Company Background
A small, private organization managing property and associated businesses in rural Scotland transitioned from a limited-bandwidth broadband service to Starlink. While Starlink significantly enhanced internet speeds, it introduced a critical challenge: Carrier-Grade NAT (CGNAT). This effectively rendered their existing Dynamic DNS (DDNS) based remote access solution inoperable, as port forwarding and static IP addresses were no longer available.
The Challenge
Starlink's CGNAT disrupted essential remote access capabilities, specifically:
- SMB/CIFS File Server Access: Remote employees required secure access to files on a local Windows 11 file server.
- Synology NAS Synchronization: Remote laptops needed seamless file synchronization with two Synology NAS devices using Synology Drive Client.
- Remote Desktop Protocol (RDP): Remote access to the file server via RDP was lost.
The core issue stemmed from the organization's network being placed behind a shared public IP address, preventing direct inbound connections.
The Solution: NoPorts by Atsign
The organization implemented NoPorts, a zero trust connections tool that bypasses the limitations of CGNAT and dynamic IP addresses. Because NoPorts has its own unique addressing system—one that works independently of IP addresses—there's no need to know the client or the server's IP address. As long as both devices have an outbound internet connection, NoPorts establishes a secure, end-to-end encrypted connection.
The implementation enabled:
- Secure SMB/CIFS Access: NoPorts created secure, encrypted tunnels, enabling SMB/CIFS access to the file server without requiring open ports.
- Synology NAS Synchronization: NoPorts' TCP connectivity supported Synology Drive Client, facilitating seamless file synchronization.
- RDP Access: NoPorts restored RDP and Windows App remote access, allowing secure connections to the Windows 11 file server.
Benefits
By implementing NoPorts, the organization achieved the following outcomes:
- Restored Remote Access: Employees regained secure and reliable access to essential file server resources, regardless of location.
- Increased Security: NoPorts' encrypted tunnels provided robust protection against unauthorized access.
- Resiliency: NoPorts quickly re-establishes connections, even during Starlink handoffs between satellites or ground stations.
- Simplified Network Management: By bypassing the need for port forwarding, NoPorts simplified the organization’s network management.
- IP Agnostic Connectivity: NoPorts unique addressing system removed the dependency of IP addresses, allowing for seamless connectivity even with dynamic IP addresses.
Our client was pleased that NoPorts' was able to overcome the challenges posed by CGNAT and dynamic IP addresses in Starlink environments. By providing secure, IP-address agnostic remote access, NoPorts enabled the organization to maintain business continuity and optimize productivity. This case highlights the suitability of NoPorts for organizations operating in rural or remote locations with limited network infrastructure options.
