Starlink Connection Issues - WAN Connection

[Aeisu]

I have been having a lot of trouble trying to connect to my server from an outside source.
I run on Starlink for ISP which i know runs on a private IP address.
I have looked into ways to connect to my network like remote.it to tunnel direct to the server port and the OpenVPN through my router or the DDNS server but none of these seem to have any results.
I'm not sure if I'm doing something wrong or if it will not even work at all. I could really use some direction or technical help to set this up since i was trying to make a server me and my friends could connect without needing to be connected through the Wi-fi or LAN

[zach2good]

It looks like you're not alone, it looks like Starlink trips up many people:

https://www.reddit.com/r/Starlink/comments/llwlvh/ddns_does_not_work_with_starlink_nor_does_remote/

Your best bet is to go to the Starlink subreddit and see what they've come up with to provide you with something that looks like a traditional static or dynamic IP - both of which work with the server software.

I was trying to make a server me and my friends could connect without needing to be connected through the Wi-fi or LAN

Can you try and rephrase what you're trying to achieve? This doesn't make sense

Another option, is to sign up with AWS or GCP and host your server in their very generous "welcome to the service" free tiers. I got about a year's worth of credits last time I did that.

[Aeisu]

I was trying to say that the only way my friends could currently connect is if they were physically here at my location. So i was looking for a solution for the to be able to connect remotely from anywhere they wanted.

I looked into the AWS but i'm not too sure what I should be using under all their resources to get things working.

[RAIST5150]

You are probably up against the same thing people are with TMOBILE Home Internet.... some form of CGNAT/XLAT464 implementation that doesn't give you a forward facing IPV4 address that will allow unsolicited inbound connections. It monkeys with a lot of things... really screws up console gaming features because it breaks peer-to-peer traffic.

You might be able to setup a VPN with a reserved IP and inbound peer-to-peer support with someone like Windscribe. You would need to pay extra for the features, but it would give you a forward facing V4 address and allow you to configure up to 10 ports that you could configure to point back to your network.

They offer annual plans to help reduce the cost... forget the numbers, but think it could come out somewhere between $10-16 USD per month depending on the terms you choose.

They also have OpenVPN profiles that you can set up on a router if you have one that supports it.

We switched back to Spectrum since we qualified for the new internet assistance plan ($30 discount, based on household income level) so I never got around to testing it myself, but on paper it looked like a potential solution.

EDIT:
Looks like they've updated their pricing. If you go the data center route and annual plan, can get it for a little under USD $7/month now:

https://windscribe.com/staticips

[Aeisu]

So i have found a method to get around this with cloudflare and cloudflared.
I have managed to get a tunnel operating without issue
The problem i seem to be running into is finding the appropriate ingress rules to be able to connect to the ffxi server
I have been running everything on 127.0.0.1 since i figured that would be the easiest access point but nothing seems to be working.
Any ideas would be welcomed, i'm so close to having this figured out and want to document the process for others too.

[Aeisu]

with high hopes i marched on then i found this
https://developers.cloudflare.com/fundamentals/get-started/reference/network-ports/
since i'm locked behind http ports i;m not too sure what my options are other then maybe having something redirect the ports internally or by changing the game ports themselves.
In this problem i'm stuck with my severe lack of knowledge @.@

[Mortalelite]

So i have found a method to get around this with cloudflare and cloudflared. I have managed to get a tunnel operating without issue The problem i seem to be running into is finding the appropriate ingress rules to be able to connect to the ffxi server I have been running everything on 127.0.0.1 since i figured that would be the easiest access point but nothing seems to be working. Any ideas would be welcomed, i'm so close to having this figured out and want to document the process for others too.

If you want to make it public, make sure ports TCP & UDP 54230 and TCP 54231 & 54001 & 54002. Cause some ISP can block certain ports, and open certain ways, or like mention get VPN that allows port forwarding. What is that it doing or trying to do.

[Aeisu]

well the first thing is i can get the cloudflare tunnel to work correctly for certain
I tested two methods using docker with nginx (port 80) and tomcat (port 8888), I linked these to a DNS in cloudflared through a CNAME which then get routed with an ingress rule .yaml file
I tried the same approach with the ffxi tcp 54230, 54231 and 51220 (all listed in the xiloader file) ports to a desired cname so it had it's own dns to work through.
I ran into the issue that cloudflare only allows certain ports through so i chose to use 2095, 2096, and 2086 (rebuilt the xiloader to correspond the ports to 54230, 54231, and 51220 for using outside local network)
this was me trying to figure out a way to route traffic to the tunnel on the correct port so cloudflare could read it and send it through.
so the idea here is

• Client uses xiloader through windower to connect (uses ports 2095=54230, 2096=54231, 2086=51220)
• These ports then are able to pass through the cloudflare tunnel by way of my domain name and subdomain so windower has something for it's arg function, and be proxyed to my localhost which runs the tunnel
• The server is set to run on my local network IP (I can connect fine on any computer connected to the network)
• then i use windows netsh to route trafic from the tunnel by using 0.0.0.0 as the listen address (to catch anything and everything) for ports 2095, 2096, 2086, and connect them to the network IP 192.168.1.50 so the game server can get the information.
  I have come to a standstill since i can get the xiloader to load up and not crash due to no connection, all it does is loop back to the input dialog for selecting login credentials. So i was under the impression that the information that was inbound through the tunnel was being recieved but that there was possibly no outbound traffic going back to the client.

Just an FYI I am not a programmer by any stretch of the imagination so please bear with me as i try and describe this complex puzzle i'm trying to solve with the meager tidbits of information i have gleaned from many sources @.@ I am very greatful for any help i can get

[Mortalelite]

I am not programmer myself. I seen you having a issue trying to get work way want it to. I have not messed with steps you are doing, but steps you are doing little above me.

[RAIST5150]

May want to watch the connections the client is trying to use to verify it is trying to use only the custom port assignments you are trying to enforce. Could be another piece to the puzzle still trying to reach out or listen on the OEM port assignments.

[Aeisu]

I have made some significant progress in finding a solution to fix this issue. I can get the cloudflare tunnel working, the client can and has connect successfully. The problem i'm facing now is that the tunnels maximum packet size is limited to 1201 and the server is using larger packets than that and they are being dropped adn I am R0ing right after connecting.
I did have one freak incident where i didn't D/C and went from Mog House > South Sandy > East Ronfaure > South Sandy
I then put on some gear and the server kicked me once that happened.

[RAIST5150]

External client systems/routers <should> pick up on the tunnel's lower MTU if they are running MTU Discovery and all... perhaps the snag may be the packets coming out from the game server not getting tweaked to get through the tunnel reliably? Don't know if there would be a practical way to test the idea... but do you have a means of restricting the MTU between the tunnel and the game server? Router, managed switch... some software solution? Normally, this would get addressed by those automatic MTU discovery approaches... but sometimes it helps to strong-arm it to a static value to have consistency (for example, this has been a pretty common thing to address upload issues with PSN in the past). The idea being, let the game server generate the larger packets initially, but then they get split into the smaller chunks in one of the network layers before going into the tunnel (in the case of a PS3/PS4, could just tell it to send them in smaller chunks from its network settings since doing it in the router negatively impacts all devices). We normally want to avoid such fragmentation scenarios for various reasons... but just curious if it may make it functional even though it will inject some overhead/lag into the picture. EDIT: replying directly via email does weird formatting... hopefully it is "straight" now...

…

On Monday, August 1, 2022, Aeisu ***@***.***> wrote: I have made some significant progress in finding a solution to fix this issue. I can get the cloudflare tunnel working, the client can and has connect successfully. The problem i'm facing now is that the tunnels maximum packet size is limited to 1201 and the server is using larger packets than that and they are being dropped adn I am R0ing right after connecting. I did have one freak incident where i didn't D/C and went from Mog House > South Sandy > East Ronfaure > South Sandy I then put on some gear and the server kicked me once that happened. — Reply to this email directly, view it on GitHub <#2185 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARST74HJJFQLU6L2BPYMYHLVXBTDLANCNFSM52S7KRBA> . You are receiving this because you commented.Message ID: ***@***.***>

[Aeisu]

would RTS Threshold possibly do that?

[Aeisu]

it looks like you can set the MTU size per connection type in wondows using netsh
https://support.zen.co.uk/kb/Knowledgebase/Changing-the-MTU-size-in-Windows-Vista-7-or-8
going to try this in awhile and see what comes of it.