Satellite internet reaches places that cables and mobile networks don't, and a VPN works over it, but the nature of the link changes what "fast" means. Geostationary satellites orbit about 35,786 km above the equator, so every round trip takes roughly 600 ms or more; low-Earth-orbit services fly far lower and respond much faster. Traditional geostationary services also speed up web traffic with acceleration that encrypted VPN traffic can't use, which is why a classic VPN can feel slow on them. The answer is to match the orbit to the job, use a VPN that copes with high delay and changing conditions, and plan the site properly. ZoltVPN offers satellite internet as part of its business services, from a team with more than 20 years of experience in satellite internet.
How satellite internet works
A dish or flat terminal at your site talks to a satellite, which relays traffic to a ground station connected to the internet. Where the satellite orbits decides most of what you experience.
| Orbit | Approximate altitude | Typical round-trip delay | Coverage pattern | What it's like to use |
|---|---|---|---|---|
| Geostationary (GEO) | About 35,786 km | Around 600 ms or more | Fixed satellite, very wide area | Fine for email and browsing; noticeable delay on calls |
| Medium Earth orbit (MEO) | Several thousand km | Roughly 100–200 ms | A moving constellation | Closer to terrestrial internet; used by many enterprise services |
| Low Earth orbit (LEO) | Roughly 500–1,200 km | Tens of milliseconds | Many fast-moving satellites | Similar to many fixed lines for everyday use |
These are general physical characteristics. Actual performance depends on the service, the terminal, the weather and how busy the network is.
Why VPNs can struggle on satellite links
Delay and TCP
Most internet traffic uses TCP, which waits for confirmation before sending more data. On a link with 600 ms of delay, each round of confirmation takes a long time, so a single download ramps up slowly. Classic VPN setups that carry everything over TCP, such as OpenVPN in TCP mode, stack one TCP connection on top of another. On a long, lossy link, this "TCP over TCP" effect becomes severe.
Acceleration that encryption bypasses
Geostationary operators have long used performance-enhancing proxies: equipment that splits TCP connections at each end of the satellite hop and confirms data locally, hiding much of the delay. It works by understanding your traffic. Once traffic is encrypted inside a VPN, the proxy can't see the TCP connections inside, so the acceleration stops helping. This is the main reason a VPN can feel much slower on a geostationary link than browsing without one.
Weather and packet loss
Heavy rain and snow weaken the higher-frequency bands that many satellite services use, an effect known as rain fade. Loss rises, and some VPN methods slow down sharply when packets go missing.
Obstructions and handovers
Low-orbit terminals hand over from one satellite to the next frequently, as satellites move quickly across the sky. A tree or building in the way can cause brief drops. A VPN needs to survive these gaps without starting over each time.
Shared addresses
Many satellite services put customers behind shared public addresses. That affects how long idle connections are kept and rules out receiving inbound connections directly.
What helps
- Choose the orbit for the job. If your site depends on calls, video meetings or interactive applications, low or medium orbit makes a large difference. For email, file transfer and monitoring, geostationary can be enough.
- Use a VPN that adapts. ZoltVPN's CyberPort AI chooses between 10 connection models based on your location, your internet provider and live connection performance, and switches automatically when one is blocked or slow. On a satellite link, live measurement matters, because conditions change with weather and handovers.
- Pick a server near the ground station, not near you. Your traffic reaches the internet at the satellite operator's ground station, which may be hundreds of kilometres away. A VPN server near that point keeps the extra path short. Leaving the location on automatic lets the app measure this for you.
- Schedule heavy transfers. Large backups and updates are best run overnight or at quiet times.
- Keep sensitive work encrypted. Satellite links are shared radio links. A VPN, or a site-to-site tunnel to head office, protects traffic across the whole path.
Where satellite internet makes sense
- Remote work sites: construction, mining, energy, agriculture and research stations.
- Backup for offices: a second connection that doesn't share cables with the first, so a dug-up line doesn't cut you off.
- Temporary sites: events, field offices and disaster response.
- Travel and mobility: vehicles and vessels, where supported by the service.
Satellite terminals are licensed differently from country to country, and some countries restrict them. Check local rules before you install or use one.
Planning a satellite site
- Check coverage and sky view. The terminal needs a clear view of the sky in the right direction. Survey trees, buildings and future obstructions.
- Plan power. Remote sites may need battery backup or solar power for the terminal and the network equipment.
- Decide what runs over the link. List the applications, and flag those sensitive to delay.
- Connect it to the rest of the company. A site-to-site VPN lets the remote site reach head office systems privately.
- Consider a fixed address. If head office systems allowlist by IP, a dedicated static IP keeps the remote site's connections recognisable.
- Plan a fallback. Mobile data, where available, can cover outages and bad weather.
Where ZoltVPN fits
ZoltVPN's team has been building internet and network services for more than 25 years, including satellite internet for more than 20. Our business services bring the pieces together: satellite internet for the sites cables don't reach, site-to-site VPN to join them to your network, dedicated static IPs, residential or cloud, and business plans for staff devices. Tell us about your sites on the business page or through the contact page.
FAQ
Can I use a VPN on low-orbit satellite internet?
Generally, yes. Low-orbit services have much lower delay than geostationary ones, so a VPN behaves much as it does on a fixed line, apart from brief interruptions during satellite handovers.
Why is my VPN slow on satellite when browsing is fine without it?
On geostationary services, acceleration equipment speeds up ordinary web traffic but can't see inside an encrypted VPN tunnel. Combined with the long delay, that makes classic VPN setups feel slow.
Is satellite internet secure without a VPN?
Satellite links are shared radio links. Websites using HTTPS stay encrypted, but a VPN or site-to-site tunnel protects all traffic across the path, including systems that don't encrypt on their own.
Can satellite be a backup for our office?
Yes. Because it doesn't depend on local cables, satellite is a common second connection for offices that can't afford to go offline.
Need connectivity where the cables end? Talk to our business team, or download ZoltVPN to try the apps free for 7 days, no card needed.
