Starlink offers two IPv4 policies, "default" and "public". The default IPv4 configuration uses Carrier-Grade Network Address Translation (CGNAT) using private address space from the 100.64.0.0/10 prefix assigned to Starlink clients via DHCP. Network Address Translation (NAT) translates between private and Starlink public IPv4 Addresses. Starlink supports native IPv6 across all Starlink routers, kit versions, and service plans. All IPv6 compatible Starlink router clients are assigned IPv6 addresses.
The Starlink public IPv4 policy is an optional configuration available to Priority and Mobile Priority customers. A public IPv4 is reachable from any device on the Internet and is assigned to Starlink network clients using DHCP. Although truly static IPs are not available, a reservation system retains the public IPv4 address and IPv6 prefix even when the system is off or rebooted. However, relocating the Starlink or software updates may change these addresses. Public IPv4 address are not available for Standard and Mobile plans. The public IPv4 option can be enabled from the account dashboard, see instructions here. Note: Starlink WiFi routers do not support port forwarding or firewall rules for IPv4 or IPv6.
Each Starlink is allocated one IPv4 address via DHCPv4 and a delegated /56 IPv6 prefix via DHCPv6-PD. The "default" IPv4 CGNAT policy does not allow inbound traffic. Customers needing inbound traffic should consider using a third-party router, and if IPv4 inbound traffic is needed, a Starlink service plan with the public IPv4 option.
Outbound ports TCP/25 (SMTP) and TCP/445 (SMB) are blocked for all customers per information security best practices.
As Starlink continues to expand and upgrades its global internet service, users may experience changes such as publicly routable addresses and non-CGNAT configurations.
Priority plan customers can view their public IP on the service line page at Starlink.com. When the public IP policy is set, the IP addresses appear at the top of the Devices section, above the graphs.
One public IPv4 address for the customer’s wide area network (WAN), provisioned via Dynamic Host Configuration Protocol version 6 Prefix Delegation (DHCP) for routers/firewalls using IPv4.
One IPv6 /64 prefix for the customer’s wide area network (WAN), provisioned via Stateless Address Auto Configuration (SLAAC) for routers/firewalls using IPv6.
One IPv6 /56 prefix for the customer’s local area network (LAN), provisioned to routers capable of issuing a DHCPv6-PD request.
IP addresses are also available through the Starlink APIs. For more information, see here.
The Starlink’s cell may be rehomed to a different PoP (Point of Presence) occasionally for latency improvements. As the cell is rehomed, the user terminal (UT) will have IP allocations from both PoPs and will determine when to switch over to the new PoP. During this time, IPs from both PoPs will be displayed, which will be six IP addresses overall. This will only last for about 10 minutes.
Related questions:
Can't find what you're looking for? Contact Support.