Layer 2: private routing and regional IPs

Who sees your internet traffic?

Where your internet traffic exits matters. In many regions, data can land in locations with slower infrastructure or limited security oversight, which can affect performance and introduce risk.

Layer 2 is a private network overlay that brings added stability, security and control to satellite services like Starlink. It works in the background, enhancing your existing setup without changing how your teams connect day to day.

What Layer 2 delivers on Starlink

Private routing

Your traffic is routed through a private backbone rather than the public internet. This adds a layer of protection for sensitive data and avoids unpredictable or untrusted routes.

Static IP anchored to your region

Unlike standard satellite IPs, which can change frequently, we assign a static IP based on your operating region. This simplifies remote access and supports secure, reliable integrations.

Geo-tagging

We can tag your static IP to reflect your actual region. That helps services recognise the correct location, reducing issues with streaming access, licensing or geo-sensitive apps.

Consistent performance

Layer 2 bypasses common congestion points and lands traffic on infrastructure managed directly, helping maintain steady speeds even during busy periods.

Private intranet option

With a single terminal, you can run both a public-facing network and a private intranet. Your IT team can securely access remote systems without exposing traffic to the public internet.

Regional IPs available

ItalySpainFranceUnited KingdomUSA

Layer 2 on Starlink and on SIM

On Starlink

Layer 2 runs on the Starlink network, with all the benefits above.

On SIM connections

Available through an Italian VPN service dedicated to streaming. The VPN service provides an Italian IP only.

This matters for Sky streaming, which requires authentication from an Italian IP address. Layer 2 is a separate service from the satellite or SIM connection itself and from your TV subscription.

Configured and secured on your onboard network

Layer 2 lands on the router on board, and that is where reliability and security are decided. We configure and maintain the onboard network so every connection is used well and nothing is left exposed.

Separate networks

Guests, crew, owner and the vessel's own systems each get their own network. A problem on one does not spread to the others, and bridge systems stay isolated from guest traffic.

Failover and bonding

Starlink and 4G/5G SIMs work together. If one link drops, traffic moves to the next automatically. Where the equipment supports it, links can be combined for more speed and stability.

Firewall and VPN

Firewall rules and VPN tunnels are set up for your vessel, so remote access for your management company or IT team is protected instead of open to the internet.

Remote monitoring

We monitor the network remotely, keep firmware up to date and manage credentials, so issues are often spotted and fixed before anyone on board notices them.