The DataHub can support satellite devices besides Iridium. Though very expensive to set up (US$5000+), with high monthly access fees (US$200-300+) for a few megabytes of data, some vessels still use these systems as a primary connectivity device or a backup for Starlink.

At up to 150 Kbs the FleetOne Inmarsat system is up to twice as fast as a GO exec.

When using a system like this with a DataHub, the primary concern of the owner is to limit traffic through it to only what is strictly necessary from the DataHub, ie. they want it to allow GPS Tracking, AI Polars, PredictMail and the Offshore App to work only.

With a FleetOne system connected via Ethernet to the WAN port of the DataHub, and Starlink via 2.4Ghz Wi-Fi, the DataHub firewall should be configured like this:

Block WAN - Enabled - to stop unwanted WAN traffic from being sent/received by the DataHub. This setting blocks all WAN traffic except what is allowed by the Firewall.

Internet Priority - In this case, Starlink was on Wi-Fi, so the customer wanted the DataHub to use Wi-Fi First then WAN, to fall back on WAN (FleetOne) only if Starlink is powered off. The default is WAN First then Wi-Fi. This would have suited if the FleetOne was on Wi-Fi and Starlink was connected via WAN Ethernet.

Firewall Priority - Wi-Fi Open / WAN Blocked is selected because this allows all traffic to flow through the Wi-Fi network (Starlink) and blocks all traffic through the FleetOne except what is specifically allowed by the DataHub Firewall (GPS Tracking, AI Polars, PredictMail).

Block DNS - Enabled to stop devices on the network being able to lookup domain names e.g. WhatsApp looking up the WhatsApp server name, a webbrowser looking up the website IP address for Google.com - which it cannot connect to anyway. This prevents a lot of unwanted network traffic from being sent via the FleetOne system.

Whitelist Domains - by default, the DataHub Whitelists all its own apps for use. This includes GPS Tracking, AI Polars, PredictMail, PredictChat, OHA, Whale Watch, AIS to Internet. It is important to enable only the services you want used via FleetOne.

This field only allows you to enter domain names, not IP addresses, so if you want things like WhatsApp or the Offshore App to work, the domain name for the servers needs to be added here. In this case, to allow the Offshore App, the following servers were added:

In the Offshore App, to use this via the FleetOne when Starlink is offline: connect to DataHub Wi-Fi and select Download Method: Web.

If you added Google.com this would allow Google web searches, for other services, find out the server DNS addresses, and add these.

A full list of other DataHub Firewall services and IP addresses can be seen here: DataHub - IPs, Ports & Protocols used by DataHub Apps for Firewall Config.