# Seamless Inbound Remote Access via Starlink - Link: https://www.agilicus.com/topics/remote-access-over-starlink/ - Published: 2020-12-24T14:35:40+00:00 - Author: Don Bowman 1. [Home](https://www.agilicus.com/) 2. [Key Topics](https://www.agilicus.com/topics/) 3. Seamless Inbound Remote Access via Starlink # Seamless Inbound Remote Access via Starlink Enable secure, remote access to your Starlink network connected systems including** cameras**, routers, **NAS**, remote desktops, building management systems, and even industrial control system network.  Reduce the time, cost, and complexity of connecting with precise control over user access and permissions. No public IP, no VPN, no port-forwarding needed. [CONTACT 📧](https://www.agilicus.com/contact-us/) [TRY NOW](https://www.agilicus.com/anyx-guide/signup/) [WHITE PAPER 📁](https://www.agilicus.com/white-papers/starlink-port-forwarding/) ![cyber-insurance-compliance](https://www.agilicus.com/www/69d5e171-hero.svg) ## Secure Inbound Access over Starlink with Agilicus AnyX ![secure-remote-desktop-access](https://www.agilicus.com/www/aa9ed1f8-identity-access_rdp. svg) The lowest cost tier of Starlink doesn’t allow inbound VPN connections, port-forwarding, or any type of [DMZ](https://en.wikipedia.org/wiki/DMZ_(computing) scheme as it uses IPv4 and Carrier-Grade NAT ([CGNAT](https://en.wikipedia.org/wiki/Carrier-grade_NAT)), meaning there are a limited number of public IP addresses ([**read more**](https://www.agilicus.com/starlink-bond-zero-trust/)). Conventional workarounds for these connectivity constraints, such as a reverse VPN, are complex, expensive, and could introduce security risks. [Read more](https://www.agilicus.com/white-papers/starlink-port-forwarding/) about how Agilicus AnyX achieves similar objectives of port-forwarding (more securely) with Starlink. The easiest way to achieve remote connectivity to Starlink connected systems is through Agilicus AnyX. Security camera? HomeAssistant web? Remote Desktop? [Industrial Control System](https://en.wikipedia.org/wiki/Industrial_control_system)? [Synology NAS](https://www.agilicus.com/case-studies/starlink-and-synology-nas/)? [CONTACT](https://www.agilicus.com/contact-us/) ## FAQ Are you affiliated with SpaceX / Starlink?No, we are not in anyway affiliated with SpaceX / Starlink. No, we are not in anyway affiliated with SpaceX / Starlink. [Permalink](https://www.agilicus.com/faq/are-you-affiliated-with-spacex-starlink/) Can I run the connector on a Mac?Agilicus connector on an Apple Mac. There is no Apple server, so this is usually not needed, however, can be run under Docker. No, Apple does not provide a server platform since the XServe. The connector is supported on Linux, Windows, various embedded platfor[ms like Synology, pfSense, Mikrotik, etc. To run the connector on an Apple Mac, you may use the Docker instructions (see ](https://docs.docker.com/desktop/install/mac-install/) Install Docker Desktop on Mac). If you are an enthusiast, consider running the connector under Docker on your Mac. [Permalink](https://www.agilicus.com/faq/can-i-run-the-connector-on-a-mac/) Can you run security cameras off of Starlink?Can you use a security camera through Starlinks CGNAT? Yes via Agilicus AnyX, an FAQ pointing to some resources. Yes, via Agilicus AnyX, we can help you with the carrier NAT (CGNAT) issue you might be hitting to access your security camera. See “[Seamless Inbound Remote Access via Starlin](https://www.agilicus.com/topics/remote-access-over-starlink/) k”, “[Starlink Port Forwarding](https://www.agilicus.com/white-papers/starlink-port-forwarding/)“ See [Will this work with my security camera?](https://www.agilicus.com/faq/will-this-work-with-my-security-camera/) and “[Network Video Recorder Setup](https://www.agilicus.com/starlink-resources/nvr-setup/)” and “[Synology Surveillance Station](https://www.agilicus.com/starlink-resources/synology-surveillance-station/)“ See also “[3-Steps to Enable Inbound Remote Access: Starlink Remote Cameras](https://www.agilicus.com/case-studies/starlink-remote-cameras-enable-inbound-remote-access/)“ [Permalink](https://www.agilicus.com/faq/can-you-run-security-cameras-off-of-starlink/) Do I need to install any Hardware?No. The Agilicus AnyX is a SaaS solution, cloud based. In order to work with your Starlink network, you will install a small piece of software on a single device you already own. No. The Agilicus AnyX is a SaaS solution, cloud based. In order to work with your Starlink network, you will install a small piece of software on a single device you already own. [Permalink](https://www.agilicus.com/faq/do-i-need-to-install-any-hardware/) Do I need to install any Software?The Agilicus AnyX platform is almost entirely cloud SaaS. In order to work with your Starlink network, you will be installing the Agilicus Connector on a device you already have. This software will facilitate the incoming network traffic. The Agilicus AnyX platform is almost entirely cloud SaaS. In order to work with your Starlink network, you will be installing the Agilicus [Connector](https://www.agilicus.com/anyx-guide/agilicus-connector/) on a device you already have. This software will facilitate the incoming network traffic. [Permalink](https://www.agilicus.com/faq/do-i-need-to-install-any-software/) Does the end-user profile and launcher support MacOS?Yes, the end user can use the web-based profile as well as the desktop based launcher. The desktop-based launcher requires OSX 11 (last supported version by Apple) or later. Yes, the end user can use the web-based profile as well as the desktop based launcher. The desktop-based launcher requires OSX 11 (last supported version by Apple) or later. [Permalink](https://www.agilicus.com/faq/does-the-end-user-profile-and-launcher-support-macos/) How can this work? I thought Starlink used CGNAT with no public IP?You can see an animated diagram on the Agilicus Connector page. But in general, this works the same way e.g. a Google Nest thermostat works. Something inside your home network makes a persistent outbound connection to our cloud. When you are away, you will connect to our cloud, it will confirm your identity, and bridge You can see an animated diagram on the Agilicus Connector [page](https://www.agilicus.com/anyx-guide/agilicus-connector/). But in general, this works the same way e.g. a Google Nest thermostat works. Something inside your home network makes a persistent outbound connection to our cloud. When you are away, you will connect to our cloud, it will confirm your identity, and bridge you across these two outbound connections. [Permalink](https://www.agilicus.com/faq/how-can-this-work-i-thought-starlink-used-cgnat-with-no-public-ip/) How is this secure?Agilicus AnyX is an implementation of Zero Trust, a security best practice. You will use single-sign-on authentication via your Google or Microsoft account (there are no passwords). You can optionally enable multi-factor authentication. All traffic is encrypted with TLS 1.3 HTTPS. You can configure firewall rules in this system for e.g. geo-ip based access, as Agilicus AnyX is an implementation of [Zero Trust](https://csrc.nist.gov/pubs/sp/800/207/final), a security best practice. You will use single-sign-on authentication via your Google or Microsoft account (there are no passwords). You can optionally enable multi-factor authentication. All traffic is encrypted with TLS 1.3 HTTPS. You can configure firewall rules in this system for e.g. geo-ip based access, as well as other more complex rules. You will have a full audit trail of who used what when. [Permalink](https://www.agilicus.com/faq/how-is-this-secure/) How much will this cost for just me and one other user?You can see the pricing here. If you have only 2 users there will be no ongoing cost. You can see the pricing [here](https://www.agilicus.com/pricing/). If you have only 2 users there will be no ongoing cost. [Permalink](https://www.agilicus.com/faq/how-much-will-this-cost-for-just-me-and-one-other-user/) I’m not sure, can we discuss?Certainly! Please either open the chat icon in the lower-left, fill in the form, or email us (info @ agilicus.com) and our team would be happy to discuss further with you. Certainly! Please either open the chat icon in the lower-left, fill in the [form](https://www.agilicus.com/contact-us/), or email us (info @ agilicus.com) and our team would be happy to discuss further with you. [Permalink](https://www.agilicus.com/faq/im-not-sure-can-we-discuss/) Is this a good product for a consumer environment?Agilicus AnyX is an industrial, business product. The large set of features may make it too complex for a consumer environment. Agilicus AnyX is an industrial, business product. The large set of features may make it too complex for a consumer environment. [Permalink](https://www.agilicus.com/faq/is-this-a-good-product-for-a-consumer-environment/) Is this a good solution for me?Agilicus AnyX is an excellent solution for web applications, for SSH (e.g. command line access), for a Share (e.g. file access), and for remote desktop (Microsoft Remote Desktop, VNC). If you have complex networking needs that require layer-3 routing this is probably not the right solution for you. Agilicus AnyX is an excellent solution for web applications, for SSH (e.g. command line access), for a Share (e.g. file access), and for remote desktop (Microsoft Remote Desktop, VNC). If you have complex networking needs that require layer-3 routing this is probably not the right solution for you. [Permalink](https://www.agilicus.com/faq/is-this-a-good-solution-for-me/) What type of device can I install the Agilicus Connector on?The Agilicus Connector supports many device types. Windows, Linux, OpenWRT, Synology. You can see more information on the product guide page. In general, the machine will need about 100MB of storage, 20MB of ram to operate. It is very unlikely the Agilicus Connector will install on your camera. The Agilicus Connector supports many device types. Windows, Linux, OpenWRT, Synology. You can see more information on the product guide [page](https://www.agilicus.com/anyx-guide/agilicus-connector/). In general, the machine will need about 100MB of storage, 20MB of ram to operate. It is very unlikely the Agilicus Connector will install on your camera. [Permalink](https://www.agilicus.com/faq/what-type-of-device-can-i-install-the-agilicus-connector-on/) Will this work with RTSP? Or only HTTP?We do not recommend using the RTSP feature of your camera with Agilicus AnyX. Instead we recommend using the HTTP interface. We do not recommend using the RTSP feature of your camera with Agilicus AnyX. Instead we recommend using the HTTP interface. [Permalink](https://www.agilicus.com/faq/will-this-work-with-rtsp-or-only-http/) Will this work with my security camera?Many security cameras have a web interface. If you have a URL you can use from your browser at home, then you can use it while away with Agilicus AnyX. In most cases, if you have an NVR, this will work. If your camera supports ONVIF, we have specific support for some NVR with that. Many security cameras have a web interface. If you have a URL you can use from your browser at home, then you can use it while away with Agilicus AnyX. In most cases, if you have an [NVR](https://www.agilicus.com/starlink-resources/nvr-setup/), this will work. If your camera supports ONVIF, we have specific support for some NVR with that. Many people use [Synology](https://www.agilicus.com/starlink-resources/synology-surveillance-station/) Surveillance Station or [Shinobi](https://www.agilicus.com/starlink-resources/shinobi/) NVR with Agilicus AnyX. Sample setups for generic ONVIF cameras are [here](https://www.agilicus.com/starlink-resources/camera-setup-panoraxy-bf-bk04/). A sample setup for an older Hikvision is [here](https://www.agilicus.com/anyx-guide/hikvision-ds-2cd3132-i/). [Permalink](https://www.agilicus.com/faq/will-this-work-with-my-security-camera/) [⌊role-based-access-controls⌉⌊role-based-access-controls⌉[ **Pair Users with Resources.** Create user-resource pairings to enable secure remote access to specific systems within your Starlink network. [⌊remote-connectivity⌉⌊remote-connectivity⌉[ **Access Anywhere. No Client. No VPN. ** Seamlessly deploy in minutes not days. No new hardware, clients, or network changes are required. [⌊cyber-security-policies⌉⌊cyber-security-policies⌉[ **Outbound Only Connection.** An outbound only connection from your Starlink network means zero unauthorised traffic reaches your systems. [⌊identity-aware-web-application-firewall⌉⌊identity-aware-web-application-firewall⌉[ **Enforce Security Controls for Access.** Implement security controls including multi-factor authentication, end-to-end encryption, detailed auditing and segmentation of users, resources, and systems. ![starlink-satellite-network-remote-access](https://www.agilicus.com/www/81fbf558- satellite-9966.svg) ## How are Businesses Using Starlink Operated by SpaceX, Starlink provides high-speed, low-latency satellite internet coverage in 40 countries, empowering previously disconnected regions with internet access. Remote and rural businesses around the world have been able to connect to the internet and adopt new technologies that improve efficiency and operations. Remote pumping site? Satellite office without local IT support staff? Lights out remote operation with building management ([BMS](https://en.wikipedia.org/wiki/Building_automation))? Each of these require a simple way to get inbound connectivity through the satellite gateway. ## Starlink Remote Access Challenge As Starlink currently uses IPv4, there are less IP addresses available. Multiple Starlink subscribers could be sharing the same public IP address rendering traditional remote access tools like the VPN ineffective or overly complex. [⌊shared-ip-starlink-access-issue⌉⌊shared-ip-starlink-access-issue⌉[ **Unable to connect via IPv4.** The basic Starlink subscriber tier uses IPv4 and has a limited number of public IP addresses, achieved through a process known as Carrier-Grade NAT (CGNAT). [⌊starlink-access-no-port-forwarding⌉⌊starlink-access-no-port-forwarding⌉[ **No port forwarding due to [CGNAT](https://en.wikipedia.org/wiki/Carrier-grade_NAT).** Port forwarding is complicated as IPv4 via CGNAT prevents traffic from properly rerouting to a specific device/machine in the network [⌊starlink-remote-access-no-vpn⌉⌊starlink-remote-access-no-vpn⌉[ **No port forward prevents VPN access.** Due to the limited number of available IP addresses and CGNAT and the inability to properly reroute traffic, it’s not possible to establish a standard VPN connection to your systems via Starlink. [⌊starlink-remote-access-security-risks⌉⌊starlink-remote-access-security-risks⌉[ **Traditional tools require a risky, always on connection.** Traditional remote access tools require your organisation to accept the risks of overprivileged, always on connections to your systems. ## What is Agilicus AnyX Quickly and easily expand the reach of company resources without compromising on security, requiring a VPN, or juggling network changes. Agilicus AnyX is a Zero Trust Network Access platform that offers a secure alternative to perimeter-based network solutions and is suitable for organisations of all types and sizes.  Enable simple, secure, and auditable access to shared resources with precise control of permissions for any authorised user with a low cost platform that scales with your organisation. ## How to Enable Remote Access over Starlink Without a routable IP address, using an inbound VPN is not an option for remotely connecting to systems over starlink. By using the Agilicus Connector on resources within your network, an outbound only connection to the Agilicus cloud can be established. Each user who requires access must verify their identity which is done via single sign-on and multi-factor authentication (OpenID connect + upstream identity providers). Direct access is achieved over HTTPS in any browser with a URL and a connection is only established once a user has verified their identity and has the required permissions for access. ### Enhanced Security Through Zero Trust Agilicus AnyX enables secure, identity-based, auditable access to specific resources with precise control of user permissions, while delivering a frictionless end-user experience. [⌊secure-access⌉⌊secure-access⌉[ **Frictionless End-User Experience** Single sign-on and multi-factor authentication provide a seamless, intuitive login flow. [⌊role-based-access-controls⌉⌊role-based-access-controls⌉[ **Simplified User Management** Centrally manage users and permissions through a single administrator portal. [⌊secure-remote-access-any-device⌉⌊secure-remote-access-any-device⌉[ **Any User. Any Device. Anywhere.** Remote access over your Starlink network from anywhere, using any device. There’s no need to setup a reverse VPN and worrying about Dynamic DNS, open ports, or setting up a DMZ. Remote access over Starlink through Agilicus AnyX not only makes it easy to connect to your systems, it empowers your organisation with access controls that keep your critical systems secure. [TRY NOW](https://admin.agilicus.cloud/signup?flush=1) [HOW IT WORKS](https://www.agilicus.com/white-papers/starlink-port-forwarding/) [SYNOLOGY CASE STUDY](https://www.agilicus.com/case-studies/starlink-and-synology-nas/) ## Get in Touch – Learn How to Remotely Access Systems over Starlink Get in touch with our team to get started with Agilicus AnyX to enable secure remote connectivity to resources within your Starlink network.