LightAtom

Starlink CGNAT, DNS and IPv6

Starlink residential plans use carrier-grade NAT for IPv4 (addresses in 100.64.0.0/10, no inbound connections) and provide a public IPv6 /56 prefix.

According to Starlink's support documentation, its default IPv4 setup uses carrier-grade NAT with addresses from 100.64.0.0/10, and inbound IPv4 connections are blocked, so port forwarding doesn't work. A public IPv4 address is an option only on higher-tier plans (Priority, Mobile Priority, Maritime). Every Starlink router gets a public IPv6 /56 prefix, which is the way to reach devices at home. The Starlink router (192.168.1.1 on its LAN) handles DNS for your devices; Starlink doesn't publish its upstream resolvers. Set a public resolver on your Mac if you prefer one.

Facts

Brands
Starlink, SpaceX
CGNAT
Yes
IPv6
Yes
ASNs
AS14593

DNS servers

192.168.1.1

Frequently asked questions

Does Starlink use CGNAT?

Yes, on standard residential plans: IPv4 goes through carrier-grade NAT using 100.64.0.0/10 addresses, and inbound IPv4 connections are blocked.

Can I port forward on Starlink?

Not over IPv4 on standard plans. Use IPv6 (Starlink provides a public /56), a tunnel such as Tailscale or Cloudflare Tunnel, or a plan with a public IPv4 address.

What DNS does Starlink use?

The Starlink router serves DNS to your devices and forwards queries upstream; Starlink doesn't publish those resolvers. You can set 1.1.1.1 or another public resolver on each device.

LightAtom team

The people who build LightAtom, a network monitor for macOS.