NAS for Starlink Australia — Remote Access, Backup and CGNAT Explained

A NAS on Starlink works well in Australia. But two things trip up most users straight away: CGNAT blocks the port forwarding that standard remote access relies on, and Starlink's upload speed limits how quickly you can send large backups to the cloud. Both are solvable. This guide covers the specific workarounds Australians on Starlink need, which NAS features matter, and how to configure remote access and cloud backup without needing a static IP.

Why Starlink and NAS Are a Good Combination

Starlink has transformed connectivity for rural and remote Australian properties where NBN is unavailable or severely limited. For NAS users, Starlink offers several advantages over the ADSL, fixed wireless, or 4G connections it typically replaces:

• Higher upload speeds: Starlink typically delivers 5-30 Mbps upload, compared to 1-5 Mbps on many rural NBN fixed wireless connections or ADSL services. For cloud backup, this is a significant improvement.
• Lower latency than expected: Starlink's Gen 2 and newer hardware delivers 20-60ms latency. Reasonable for accessing a NAS remotely.
• Stable connection: Unlike 4G, Starlink doesn't degrade in the evenings when local towers are congested.

The trade-off is CGNAT. And it's a real one that requires understanding before you configure your NAS.

CGNAT on Starlink: What It Means for Your NAS

Starlink uses CGNAT (Carrier-Grade NAT) across its Australian network. Under CGNAT, multiple Starlink customers share a single public IP address. The practical consequence for NAS users:

• Port forwarding doesn't work. Conventional NAS remote access relies on opening ports in your router and pointing your IP address (or a DDNS hostname) at your NAS. With CGNAT, your router's WAN address is not a publicly routable IP. It's a private address behind Starlink's own NAT layer. Traffic from the internet cannot reach your router, and therefore cannot reach your NAS.
• DDNS hostnames don't help directly. Synology's DDNS, QNAP's DDNS, and services like No-IP all update with your router's address. But under CGNAT, that address is unreachable from outside Starlink's network anyway.
• NBN comparison: CGNAT also affects some NBN connections (particularly NBN Sky Muster satellite and some mobile NBN services), but most fixed NBN connections (FTTC, FTTP, FTTN) provide a publicly routable IP that supports standard port forwarding. Starlink is CGNAT by default for residential customers.

Solution 1: Tailscale (Recommended for Most Users)

Tailscale is a mesh VPN service that works through CGNAT. It punches through the NAT layer using direct peer-to-peer connections where possible, and relay servers (called DERP) as fallback. It's free for personal use (up to 100 devices), has native support on both Synology DSM and QNAP QTS, and requires no static IP, port forwarding, or VPS.

How it works: You install Tailscale on your NAS and on the devices you want to connect from (phone, laptop). Tailscale creates a private network between them. Your NAS gets a stable Tailscale IP (typically in the 100.x.x.x range) that works from anywhere. Whether your devices are on Starlink, NBN, 4G, or a cafe's wifi.

Setup on Synology: Synology Package Centre now includes Tailscale as an installable package on DSM 7.0+. Install, authenticate with your Tailscale account, and the NAS appears on your Tailscale network within minutes. No firewall rules, no DDNS, no port forwarding needed.

Setup on QNAP: Install the Tailscale container via QNAP Container Station or the App Center. Authentication is the same process. QNAP's implementation is slightly more manual than Synology's package but works reliably.

Performance: Tailscale uses direct connections where possible. On Starlink, expect performance close to your raw upload/download speeds for most use cases. Latency overhead is minimal.

Solution 2: Vendor Relay Services (QuickConnect, myQNAPcloud)

Both Synology and QNAP provide free relay-based remote access services that work through CGNAT without any user configuration beyond account setup.

Synology QuickConnect: Creates a unique ID (e.g., your-quickconnect-id.quickconnect.to) that routes through Synology's relay servers. Works on any internet connection regardless of NAT type. No account creation required beyond a free Synology Account. Enables access to DSM, Synology Photos, Drive, and other packages from a browser or the Synology app suite. Performance depends on Synology's relay server load and proximity. Slower than a direct connection but functional for file access and media streaming.

QNAP myQNAPcloud: Equivalent service for QNAP users. Creates a myQNAPcloud address that relays through QNAP's servers. Similar performance characteristics to QuickConnect. Suitable for remote file access and management, not ideal for continuous video surveillance streaming.

Limitations: Relay services route traffic through the vendor's infrastructure. Upload/download speeds are limited by the relay server's throughput allocation per connection. For large file transfers, Tailscale's direct connection will typically be faster. For casual access and occasional file retrieval, the vendor relay services require zero setup and work immediately.

Solution 3: VPS Reverse Tunnel (Advanced)

For users who want full port forwarding capability (including running a web server on the NAS, hosting services publicly, or bypassing vendor infrastructure entirely), a VPS reverse tunnel is the technically capable solution. The approach:

1. Rent a small VPS with a public IP (BinaryLane, Vultr, or DigitalOcean all work. From approximately $5-10/month AUD equivalent)
2. Configure an SSH reverse tunnel or use a dedicated tunnelling tool (frp, ngrok, Cloudflare Tunnel) to forward ports from the VPS to your NAS
3. All traffic to the VPS's public IP forwards through the tunnel to your NAS at home

This is technically involved and adds a monthly cost. For most home users, Tailscale or QuickConnect is simpler and sufficient. The VPS tunnel approach is worth considering if you need to expose services publicly (a website, a game server, or HomeAssistant accessible without a VPN client on the connecting device).

Cloud Backup Over Starlink: What to Expect

Cloud backup is the second major consideration for Starlink NAS users. Starlink's upload speed of 5-30 Mbps is genuinely useful for cloud backup. Significantly better than many rural alternatives. But it still limits how fast large initial backups and ongoing syncs complete.

Initial backup seeding: For a new NAS with 2-4TB of data, expect 2-5 days of continuous uploading at 10 Mbps to seed a cloud backup. For larger libraries (10TB+), this can stretch to weeks. Plan for the seeding phase before relying on cloud backup as a live protection layer.

Ongoing incremental backups: After seeding, daily incrementals are typically small (a few GB) and complete within an hour at Starlink upload speeds. The initial seed is the hard part.

Cloud provider choice: Wasabi (no egress fees, Sydney data centre) and Backblaze B2 (US-based) are the two most commonly used S3-compatible targets for NAS cloud backup in Australia. Synology C2 (SG region, tightly integrated with DSM Hyper Backup) is the easiest option for Synology users. Use the Cloud vs NAS Calculator to model ongoing storage costs in AUD for your library size.

Which NAS Works Best with Starlink?

Any modern NAS with Tailscale or QuickConnect support works on Starlink. The key features to look for:

• Tailscale package support: Synology DSM 7.0+ (all current models) and QNAP QTS via Container Station. Both work.
• VPN server capability: If you want to run your own WireGuard or OpenVPN server on the NAS instead of using Tailscale, ensure the NAS has a VPN Server package. Synology and QNAP both include VPN Server. But the VPN server approach doesn't solve CGNAT on its own unless combined with a VPS tunnel.
• Hyper Backup or similar: Synology Hyper Backup is the easiest tool for configuring cloud backup targets including Synology C2, Wasabi, and Backblaze B2. QNAP's Hybrid Backup Sync covers the same territory.
• Low power draw: Rural Starlink users are often on solar or generator power. A low-power NAS matters more than in an urban setting. The Synology DS225+ (6-10W idle) and DS425+ (8-12W idle) are efficient choices. See the NAS Power Cost Calculator for your AU electricity rate.

For most Australian Starlink users, the Synology DS425+ or DS925+ represent the best balance of capability, power efficiency, and AU retail availability. Both include Synology Photos (AI face recognition works locally), Hyper Backup, and native Tailscale package support. Australian Consumer Law protections apply when purchasing from AU retailers.

Starlink Business vs Residential: The Static IP Question

Starlink Business customers in Australia have access to a static IP option (at additional cost). If you're running a Starlink Business account, a static IP eliminates the CGNAT problem entirely. Standard port forwarding and DDNS work as they would on a fixed NBN connection.

For Starlink Residential customers, there is no official static IP option. The CGNAT workarounds (Tailscale, QuickConnect) are the practical path. Starlink's business-tier pricing in Australia starts significantly higher than residential. The static IP benefit alone is rarely worth upgrading to Business unless you have other business reasons to do so.

Related reading: our NAS buyer's guide, our 3-2-1 backup guide, and our remote access and VPN guide.

Free tools: Backup Storage Calculator and NBN Remote Access Checker. No signup required.

Can I access my NAS remotely on Starlink in Australia?

Yes, but standard port forwarding doesn't work due to CGNAT. Use Tailscale (free, installs directly on Synology and QNAP), or the vendor relay services (Synology QuickConnect, QNAP myQNAPcloud). Both work through CGNAT without any firewall configuration.

Does Tailscale work on Starlink?

Yes. Tailscale is specifically designed to work through CGNAT and other restrictive NAT configurations. It uses direct peer-to-peer connections where possible and automatic relay servers as fallback. It works reliably on Starlink with no special configuration. Synology has a native Tailscale package; QNAP runs it via Container Station.

How long does it take to back up to the cloud on Starlink?

At a typical Starlink upload speed of 10 Mbps, transferring 1TB takes approximately 22 hours of continuous uploading. A 4TB initial backup seed takes 4-5 days. After the initial seed, daily incrementals are typically a few GB and complete quickly. Schedule backups during off-peak hours to avoid affecting other internet use while the seed runs.

What is CGNAT and why does it affect my NAS?

CGNAT (Carrier-Grade NAT) means multiple Starlink customers share a single public IP address. Your router's WAN address is a private IP that the internet can't reach directly. Standard NAS remote access methods (port forwarding, DDNS) require a publicly reachable IP. CGNAT breaks this. The workaround is to use services that initiate outbound connections (Tailscale, QuickConnect) rather than waiting for inbound connections that CGNAT blocks.

Which NAS is best for use with Starlink in Australia?

Any modern x86 NAS with Tailscale support and Hyper Backup (or equivalent) works well on Starlink. The Synology DS425+ (around $819 from Scorptec) is the most practical choice for most Australian Starlink users. It has native Tailscale package support, Hyper Backup for cloud backup to Synology C2 or Wasabi, Synology Photos for local AI photo search, and low power draw suited to solar/generator environments. Check availability at Scorptec, Mwave, and PLE Computers.

Does Synology QuickConnect work on Starlink?

Yes. QuickConnect uses outbound connections from the NAS to Synology's relay servers. It doesn't require inbound port forwarding. It works through CGNAT without any special configuration. Go to DSM Control Panel > QuickConnect, sign in or create a free Synology Account, and choose your QuickConnect ID. Your NAS will be accessible from any browser at your-id.quickconnect.to within a few minutes.