A NAS on Starlink works well in Australia. But two things trip up most users straight away: CGNAT blocks the port forwarding that standard remote access relies on, and Starlink's upload speed limits how quickly you can send large backups to the cloud. Both are solvable. This guide covers the specific workarounds Australians on Starlink need, which NAS features matter, and how to configure remote access and cloud backup without needing a static IP.
In short: Starlink uses CGNAT (Carrier-Grade NAT) in Australia, which means your NAS cannot be reached via standard port forwarding or DDNS. The fix is either Tailscale (free mesh VPN, works through CGNAT), Synology QuickConnect or QNAP myQNAPcloud (vendor-hosted relay, free), or a VPS reverse tunnel. For cloud backup, Starlink upload speed varies by service plan, location, congestion and time, limiting how fast large initial backups complete. Plan for multi-day seeding.
Why Starlink and NAS Are a Good Combination
Starlink has transformed connectivity for rural and remote Australian properties where NBN is unavailable or severely limited. For NAS users, Starlink offers several advantages over the ADSL, fixed wireless, or 4G connections it typically replaces:
- Upload performance varies by Starlink plan and location and by the NBN fixed-wireless or ADSL service being compared; current NBN fixed-wireless tiers span a much wider range than 1-5 Mbps. For cloud backup, this is a significant improvement.
- Lower latency than expected: Starlink's current published latency range is 25-60ms on land, although performance varies by location and network conditions. Reasonable for accessing a NAS remotely.
- Starlink performance can also decline during congested or high-usage periods, including busy evening hours.
The trade-off is CGNAT. And it's a real one that requires understanding before you configure your NAS.
CGNAT on Starlink: What It Means for Your NAS
Starlink's default IPv4 policy uses CGNAT, while Local and Global Priority plans can select a public IPv4 policy and all plans support native IPv6. Under CGNAT, multiple Starlink customers share a single public IP address. The practical consequence for NAS users:
- Port forwarding doesn't work. Conventional NAS remote access relies on opening ports in your router and pointing your IP address (or a DDNS hostname) at your NAS. With CGNAT, your router's WAN address is not a publicly routable IP. It's a private address behind Starlink's own NAT layer. Unsolicited inbound IPv4 traffic cannot reach your NAS under Starlink's default CGNAT policy; inbound IPv6 is possible only with compatible equipment and appropriate firewall configuration.
- DDNS hostnames don't help directly. Synology's DDNS, QNAP's DDNS, and services like No-IP all update with your router's address. But under CGNAT, that address is unreachable from outside Starlink's network anyway.
- On NBN, CGNAT and public-IP availability depend primarily on the retail provider and plan rather than on whether the access technology is FTTC, FTTP or FTTN. Starlink is CGNAT by default for residential customers.
CGNAT check: A Starlink WAN IPv4 in 100.64.0.0/10 indicates its default CGNAT policy. A 10.x.x.x, 172.16-31.x.x, or 192.168.x.x WAN address shows another private NAT layer but does not, by itself, prove carrier-grade NAT. Starlink's default residential IPv4 policy uses CGNAT. Local and Global Priority plans can select a publicly routable IPv4 policy, but Starlink does not offer a true static IP.
Solution 1: Tailscale (Recommended for Most Users)
Tailscale is a mesh VPN service that works through CGNAT. It punches through the NAT layer using direct peer-to-peer connections where possible, and relay servers (called DERP) as fallback. It's free for personal use under the current Personal-plan limits, has native support on both Synology DSM and QNAP QTS, and requires no static IP, port forwarding, or VPS.
How it works: You install Tailscale on your NAS and on the devices you want to connect from (phone, laptop). Tailscale creates a private network between them. Your NAS gets a stable Tailscale IP (typically in the 100.x.x.x range) that works from anywhere. Whether your devices are on Starlink, NBN, 4G, or a cafe's wifi.
Setup on Synology: Synology Package Centre now includes Tailscale as an installable package on DSM 7.0+. Install, authenticate with your Tailscale account, and the NAS appears on your Tailscale network within minutes. No DDNS or port forwarding is needed; if Synology's firewall is enabled, a rule allowing the Tailscale subnet may be required.
Setup on QNAP: Install Tailscale from the QNAP App Center on a supported x86-64 or arm64 model, open its web interface, and authenticate the NAS.
Performance: Tailscale uses direct connections where possible. Tailscale attempts a direct peer-to-peer connection, but if Starlink or another firewall condition forces DERP relay use, throughput may be lower and latency higher.
Solution 2: Vendor Relay Services (QuickConnect, myQNAPcloud)
Both Synology and QNAP provide free relay-based remote access services that work through CGNAT without any user configuration beyond account setup.
Synology QuickConnect: Creates a QuickConnect ID accessed through quickconnect.to/[QuickConnect ID] and attempts direct connection methods before falling back to Synology's relay service. Works on any internet connection regardless of NAT type. No account creation required beyond a free Synology Account. Enables access to DSM, Synology Photos, Drive, and other packages from a browser or the Synology app suite. Performance depends on Synology's relay server load and proximity. Slower than a direct connection but functional for file access and media streaming.
QNAP myQNAPcloud Link provides relay-based access through QNAP's servers without port forwarding; it is distinct from the myQNAPcloud DDNS address. Similar performance characteristics to QuickConnect. Suitable for remote file access and management, not ideal for continuous video surveillance streaming.
Limitations: Relay services route traffic through the vendor's infrastructure. Relay throughput can be lower than a direct connection and varies with available bandwidth, latency and relay-server load. For large file transfers, Tailscale's direct connection will typically be faster. For casual access and occasional file retrieval, vendor relay services are relatively simple but still require account setup and enabling the relevant service.
Solution 3: VPS Reverse Tunnel (Advanced)
For users who want full port forwarding capability (including running a web server on the NAS, hosting services publicly, or bypassing vendor infrastructure entirely), a VPS reverse tunnel is the technically capable solution. The approach:
- Rent a small VPS with a public IP (BinaryLane, Vultr, or DigitalOcean all work. From approximately $5-10/month AUD equivalent)
- Configure SSH reverse forwarding or frp through your VPS; managed alternatives such as Cloudflare Tunnel use the provider's own edge network and generally do not require your VPS.
- Traffic to the ports or routes explicitly configured on the VPS is forwarded through the tunnel to your NAS at home.
This is technically involved and adds a monthly cost. For most home users, Tailscale or QuickConnect is simpler and sufficient. The VPS tunnel approach is worth considering if you need to expose services publicly (a website, a game server, or HomeAssistant accessible without a VPN client on the connecting device).
Cloud Backup Over Starlink: What to Expect
Cloud backup is the second major consideration for Starlink NAS users. Starlink's variable upload speed is genuinely useful for cloud backup. Significantly better than many rural alternatives. But it still limits how fast large initial backups and ongoing syncs complete.
Initial backup seeding: At an ideal sustained 10 Mbps, 2TB takes about 18.5 days and 4TB about 37 days before protocol overhead, interruptions or speed variation. For larger libraries (10TB+), this can stretch to weeks. Plan for the seeding phase before relying on cloud backup as a live protection layer.
Ongoing incremental backups: After seeding, incremental size and completion time depend on how much data changed and the sustained upload rate. The initial seed is the hard part.
Cloud provider choice: Wasabi (Sydney storage region; egress is free only within Wasabi's policy limits) and Backblaze B2 (US, EU and Canada regions) are S3-compatible cloud-storage options for NAS backup. Synology C2 (tightly integrated with DSM Hyper Backup) is the easiest option for Synology users. Use the Cloud vs NAS Calculator to model ongoing storage costs in AUD for your library size.
Which NAS Works Best with Starlink?
Any modern NAS with Tailscale or QuickConnect support works on Starlink. The key features to look for:
- Tailscale package support: Synology provides Tailscale through Package Center, and supported x86-64 and arm64 QNAP models provide it through QNAP App Center.
- VPN server capability: If you want to run your own WireGuard or OpenVPN server on the NAS instead of using Tailscale, ensure the NAS has a VPN Server package. Synology and QNAP both include VPN Server. But the VPN server approach doesn't solve CGNAT on its own unless combined with a VPS tunnel.
- Hyper Backup or similar: Synology Hyper Backup is the easiest tool for configuring cloud backup targets including Synology C2, Wasabi, and Backblaze B2. QNAP's Hybrid Backup Sync covers the same territory.
- Low power draw: Rural Starlink users are often on solar or generator power. A low-power NAS matters more than in an urban setting. Synology lists the DS225+ at 16.98W during access and 6.08W in HDD hibernation, and the DS425+ at 28.25W during access and 6.10W in HDD hibernation. See the NAS Power Cost Calculator for your AU electricity rate.
For most Australian Starlink users, the Synology DS425+ or DS925+ represent the best balance of capability, power efficiency, and AU retail availability. Both include Synology Photos (AI face recognition works locally), Hyper Backup, and native Tailscale package support. Australian Consumer Law protections apply when purchasing from AU retailers.
Starlink Business vs Residential: The Static IP Question
Eligible Local and Global Priority services in Australia can select a publicly routable IPv4 policy, but Starlink does not provide a true static IP. On an eligible Priority plan, selecting Starlink's public IPv4 policy removes the CGNAT restriction for IPv4, although the address is not truly static. With an eligible public-IPv4 policy and a compatible third-party router, IPv4 port forwarding and DDNS can be configured; the Starlink Wi-Fi router itself does not provide port-forwarding controls.
For Starlink Residential customers, there is no official static IP option. The CGNAT workarounds (Tailscale, QuickConnect) are the practical path. Starlink's Local Priority and Residential plans have different pricing, data treatment and features; compare the current Australian plan details directly. The static IP benefit alone is rarely worth upgrading to Business unless you have other business reasons to do so.
Related reading: our NAS buyer's guide, our 3-2-1 backup guide, and our remote access and VPN guide.
Free tools: Backup Storage Calculator and NBN Remote Access Checker. No signup required.
See also: our complete Synology NAS Australia guide.
See also: our complete QNAP NAS Australia guide.
Use our free NBN Plan Finder to compare real NBN plans by upload speed, CGNAT and static IP support.
Can I access my NAS remotely on Starlink in Australia?
Yes, but standard port forwarding doesn't work due to CGNAT. Use Tailscale (free, installs directly on Synology and QNAP), or the vendor relay services (Synology QuickConnect, QNAP myQNAPcloud). Both work through CGNAT without inbound router port forwarding, although an enabled NAS firewall may require an allow rule for Tailscale traffic.
Does Tailscale work on Starlink?
Yes. Tailscale is specifically designed to work through CGNAT and other restrictive NAT configurations. It uses direct peer-to-peer connections where possible and automatic relay servers as fallback. It works reliably on Starlink with no special configuration. Synology has a native Tailscale package; Supported QNAP models install it directly from QNAP App Center.
How long does it take to back up to the cloud on Starlink?
At an ideal sustained upload speed of 10 Mbps, transferring 1TB takes approximately 222 hours, or 9.3 days. A 4TB initial backup seed takes about 37 days before overhead or interruptions. After the initial seed, incremental completion time depends on how much data changed and the sustained upload rate. Schedule backups during off-peak hours to avoid affecting other internet use while the seed runs.
What is CGNAT and why does it affect my NAS?
CGNAT (Carrier-Grade NAT) means multiple Starlink customers share a single public IP address. Your router's WAN address is a private IP that the internet can't reach directly. Standard NAS remote access methods (port forwarding, DDNS) require a publicly reachable IP. CGNAT breaks this. The workaround is to use services that initiate outbound connections (Tailscale, QuickConnect) rather than waiting for inbound connections that CGNAT blocks.
Which NAS is best for use with Starlink in Australia?
Any modern x86 NAS with Tailscale support and Hyper Backup (or equivalent) works well on Starlink. The Synology DS425+ (available from Scorptec; check the live price) is the most practical choice for most Australian Starlink users. It has native Tailscale package support, Hyper Backup for cloud backup to Synology C2 or Wasabi, Synology Photos for local AI photo search, and low power draw suited to solar/generator environments. Check availability at Scorptec, Mwave, and PLE Computers.
Does Synology QuickConnect work on Starlink?
Yes. QuickConnect uses outbound connections from the NAS to Synology's relay servers. It doesn't require inbound port forwarding. It works through CGNAT without any special configuration. Go to DSM Control Panel > External Access > QuickConnect, sign in or create a free Synology Account, and choose your QuickConnect ID. Your NAS can then be accessed from a browser at quickconnect.to/[QuickConnect ID], subject to successful QuickConnect registration and connectivity.
See how Synology and QNAP compare on remote access, software features, and AU pricing in the full comparison guide.