etc), and how this can work ideally with a [Synology](https://www.synology.com/en-ca) NAS. [See](https://www.agilicus.com/topics/remote-access-over-starlink/) a more general overview of the problem, and an FAQ. Or, learn more about how to use with [Synology Surveillance Station](https://www.agilicus.com/starlink-resources/synology-surveillance-station/) with your cameras. [CONTACT](https://www.agilicus.com/contact-us/) ## Overview ![Starlink and Synology NAS Integration: Securely access your Synology NAS from anywhere using Starlink internet with Agilicus AnyAccess. High-speed, low-latency connectivity for remote data access and collaboration. Learn how to set up secure remote access to your Synology NAS with Starlink.](https://www.agilicus.com/www/ 2a796b4a-image.png) A common home or small office environment is a Synology NAS, and Starlink for Internet access. The only downside? If you are not at home, on your home network, you cannot access your files or access other services on the NAS (or through it). Or can you? In [Starlink Port Forwarding](https://www.agilicus.com/white-papers/starlink-port-forwarding/) we discussed how Carrier-Grade NAT (CGNAT) works, and how Agilicus AnyX can be used to connect through the Starlink into an internal environment, even though there is no public IP. In this article we describe how a user setup their Starlink and Synology with Agilicus AnyX, achieving anywhere secure access, from any device, despite the CGNAT limitation. They can access their files from anywhere, including their home surveillance video through Starlink and Synology NAS. ### Data Flow ![SSH Animated Data Flow](https://www.agilicus.com/www/d6c678de-ssh-data-flow.svg) The high-level data flow is shown at the right. A managed SaaS system (Agilicus AnyX) acts as the intermediary. A program installed on the Synology (Agilicus Connector) makes an outbound connection, thus overcoming the limitation of the NAT. User-based authentication via Single-Sign-On and End-To-End Encryption round out the feature set of getting the User to their Data without caring about the network. ### The Setup: Starlink and Synology NAS The setup is super simple. Its all self-served.You can view the [pricing](https://www.agilicus.com/pricing/) and [Signup](https://www.agilicus.com/anyx-guide/signup/) and try along. The high- level steps to configure Starlink and Synology NAS are: #### 1. Signup. Create your Account The signup process asks you what you want to call your account. You then have the option of using your own domain-name (so your share and web-applications will be something like https://my-app.mydomain), or one of ours. The [Signup](https://admin.agilicus.cloud/signup?flush=1&_gl=1*1s408gc*_gcl_au*MzI4NjUxODQ3LjE2ODcxMDg1MzI.*_ga*MTU3NTIxMDM5MS4xNjg3MTA4NTMy*_ga_YFMFHD6DRB*MTY4OTQ2NDI1My43NC4xLjE2ODk0NjYwNjMuMC4wLjA.*_fplc*WTRKSkg2Umo5bmNLaVVlSlExaDdNTUtBbmJNJTJGNjFoZE1hd2pUR2tWcTZKZUdwRXpQOUYxb0VzR0Q2cUd5bnQ5aVJNcTFkZVBwN1lPUERiWlNyZmk3ckEwbDFvenBKazAlMkZkb2g1bDZBUENUZzVGZ3VkSEREYjM5STNHWWNZUSUzRCUzRA..) process is very simple, detailed instructions are [here](https://www.agilicus.com/anyx-guide/signup/). #### 2. Install. Install the Connector on the Synology In the Agilicus Admin UI, create a Connector. Give it a name (e.g. my-nas). It will give you a command line to paste into the Synology. You are now done. For more information see the [Synology Connector Install](https://www.agilicus.com/anyx-guide/synology-connector-install/) instructions. #### 3. Configure. Create a Share At its heart the Synology is a file server. So naturally the first thing to try is a Share. Detailed instructions [here](https://www.agilicus.com/anyx-guide/product-guide-shares/). You will be able to use this share via a web interface ([Profile](https://www.agilicus.com/anyx-guide/profile/)), or mount it directly on your desktop (the S: drive). #### 4. Configure. Create a Web Application The Synology has a web interface. Create a [web application](https://www.agilicus.com/anyx-guide/agilicus-connector-nanopi-r5s/) in Agilicus Admin interface, referencing ‘127.0.0.1’ as the ‘upstream host’ and port 5000 (this is the internal port of the synology for admin). This will proxy you, after proving your identity, to the Synology NAS. From anywhere. #### 5. Explore Open https://profile.__MYDOMAIN__, sign in. Try your share. Try the admin interface of the Synology. Now, do this from a network that is not at your home (e.g. LTE, a Cafe). Observe it works without regard to where you are. No VPN. Feel free to try additional services, e.g. a [VNC](https://www.agilicus.com/anyx-guide/vnc-desktop/) or [RDP](https://www.agilicus.com/anyx-guide/zero-trust-desktop-access/) remote desktop to your Mac, Linux, Windows machine. Connect to your home Building Management System. [SSH](https://www.agilicus.com/anyx-guide/zero-trust-ssh-access/) to the synology (web or command line) from remote, whatever works for you. ## FAQ Are you affiliated with SpaceX / Starlink?No, we are not in anyway affiliated with SpaceX / Starlink. No, we are not in anyway affiliated with SpaceX / Starlink. [Permalink](https://www.agilicus.com/faq/are-you-affiliated-with-spacex-starlink/) Can I run the connector on a Mac?Agilicus connector on an Apple Mac. There is no Apple server, so this is usually not needed, however, can be run under Docker. No, Apple does not provide a server platform since the XServe. The connector is supported on Linux, Windows, various embedded platfor[ms like Synology, pfSense, Mikrotik, etc. To run the connector on an Apple Mac, you may use the Docker instructions (see ](https://docs.docker.com/desktop/install/mac-install/) Install Docker Desktop on Mac). If you are an enthusiast, consider running the connector under Docker on your Mac. [Permalink](https://www.agilicus.com/faq/can-i-run-the-connector-on-a-mac/) Can you run security cameras off of Starlink?Can you use a security camera through Starlinks CGNAT? Yes via Agilicus AnyX, an FAQ pointing to some resources. Yes, via Agilicus AnyX, we can help you with the carrier NAT (CGNAT) issue you might be hitting to access your security camera. See “[Seamless Inbound Remote Access via Starlin](https://www.agilicus.com/topics/remote-access-over-starlink/) k”, “[Starlink Port Forwarding](https://www.agilicus.com/white-papers/starlink-port-forwarding/)“ See [Will this work with my security camera?](https://www.agilicus.com/faq/will-this-work-with-my-security-camera/) and “[Network Video Recorder Setup](https://www.agilicus.com/starlink-resources/nvr-setup/)” and “[Synology Surveillance Station](https://www.agilicus.com/starlink-resources/synology-surveillance-station/)“ See also “[3-Steps to Enable Inbound Remote Access: Starlink Remote Cameras](https://www.agilicus.com/case-studies/starlink-remote-cameras-enable-inbound-remote-access/)“ [Permalink](https://www.agilicus.com/faq/can-you-run-security-cameras-off-of-starlink/) Do I need to install any Hardware?No. The Agilicus AnyX is a SaaS solution, cloud based. In order to work with your Starlink network, you will install a small piece of software on a single device you already own. No. The Agilicus AnyX is a SaaS solution, cloud based. In order to work with your Starlink network, you will install a small piece of software on a single device you already own. [Permalink](https://www.agilicus.com/faq/do-i-need-to-install-any-hardware/) Do I need to install any Software?The Agilicus AnyX platform is almost entirely cloud SaaS. In order to work with your Starlink network, you will be installing the Agilicus Connector on a device you already have. This software will facilitate the incoming network traffic. The Agilicus AnyX platform is almost entirely cloud SaaS. In order to work with your Starlink network, you will be installing the Agilicus [Connector](https://www.agilicus.com/anyx-guide/agilicus-connector/) on a device you already have. This software will facilitate the incoming network traffic. [Permalink](https://www.agilicus.com/faq/do-i-need-to-install-any-software/) Does the end-user profile and launcher support MacOS?Yes, the end user can use the web-based profile as well as the desktop based launcher. The desktop-based launcher requires OSX 11 (last supported version by Apple) or later. Yes, the end user can use the web-based profile as well as the desktop based launcher. The desktop-based launcher requires OSX 11 (last supported version by Apple) or later. [Permalink](https://www.agilicus.com/faq/does-the-end-user-profile-and-launcher-support-macos/) How can this work? I thought Starlink used CGNAT with no public IP?You can see an animated diagram on the Agilicus Connector page. But in general, this works the same way e.g. a Google Nest thermostat works. Something inside your home network makes a persistent outbound connection to our cloud. When you are away, you will connect to our cloud, it will confirm your identity, and bridge You can see an animated diagram on the Agilicus Connector [page](https://www.agilicus.com/anyx-guide/agilicus-connector/). But in general, this works the same way e.g. a Google Nest thermostat works. Something inside your home network makes a persistent outbound connection to our cloud. When you are away, you will connect to our cloud, it will confirm your identity, and bridge you across these two outbound connections. [Permalink](https://www.agilicus.com/faq/how-can-this-work-i-thought-starlink-used-cgnat-with-no-public-ip/) How is this secure?Agilicus AnyX is an implementation of Zero Trust, a security best practice. You will use single-sign-on authentication via your Google or Microsoft account (there are no passwords). You can optionally enable multi-factor authentication. All traffic is encrypted with TLS 1.3 HTTPS. You can configure firewall rules in this system for e.g. geo-ip based access, as Agilicus AnyX is an implementation of [Zero Trust](https://csrc.nist.gov/pubs/sp/800/207/final), a security best practice. You will use single-sign-on authentication via your Google or Microsoft account (there are no passwords). You can optionally enable multi-factor authentication. All traffic is encrypted with TLS 1.3 HTTPS. You can configure firewall rules in this system for e.g. geo-ip based access, as well as other more complex rules. You will have a full audit trail of who used what when. [Permalink](https://www.agilicus.com/faq/how-is-this-secure/) How much will this cost for just me and one other user?You can see the pricing here. If you have only 2 users there will be no ongoing cost. You can see the pricing [here](https://www.agilicus.com/pricing/). If you have only 2 users there will be no ongoing cost. [Permalink](https://www.agilicus.com/faq/how-much-will-this-cost-for-just-me-and-one-other-user/) I’m not sure, can we discuss?Certainly! Please either open the chat icon in the lower-left, fill in the form, or email us (info @ agilicus.com) and our team would be happy to discuss further with you. Certainly! Please either open the chat icon in the lower-left, fill in the [form](https://www.agilicus.com/contact-us/), or email us (info @ agilicus.com) and our team would be happy to discuss further with you. [Permalink](https://www.agilicus.com/faq/im-not-sure-can-we-discuss/) Is this a good product for a consumer environment?Agilicus AnyX is an industrial, business product. The large set of features may make it too complex for a consumer environment. Agilicus AnyX is an industrial, business product. The large set of features may make it too complex for a consumer environment. [Permalink](https://www.agilicus.com/faq/is-this-a-good-product-for-a-consumer-environment/) Is this a good solution for me?Agilicus AnyX is an excellent solution for web applications, for SSH (e.g. command line access), for a Share (e.g. file access), and for remote desktop (Microsoft Remote Desktop, VNC). If you have complex networking needs that require layer-3 routing this is probably not the right solution for you. Agilicus AnyX is an excellent solution for web applications, for SSH (e.g. command line access), for a Share (e.g. file access), and for remote desktop (Microsoft Remote Desktop, VNC). If you have complex networking needs that require layer-3 routing this is probably not the right solution for you. [Permalink](https://www.agilicus.com/faq/is-this-a-good-solution-for-me/) What type of device can I install the Agilicus Connector on?The Agilicus Connector supports many device types. Windows, Linux, OpenWRT, Synology. You can see more information on the product guide page. In general, the machine will need about 100MB of storage, 20MB of ram to operate. It is very unlikely the Agilicus Connector will install on your camera. The Agilicus Connector supports many device types. Windows, Linux, OpenWRT, Synology. You can see more information on the product guide [page](https://www.agilicus.com/anyx-guide/agilicus-connector/). In general, the machine will need about 100MB of storage, 20MB of ram to operate. It is very unlikely the Agilicus Connector will install on your camera. [Permalink](https://www.agilicus.com/faq/what-type-of-device-can-i-install-the-agilicus-connector-on/) Will this work with RTSP? Or only HTTP?We do not recommend using the RTSP feature of your camera with Agilicus AnyX. Instead we recommend using the HTTP interface. We do not recommend using the RTSP feature of your camera with Agilicus AnyX. Instead we recommend using the HTTP interface. [Permalink](https://www.agilicus.com/faq/will-this-work-with-rtsp-or-only-http/) Will this work with my security camera?Many security cameras have a web interface. If you have a URL you can use from your browser at home, then you can use it while away with Agilicus AnyX. In most cases, if you have an NVR, this will work. If your camera supports ONVIF, we have specific support for some NVR with that. Many security cameras have a web interface. If you have a URL you can use from your browser at home, then you can use it while away with Agilicus AnyX. In most cases, if you have an [NVR](https://www.agilicus.com/starlink-resources/nvr-setup/), this will work. If your camera supports ONVIF, we have specific support for some NVR with that. Many people use [Synology](https://www.agilicus.com/starlink-resources/synology-surveillance-station/) Surveillance Station or [Shinobi](https://www.agilicus.com/starlink-resources/shinobi/) NVR with Agilicus AnyX. Sample setups for generic ONVIF cameras are [here](https://www.agilicus.com/starlink-resources/camera-setup-panoraxy-bf-bk04/). A sample setup for an older Hikvision is [here](https://www.agilicus.com/anyx-guide/hikvision-ds-2cd3132-i/). [Permalink](https://www.agilicus.com/faq/will-this-work-with-my-security-camera/) BOOK A MEETING Ready To Learn More? Agilicus AnyX Zero Trust enables any user, on any device, secure connectivity to any resource they need—without a client or VPN. Whether that resource is a web application, a programmable logic controller, or a building management system, Agilicus can secure it with multi-factor authentication while keeping the user experience simple with single sign-on. [BOOK A MEETING](https://www.agilicus.com/book-calendar-meeting/) ![Agilicus AnyX platform logo, horizontal orientation.](https://www.agilicus.com/ www/9f758437-agilicus-logo-horizonta.svg) info@agilicus.com, +1 ‪519 953-4332‬ 300-87 King St W, Kitchener, ON, Canada. N2G 1A7 [⌊partner⌉⌊partner⌉[