Reliable and controlled Internet connectivity at sea
Providing Internet access on a ferry, cruise vessel, yacht, or offshore platform is fundamentally different from providing connectivity on land.
Available bandwidth can change dramatically as the vessel moves between connectivity systems. Satellite links may have limited capacity or high costs, while cellular, Wi-Fi, or other terrestrial links may be available only in specific areas. At the same time, dozens or thousands of passengers and crew members may be competing for the available bandwidth.
ntop provides the visibility, bandwidth control, and multi-WAN capabilities needed to keep maritime Internet services usable and predictable.
One Internet connection, many competing users
A vessel’s Internet connection is shared by many different types of users and services.
Passengers may be browsing the web, streaming video, using social media, making video calls, or downloading large files. Crew members may need connectivity for operational applications, administration, communications, and business systems.
Without bandwidth control, a small number of users can consume a disproportionate amount of the available capacity and degrade the experience for everyone else.
nEdge acts as an inline network traffic policer, allowing operators to control how available bandwidth is shared between users and devices.
Bandwidth policies can be applied per user, device, application, or protocol, allowing operators to implement policies such as:
- Guarantee bandwidth for crew and operational systems.
- Give passengers a fair share of the available bandwidth.
- Apply different limits to different customer plans.
- Reserve bandwidth for business-critical applications.
- Throttle bandwidth-intensive applications.
- Prevent a small number of users from monopolizing the connection.
nEdge provides both maximum bandwidth limits and minimum guaranteed bandwidth, together with fair bandwidth sharing and Layer-7 application policies.
Multi-WAN connectivity
Maritime networks commonly use multiple Internet connections with very different characteristics.
Depending on the vessel and location, connectivity may include:
- Satellite connectivity
- Cellular/4G/5G connectivity
- Port or shore-side Wi-Fi
- Other terrestrial connections
- Multiple satellite providers or links
These connections can differ significantly in bandwidth, latency, availability, and cost.
nEdge Enterprise can operate as a router with multiple WAN interfaces, allowing traffic to be routed according to configurable policies. It supports load balancing and automatic failover, including monitoring gateway reachability and excluding unavailable gateways.
This makes it possible to implement policies such as:
Use shore Wi-Fi when available → fall back to cellular → use satellite when other connectivity is unavailable.
Or:
Use the most economical connection for standard passenger traffic → reserve premium connectivity for crew and operational services.
Control bandwidth according to the connectivity available
The available bandwidth at sea is not constant.
For example, a vessel may have:
- High-capacity shore connectivity while in port
- Fast cellular connectivity near the coast
- Limited satellite bandwidth offshore
The network should adapt accordingly.
nEdge allows the available bandwidth to be configured and controlled at the interface level, while bandwidth classes and policies can be assigned to users and protocols.
This allows operators to maintain predictable service even when the available Internet capacity changes.
Passenger and crew Internet access
A common maritime deployment separates Internet users into logical groups.
Passengers
Passenger traffic can be managed with fair bandwidth sharing so that one passenger cannot consume the entire connection.
Operators can also apply application policies to reduce the impact of particularly bandwidth-intensive applications.
Crew
Crew members can receive higher priority or guaranteed bandwidth for operational and personal connectivity.
Critical services
Business-critical applications can be protected by reserving bandwidth and applying dedicated policies.
This approach prevents recreational passenger traffic from affecting the services that the vessel depends on.
Captive portal and user management
When Internet access is offered to passengers, identifying users is often important.
nEdge provides a captive portal that can associate users with their devices and apply the corresponding network policies. Users can be grouped together so that policies can follow the user across multiple devices.
This makes it possible to build different Internet access plans, for example:
- Basic passenger access
- Premium passenger access
- Crew access
- Staff/administration access
- Special operational accounts
Each group can have its own bandwidth and application policies.
Monitor the network while controlling it
Bandwidth control is most effective when combined with traffic visibility.
ntopng provides detailed visibility into traffic, hosts, applications, protocols, and bandwidth utilization. nEdge is based on ntopng and combines network visibility with configurable traffic policies.
Operators can therefore understand:
- Who is using the connection
- Which devices are connected
- Which applications consume bandwidth
- Which WAN connection is carrying the traffic
- When congestion occurs
- Whether traffic behavior changes over time
- Whether policies are producing the expected result
This transforms maritime connectivity from a best-effort Internet service into a managed network service.
Typical maritime architecture
A typical deployment places nEdge at the Internet edge of the vessel:
Satellite / Cellular / Shore Wi-Fi
↓
Multi-WAN nEdge router
↓
Passenger / Crew / Operational LANs
nEdge can route traffic across multiple WAN connections, enforce bandwidth policies, and apply Layer-7 traffic policies.
ntopng can provide additional visibility into the traffic and network behavior, allowing operators to monitor the service from a central management location.
Use cases
Ferries
Ferries can provide passenger Internet access while ensuring that crew and operational systems retain the bandwidth they need.
Multiple connectivity sources can be combined, with policies determining which users and services use each connection.
Cruise ships
Large passenger vessels may have thousands of connected devices. Fair bandwidth allocation and application-aware policies can prevent individual users or applications from degrading service for everyone else.
Yachts
Large yachts increasingly provide Internet access to both passengers and staff. nEdge can manage the available bandwidth and intelligently use multiple connectivity providers, including satellite and cellular connections.
Offshore and commercial vessels
Ships operating far from shore often have expensive or capacity-constrained satellite connectivity. Traffic policies can prioritize operational services and control recreational traffic to keep critical communications available.
Key benefits
- Multi-WAN routing — Combine satellite, cellular, shore Wi-Fi, and other Internet connections.
- Automatic failover — Switch to another gateway when connectivity becomes unavailable.
- Load balancing — Distribute traffic across multiple available connections.
- Bandwidth policing — Control upload and download bandwidth per user, device, or policy.
- Fair sharing — Prevent individual passengers or devices from monopolizing the connection.
- Application-aware policies — Block or throttle bandwidth-intensive Layer-7 applications.
- Captive portal — Authenticate passengers and associate users with their devices.
- User-based policies — Apply different connectivity policies to passengers, crew, and staff.
- Network visibility — Understand exactly how the available bandwidth is being consumed.
- Operational continuity — Protect critical vessel services from passenger Internet usage.
Keep everyone connected, even when bandwidth is limited
Maritime Internet connectivity will always be constrained by the links available to the vessel. The challenge is to make the best possible use of that bandwidth.
With nEdge, operators can combine multiple WAN connections, control traffic at the edge, prioritize important users and applications, and automatically adapt to connectivity failures. Combined with ntopng’s traffic visibility, the ntop platform provides the tools needed to operate a reliable and controlled maritime Internet service.