Starlink NAT Type and CGNAT: What You Can and Cannot Change
Starlink commonly uses CGNAT for residential IPv4, so traditional inbound IPv4 port forwarding may stop at the carrier gateway. Test your NAT, compare WAN and public IP addresses, remove local double NAT, then evaluate current plan-specific public IP, IPv6 or relay options.
What NAT Type Does Starlink Use?
There is no single permanent NAT label for every Starlink connection. A game or console may report Open, Moderate or Strict based on its own reachability test, while the underlying IPv4 service can still be behind CGNAT.
If the Starlink router or your third-party router receives an address in 100.64.0.0/10, that address is shared space reserved for provider NAT. A mismatch between router WAN IPv4 and observed public IPv4 also indicates another upstream layer.
How to Check Starlink NAT and CGNAT
1Run the NAT test
Use a device on the Starlink connection and record the NAT behavior and public IPv4 result.
2Check the router WAN IP
On a third-party router, find the Internet or WAN address. With the Starlink router, available status details can vary by app and firmware.
3Compare addresses
A 100.64.0.0/10 WAN address or a public/WAN mismatch is consistent with upstream address sharing.
4Check the platform
Run the built-in Xbox, PlayStation or Switch network test to measure compatibility with that platform.
Why Starlink Can Show Strict or Moderate NAT
1Carrier-grade NAT
The public IPv4 mapping is controlled upstream, so unsolicited inbound sessions cannot be opened by the home router alone.
2A third-party router without bypass mode
The Starlink router and personal router may both translate traffic, adding local double NAT.
3Application-specific tests
Games and consoles test different endpoints and capabilities, so labels may disagree.
4Firewall or stale mappings
Local security software, router state or a failed UPnP request can cause restrictions even before the carrier layer.
Can You Port Forward on Starlink?
Traditional IPv4 forwarding requires control of the public-edge mapping. A home-router rule cannot create that mapping through CGNAT. Current public IPv4 options may depend on the Starlink plan and region, so verify availability in official account and support information before changing service.
IPv6 can provide globally routable addressing when Starlink, the router, the application and the remote side all support it. A firewall still protects IPv6 devices; IPv6 is not a reason to disable security rules. For private remote access, a mesh VPN or outbound tunnel may be simpler than exposing a public service.
Improve Starlink NAT for Gaming
1Establish a baseline
Check Starlink service status, obstructions and packet loss, then record the NAT result before changing settings.
2Remove local double NAT
Use Starlink bypass mode when a third-party router should be the only home router.
3Enable UPnP where appropriate
Allow the game or console to request local mappings on a trusted network, then retest.
4Check for CGNAT
If present, stop repeating local port rules and investigate a suitable public IP, IPv6 or relay path.
5Use platform-specific guidance
Follow the Xbox, PlayStation, Switch or PC guide for the device-side checks.
6Prefer relays for managed scenarios
Game relays and mesh remote-access tools are designed to establish outbound sessions through CGNAT.
Starlink features and addressing policies can change. Verify plan, region, public IP and IPv6 claims against current official Starlink documentation when this article is reviewed.
Test before changing your network
Run the NAT test on the affected connection, save the result, and retest after each change. Changing one variable at a time makes the diagnosis useful.
Check NAT Type NowRelated guides
Frequently asked questions
Does Starlink use CGNAT?
Starlink commonly uses CGNAT for residential IPv4 connections. Public addressing and IPv6 availability can vary by plan, region and current network policy.
Can I get Open NAT on Starlink?
Sometimes an application may report Open NAT through UPnP, IPv6 or relays, but CGNAT can prevent direct inbound IPv4 reachability. Results vary by platform and setup.
Can I port forward on Starlink?
Traditional inbound IPv4 forwarding generally cannot cross CGNAT. Alternatives include an eligible public IP option, supported IPv6, a mesh VPN, tunnel or application relay.
Is Starlink good for online gaming?
Many games work on Starlink, but latency variability, obstructions and CGNAT can affect specific games or hosting scenarios. Strict NAT does not mean all play will fail.
Will bypass mode fix Starlink CGNAT?
No. Bypass mode can remove double NAT inside the home when using a third-party router, but it does not remove Starlink's carrier-grade NAT.
Does a VPN fix Strict NAT on Starlink?
A normal outbound VPN may not provide inbound reachability. The service must offer port forwarding, a public endpoint or a relay relevant to the application.