Starlink and remote viewing.

[zac115 5]

Because of where I live I am currently forced to use starlink to get reliable internet access. The downside of this is that it uses ipv6 and that the router inherently has no ability to do any kind of port forwarding.

Here is the research that I currently done on trying to get my server back on the network and available for remote viewing.

Recommended Cloudflare Settings - And face value this one seemed promising but from everything I've read in the post itself it seems that this is no longer an option. Please correct me if I'm wrong.

Emby + Domain Name? - This is another one I was looking at although I'm not exactly sure if this is going to help either. Mainly being because it still requires ports of which my understanding is still the starlink writer would not be able to do.

Emby not working with starlink - This is one I actually did do. I purchased a private internet access VPN with a dedicated IP address and set up the port forwarding. This option worked for about three or four hours. And then it just kind of crapped out. It seems that the port changed at some point during the night. And now I can't get it back up and running again. Anytime I update the port number and then try to log into the server, remotely, it simply says that the server took too long to respond. And quite honestly this isn't tenable if this is the way it's going to perform by changing the port number every once in awhile.

Going back to the topic of IPv6 I do actually have a router that has the ability to turn on IPv6 settings. Although I'm unsure if this is going to fix my issue. Currently the starlink router is in bypass mode and an external router is plugged into it. Is this also an option that I can use? I'm not exactly versed in ipv6 as I'm currently really just learning about it. If this is an option please tell me.

The other bit of research that I've done is looking into cloudflare's zero trust tunnel. Once more I'm not exactly versed in this and I'm unsure if this will actually even help me in my endeavor of getting my server back on the network.

With that all being said what exactly are my options on my end goal. I'm not adverse of spending a little money here and there to try to get back on the network but I'm not wanting to spend a bunch of money on it. Any help would greatly be appreciated.

And please dispel any of my misconceptions. I truly am an apprentice whenever it comes to this I'm not a master.

Edited June 1, 2025 by zac115

[Luke 42078]

Hi, if you can't port forward then how will the remote connection work? You're going to need a VPN or TailScale, no?

[Gilgamesh_48 1240]

I do not know exactly how Starlink works but being satellite based probably means that is has rather large lag times and that, I think, would be problematic for streaming at best. 

I know other satellite based internet connections do not work at all well for streaming.   

[Baenwort 118]

48 minutes ago, Gilgamesh_48 said:

I do not know exactly how Starlink works but being satellite based probably means that is has rather large lag times and that, I think, would be problematic for streaming at best. 

I know other satellite based internet connections do not work at all well for streaming.   

Starlink, unlike other Sat connections, is not high latency due to how low the satellites are. We use it at work and get 80-150ms ping times, which will stream video fine.

Not sure how to help solve the forwarding issue for certain (Work doesn't use Emby) but I can say that VPNs with port forwarding can work via Starlink. I would look into Tailscale or one of the easier Wireguard setups to have your client device phone home to the server your Emby is running on.

 

[zac115 5]

49 minutes ago, Baenwort said:

Starlink, unlike other Sat connections, is not high latency due to how low the satellites are. We use it at work and get 80-150ms ping times, which will stream video fine.

Not sure how to help solve the forwarding issue for certain (Work doesn't use Emby) but I can say that VPNs with port forwarding can work via Starlink. I would look into Tailscale or one of the easier Wireguard setups to have your client device phone home to the server your Emby is running on.

 

oh Wireguard? a server that i rent comes with Wireguard preset up. would that work and if so what would i need to do? something like how i set up PIA?

[vaise 340]

A cloudflare tunnel will get this working - but depending on the amount of data you will be transferring will decide if you get banned or not due to the rules.  If thats even a thing anymore.

[vaise 340]

Of, if you are a bit technical, then a VPS and a pangolin config will be your own private tunnel.

Things like tailscale and VPN are great if its just you, or you can control the remote clients.

[zac115 5]

1 hour ago, Gilgamesh_48 said:

I do not know exactly how Starlink works but being satellite based probably means that is has rather large lag times and that, I think, would be problematic for streaming at best. 

I know other satellite based internet connections do not work at all well for streaming.   

starlink has been working just fine for me. i can even play online game with it. like a 40ms latency. not too bad for sat. here is the latest latency test that the sat ran its self.  

[GrimReaper 4740]

6 hours ago, zac115 said:

Emby not working with starlink - This is one I actually did do. I purchased a private internet access VPN with a dedicated IP address and set up the port forwarding. This option worked for about three or four hours. And then it just kind of crapped out. It seems that the port changed at some point during the night.

So why don't you just subscribe with a VPN provider that does static port port forwarding? 

[zac115 5]

42 minutes ago, GrimReaper said:

So why don't you just subscribe with a VPN provider that does static port port forwarding? 

i used this to find what vpn i was going to use. but the post nor the website for PIA said anything about the ports swapping. so if you have more info then me in terms of what service has static ports i would really like to know as i could not find that info. its posable that im looking in the wrong places.

[GrimReaper 4740]

8 minutes ago, zac115 said:

if you have more info then me in terms of what service has static ports i would really like to know as i could not find that info.

Try this one (there's a three-day subscription), make sure the port you select is on Pool 1, there are usually several open there always.

Edited June 2, 2025 by GrimReaper
Screenshots

[zac115 5]

20 minutes ago, GrimReaper said:

Try this one (there's a three-day subscription), make sure the port you select is on Pool 1, there are usually several open there always.

sweet i will try this when i get back from work. if it does work then i will make this as the solution. 

[Thidsa 44]

Why all this VPN suggestions? If his starlink router is in bypass mode and he has connected a second router, he could just manage the ports on the second router.

[zac115 5]

22 hours ago, Thidsa said:

Why all this VPN suggestions? If his starlink router is in bypass mode and he has connected a second router, he could just manage the ports on the second router.

So to set up the port forwarding rules and I should be good? If that's the case why didn't emby do the automatically as it normally does. Under normal circumstances and with normal internet it usually grabs that information and sets itself instantaneously. But from what you're saying is I need to set up the rule if I'm understanding that correctly. If that's the case I'll go ahead and try that when I get home.

I should also note that the router that I have connected to the starlink router is also IPv6 compatible. So I could also try to put that in IPv6 mode and see if emby server will work then. I haven't tried that yet.

Edited June 3, 2025 by zac115

[Luke 42078]

Please let us know how that goes. Thanks.

[Thidsa 44]

4 hours ago, zac115 said:

So to set up the port forwarding rules and I should be good? If that's the case why didn't emby do the automatically as it normally does. Under normal circumstances and with normal internet it usually grabs that information and sets itself instantaneously. But from what you're saying is I need to set up the rule if I'm understanding that correctly. If that's the case I'll go ahead and try that when I get home.

No reason to assume otherwise, as long as Starlinks bypass is the same as bridged. Why Emby didnt do it automatically i dont know, i wouldnt trust it to anyway. 

Edited June 3, 2025 by Thidsa

[Apotropaic 41]

@zac115If Starlink is using ipv6 have they not given you a pool of global addresses as a /64 prefix pool. So you could address your emby server with one of those addresses which would be internet accessible and no NAT would required.

You’d have to ensure your emby host has a robust firewall as all ports would be reachable from the internet and as I understand the starlink doesn’t provide a firewall.

I’ve have another go at the starlink documentation tomorrow.

[zac115 5]

On 6/2/2025 at 11:56 PM, Luke said:

Please let us know how that goes. Thanks.

sorry for the delay. i was told i would be going back home yesterday but one of the guys on my team had a heart attack and our team lead told us we will be going home next week. sorry for not replying. 

 

On 6/3/2025 at 4:13 AM, Thidsa said:

No reason to assume otherwise, as long as Starlinks bypass is the same as bridged. Why Emby didnt do it automatically i dont know, i wouldnt trust it to anyway. 

ok sounds good. i think while im stuck i hit up the CS of starlink and see if i can get more info out of them on how the router works

 

23 hours ago, Apotropaic said:

@zac115If Starlink is using ipv6 have they not given you a pool of global addresses as a /64 prefix pool. So you could address your emby server with one of those addresses which would be internet accessible and no NAT would required.

You’d have to ensure your emby host has a robust firewall as all ports would be reachable from the internet and as I understand the starlink doesn’t provide a firewall.

I’ve have another go at the starlink documentation tomorrow.

im not sure i understand? how would i know if they gave me a pool of global addresses? 

> You’d have to ensure your emby host has a robust firewall as all ports would be reachable from the internet and as I understand the starlink doesn’t provide a firewall.
well my server is running on windows (planing on moving to something like docker later when i can build on new hardware) so i would need to config the pc's firewall?

[Apotropaic 41]

11 hours ago, zac115 said:

im not sure i understand? how would i know if they gave me a pool of global addresses? 

> You’d have to ensure your emby host has a robust firewall as all ports would be reachable from the internet and as I understand the starlink doesn’t provide a firewall.
well my server is running on windows (planing on moving to something like docker later when i can build on new hardware) so i would need to config the pc's firewall?

So...by default Starlink gives you a private IPv4 address but you can request a public internet routable IPv4 (it may just be limited to business customers). But this won't solve your issues as Starlink routers do not allow you to port forward. I imagine when you set up your VPN it was outbound from within your starlinked network but because they are using Carrier Grade NAT this will break every so often and there's not much you can do.

What they do support is if you have your own router and bypass the Starlink one, your own router can request a pool of internet routable IPv6 IPs, these can be assigned to your emby server and you can control your own routers firewall to allow traffic in/out. The benefit of doing this with IPv6 over IPv4 is that they won't change.

https://starlink-enterprise-guide.readme.io/docs/ip-addresses

https://www.starlink.com/gb/support/article/1192f3ef-2a17-31d9-261a-a59d215629f4

These links have the info I was looking at, the key is setting up your own router to request IPv6 using SLAAC/DHCPv6-PD, once your router gets the network range for it's interface you can allocate devices with Ip's from that range.

Hope that helps your googling

 

[zac115 5]

On 6/2/2025 at 11:56 PM, Luke said:

Please let us know how that goes. Thanks.

my boss is sending us home ahead of the coworker that had the heart attack. i ill be home tomorrow morning to try out all the stuff suggested here.

ill report back one i have tried them.