Backup Internet - Filtering

[Alastairb25]

We use Talk Straight

BT Fibre

Netsweeper / Fortigate 

 

If we did get another link it, lets say Starlink for arguments sake.

 

We could only use in very specific circumstances as our filtering is by ISP and we do not have anything onsite.

 

How do others work around this ? 

 

TIA

Alastair

[Davit2005]

Is it cloud based filtering? If so can you ask them if it is possible to add an extra public IP that been of a static IP for the backup connection?

[thebatman]

We use LGfL for out internet, that comes with a backup line, but we also have BT line that we use as a final backup, for this line we use basic Cloudflare family DNS and restriced it down to staff only use (but we are able to allow students if outage is going to be a long time).

In all the years we have been with LGfL I think we have only used it once in anger, but do use it more for testing.

[Alastairb25]

Agreed, very unlikely. 

Starlink seems interesting due to not being tied to a provider or existing infrastructure

 

That said we are also looking at other angles such as poor UPS run time due to battery capacity, server room aircon failure.

 

Its just one facet 

[SchoolsBroadband]

Hello @Alastairb25 

 

We can do Starlink via our infrastructure so your firewalling and filtering still work or we can simply add a port that runs NAT on the Mikrotik router that doesn't touch our ISP infrastructure.

 

There are pro's and conn's of doing both.

 

If you give your account manager a call they'll probably get one of our Technical Account Managers to call you back. 

 

Thanks

 

Dave

 

[PaddyNewman]

On 04/06/2026 at 13:26, Alastairb25 said:

Agreed, very unlikely. 

Starlink seems interesting due to not being tied to a provider or existing infrastructure

 

That said we are also looking at other angles such as poor UPS run time due to battery capacity, server room aircon failure.

 

Its just one facet 

 

Worth noting Starlink do not subscribe to IWF nor CTIRU/PIPCU. Its as raw as raw can be, ideally you want traffic to go over it via a tunnel to a filtered endpoint, nuke the local wireless etc.