Re: [Starlink] starlink and VPN

[Dino Farinacci <farinacci@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 736 bytes --]

What I was trying to test was the anticipation of ISLs so we could try house to house connectivity and measure latency. I had to implement a "decentralized NAT traversal" function inside the LISP module. We did ping, but at the time I think the packets went "up-down-up-down" rather than "up-over-down".

We also ran a IP multicast chat program over it so we were able to head-end-replicate from a starlink source to 2 starlink group members. See attached slide for the solution. 

Full sides at 

  https://www.dropbox.com/scl/fi/9iwsp7rlh3g9mrhbqqul2/ipv6-gaap-over-lisp-ietf-prague.pdf?rlkey=tzz1vwutq8d7vwm1tqzvnbpfv

GAAP was a dynmic decentralized group address alloation protocol that ran in the gaapchat app.

Dino


[-- Attachment #2: PastedGraphic-1.png --]
[-- Type: image/png, Size: 4247921 bytes --]

[-- Attachment #3: Type: text/plain, Size: 3108 bytes --]





> On Jan 22, 2025, at 3:29 PM, Darrell Budic via Starlink <starlink@lists.bufferbloat.net> wrote:
> 
> I’ve run openvpn over starlink on v4 and v6, client on starlink, server in my DC. I have since switched to wireguard and haven’t had any troubles other than having to play some server side tricks to get wireguard to let me bring up more than one tunnel via the starlink CGN. I used some fixed ports and aliased a couple IP addresses and used some snat to force it to see things as different endpoints, otherwise wireguard can’t distinguish the end points on the server. I don’t think openvpn would have that problem.
> 
>  -Darrell
> 
>> On Jan 22, 2025, at 5:25 PM, Dino Farinacci via Starlink <starlink@lists.bufferbloat.net> wrote:
>> 
>> We did test this. IPv6 over LISP. Which means IPv6 EIDs used at transport layer over IPv4 encapsulation. But we did not run  over IPv6 locators.
>> 
>> So what I mean is we tested:
>> 
>> (1) IPv4 overlay on an IPv4 satellite underlay 
>> (2) IPv6 overlay on an IPv4 satellite underlay 
>> 
>> Dino
>> 
>>> On Jan 22, 2025, at 2:53 PM, Dave Taht <dave.taht@gmail.com> wrote:
>>> 
>>> How about openvpn over ipv6?
>>> 
>>> Or with a static ip assigned to the starlink?
>>> 
>>> Wireguard works for me....
>>> 
>>> On Tue, Jan 21, 2025 at 3:02 PM Dino Farinacci via Starlink
>>> <starlink@lists.bufferbloat.net> wrote:
>>>> 
>>>> I haven't tried openvpn but I have done a bunch of testing of LISP over Starlink. If anyone wants details I can point you to an Internet Draft and slides that have been presented a couple of times at IETF.
>>>> 
>>>> Dino
>>>> 
>>>>> On Jan 20, 2025, at 11:25 PM, David Lang via Starlink <starlink@lists.bufferbloat.net> wrote:
>>>>> 
>>>>> has anyone done any work with openvpn over starlink (especially if they got the connectors to completely bypass the router)?
>>>>> 
>>>>> I've got the basic connectivity working, but am having problems trying to get openvpn to work (especially for traffic back through the cgnat to the router on the starlink side)
>>>>> 
>>>>> the logs on the client are reporting link local: (not bound) when trying UDP, when I try TCP (and clamp the mtu low) I can connect from the starlink side (st least sometimes) but cannot get the routing the other way to work
>>>>> 
>>>>> David Lang
>>>>> _______________________________________________
>>>>> Starlink mailing list
>>>>> Starlink@lists.bufferbloat.net
>>>>> https://lists.bufferbloat.net/listinfo/starlink
>>>> 
>>>> _______________________________________________
>>>> Starlink mailing list
>>>> Starlink@lists.bufferbloat.net
>>>> https://lists.bufferbloat.net/listinfo/starlink
>>> 
>>> 
>>> 
>>> -- 
>>> Dave Täht CSO, LibreQos
>> 
>> _______________________________________________
>> Starlink mailing list
>> Starlink@lists.bufferbloat.net
>> https://lists.bufferbloat.net/listinfo/starlink
> 
> _______________________________________________
> Starlink mailing list
> Starlink@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/starlink