[Starlink] starlink and VPN

[Darrell Budic]

I’ve run openvpn over starlink on v4 and v6, client on starlink, server in my DC. I have since switched to wireguard and haven’t had any troubles other than having to play some server side tricks to get wireguard to let me bring up more than one tunnel via the starlink CGN. I used some fixed ports and aliased a couple IP addresses and used some snat to force it to see things as different endpoints, otherwise wireguard can’t distinguish the end points on the server. I don’t think openvpn would have that problem.

  -Darrell

> On Jan 22, 2025, at 5:25 PM, Dino Farinacci via Starlink <starlink at lists.bufferbloat.net> wrote:
> 
> We did test this. IPv6 over LISP. Which means IPv6 EIDs used at transport layer over IPv4 encapsulation. But we did not run  over IPv6 locators.
> 
> So what I mean is we tested:
> 
> (1) IPv4 overlay on an IPv4 satellite underlay 
> (2) IPv6 overlay on an IPv4 satellite underlay 
> 
> Dino
> 
>> On Jan 22, 2025, at 2:53 PM, Dave Taht <dave.taht at gmail.com> wrote:
>> 
>> How about openvpn over ipv6?
>> 
>> Or with a static ip assigned to the starlink?
>> 
>> Wireguard works for me....
>> 
>> On Tue, Jan 21, 2025 at 3:02 PM Dino Farinacci via Starlink
>> <starlink at lists.bufferbloat.net> wrote:
>>> 
>>> I haven't tried openvpn but I have done a bunch of testing of LISP over Starlink. If anyone wants details I can point you to an Internet Draft and slides that have been presented a couple of times at IETF.
>>> 
>>> Dino
>>> 
>>>> On Jan 20, 2025, at 11:25 PM, David Lang via Starlink <starlink at lists.bufferbloat.net> wrote:
>>>> 
>>>> has anyone done any work with openvpn over starlink (especially if they got the connectors to completely bypass the router)?
>>>> 
>>>> I've got the basic connectivity working, but am having problems trying to get openvpn to work (especially for traffic back through the cgnat to the router on the starlink side)
>>>> 
>>>> the logs on the client are reporting link local: (not bound) when trying UDP, when I try TCP (and clamp the mtu low) I can connect from the starlink side (st least sometimes) but cannot get the routing the other way to work
>>>> 
>>>> David Lang
>>>> _______________________________________________
>>>> Starlink mailing list
>>>> Starlink at lists.bufferbloat.net
>>>> https://lists.bufferbloat.net/listinfo/starlink
>>> 
>>> _______________________________________________
>>> Starlink mailing list
>>> Starlink at lists.bufferbloat.net
>>> https://lists.bufferbloat.net/listinfo/starlink
>> 
>> 
>> 
>> -- 
>> Dave Täht CSO, LibreQos
> 
> _______________________________________________
> Starlink mailing list
> Starlink at lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/starlink