Your Backup Internet Keeps You Connected. It Doesn't Keep You Reachable.

Here's a scenario we see a lot.

It's a busy afternoon at a regional Queensland office or worksite. The NBN drops out. The failover does its job — a 4G SIM, a 5G modem, or Starlink picks up — and everyone keeps browsing, emailing and working in the cloud like nothing happened.

Then the phone starts ringing. Head office can't pull up the site cameras. The remote-desktop session into the office server won't connect. The VoIP phones are one-way, or silent. Anyone trying to reach something you host on site — from outside — is met with nothing.

The connection came back. The reachability didn't.

Being connected and being reachable are two different jobs

It's an easy thing to miss, because most of what we do online is outbound. We reach out to websites, cloud apps and email servers, and they answer. Failover restores that in seconds, so everything feels fine.

But a whole class of business services works the other way around. They need the outside world to reach in: security cameras you view remotely, a VPN your staff dial into, a remote-desktop gateway, a phone system, a booking or line-of-business app you host yourself. For those, your site needs a front door — a public address the outside world can knock on.

And that's exactly what the cheap, resilient backup links don't give you.

Why your cameras go dark on a backup link

4G and 5G mobile, Starlink, and a lot of budget NBN plans put you behind something called carrier-grade NAT — CGNAT for short. Instead of your own public address, you share one with thousands of other customers. It's how carriers stretch a limited pool of addresses across everyone.

For outbound traffic it's invisible; browsing and cloud apps don't care. But for anything that needs to reach in, there's simply no door with your name on it. The camera app times out. The VPN won't connect. The remote session hangs.

The worst part is how quietly it fails. Nothing throws an error. Your monitoring might even show the site as "online". Everything looks healthy — right up until the moment someone actually tries to connect from outside. Which, of course, is usually during the outage, usually when it matters most.

Why this bites harder in regional Queensland

In the city, a business might get away with a single fixed line and never think about any of this. Out in the regions, one line is rarely enough. Starlink and mobile backup aren't a luxury here — they're how a lot of businesses stay running when the fixed network has a bad day.

Which means CGNAT isn't an edge case in regional Queensland. It's the default. And the operations that lean hardest on remote cameras, remote access and hosted phones — farms, depots, clinics, multi-site operators — are often the ones most exposed to the blind spot.

What we actually build

The fix is simpler than it sounds. We give your site a permanent front door that doesn't depend on your internet connection at all.

We stand up a small, always-on presence in the cloud with a fixed public address — the address your cameras, VPN and remote-access services point to. Your site then makes a secure, encrypted connection out to it.

That direction is the whole trick. Reaching out is the one thing every connection can do — fibre, NBN, Starlink or 4G, CGNAT or not. So the tunnel rides whichever link happens to be up at the time. When your main line drops and the backup takes over, the tunnel simply re-forms over the backup, and inbound traffic keeps flowing straight through to your services.

Your data stays encrypted end to end — the cloud front door just passes it along, it never gets to read it. There's no rip-and-replace of your existing gear. And when your primary line comes back, it quietly takes over again.

It turns a cheap backup link into a genuinely complete one — inbound included.

When a line goes down completely, we bring Starlink to you

Sometimes it isn't a flicker. A line goes down hard and stays down — a cut cable, a carrier outage, a flood or fire that takes out the local exchange. Repair times in regional Queensland can stretch into days.

For exactly those moments, we keep a ready-to-go Starlink "backpack kit" on the shelf: a portable, rapid-deploy Starlink we can have on your site and online in minutes, not the days you might wait on a carrier truck-roll.

Here's where it all comes together. Starlink is CGNAT too, so on its own it would bring back browsing and cloud apps but leave your cameras, VPN and phones unreachable. Paired with the cloud front door, that's already solved: the backpack Starlink reaches out to it just like your normal link would, so inbound to your critical services is preserved over Starlink's CGNAT as well. You're not just back online — you're fully reachable, on emergency connectivity, often within the hour.

The honest version

No solution is magic, so here's the straight talk.

Routing inbound through a cloud front door adds a small amount of latency — the traffic takes one extra hop. In practice that's a few milliseconds and nobody notices, but it isn't zero. And during a failover you're running on a backup link, so speeds match that link, not your full fibre service. It's degraded-but-working — which, in the middle of an outage, is exactly the point.

The front door is also something that has to stay up, so we treat it as critical: it's monitored continuously, and we design it so that if it ever had a wobble, your primary connection still works normally on its own. We'd rather you knew all of that up front. It's the same reason we document everything we build — no surprises later.

The payoff

Put together, the result is straightforward:

• Your cameras, VPN, remote access and phones stay reachable through an internet failover — not just your browsing.
• A CGNAT or otherwise-limited backup becomes a genuinely complete backup, inbound included.
• If a line goes down entirely, we can have you back online and reachable on a Starlink backpack kit, usually within the hour.
• It's monitored, encrypted end to end, and works with the gear and providers you already have.

A few things worth taking away

• "Connected" and "reachable" aren't the same thing. Test your failover from the outside, not just the inside.
• If your backup is Starlink, 4G/5G or a budget NBN plan, assume it's CGNAT — and assume inbound won't work on it unless someone has specifically handled it.
• The failure is silent. The right time to find out is now, not during the outage.

Start with a free on-site technology review

If your business depends on cameras, remote access, VoIP or hosted apps staying online through an outage, it's worth knowing exactly what stays reachable when your main link drops — and what doesn't.

That's where we start: a free, no-obligation on-site technology review. We'll map your connectivity and failover, show you where the blind spots are, and hand you a plain-English plan to close them.

Talk to the team at DyCom QLD — we'll make sure that when your line has a bad day, your business doesn't.