You might not even need it, depending on where you are in the world. Starlink assigns IPv6 addresses differently than they assign IPv4 addresses, so you could potentially use dynamic DNS as long as you stick to IPv6 for all of your services. Still a violation of the Starlink TOS, of course, but who hasn’t engaged in a little light TOS violation from time to time?

I knew when you described being behind CGNAT that you were talking about Starlink. Starlink isn’t necessarily a solution to your problems. I have it, and it’s recently been pretty slow where I am, and their support is famously difficult to work with. If you have a terrestrial option, it’s probably worth taking a good look at whether you really want Starlink. A few hours of reading in r/starlink may be able to help.

For your other issue, it seems like the best answer is for your employer to provide a VPN (a real VPN, hosted by the employer, not some janky BorgVPN thing whose only purpose is paying YouTubers to lie about what people use their service for.) That has the additional advantage of greatly simplifying the whitelist, which is good for security.

What is that FlexLOM card? It looks like a 530FLR dual-SFP+ module, which is a bit of an upgrade from the standard, plus maybe a 331T in a PCIe slot?

I currently have the 5-port gigabit switch version of this in use in my wiring closet, as I’ve just moved to a new house and needed a switch to get online for work, but my rack is still in pieces in the garage and I haven’t found the box that contains all of my Cisco workgroup switches.

Ooh, that’s a nice switch. Still going for a bit more than the ProCurve, though, especially with the network module, so I guess I’ll try to be happy with what I’ve got.

Thanks!

Unrelated to the question, but what models were the switch and network card? I looked a long time for an affordable secondhand Cisco switch with more than 2 SFP+ slots before I bought my jet engine pretending to be a ProCurve 6600, and I’d like to know which one I missed.