Your Ship Has Five Networks. What Should Still Work When the Cloud Disappears?

🔔 Subscribe to ShipUniverse Weekly →

Maritime Infrastructure Decision Report

When Starlink Is No Longer Enough for a Connected Ship

Starlink, OneWeb, VSAT, Iridium and 5G are turning vessel connectivity into core infrastructure. The harder decision is no longer how to get the ship online. It is deciding which systems are allowed to depend on being online.

Example modern vessel stack
Five links do not eliminate the need for an offline ship.
Connectivity redundancy and computing resilience solve different failure modes.

A ship can now carry more communications capacity than some shore offices had a decade ago. But abundant bandwidth creates a new architectural risk: software that once ran independently onboard can quietly become dependent on cloud APIs, shore databases, remote support and continuous authentication.

Royal Wagenborg's fleetwide programme shows where the market is heading. Around 160 ships will use an integrated combination of Starlink, OneWeb, Ku-band VSAT, Iridium Certus and 5G, supported by common onboard IT infrastructure and cybersecurity.

The next design question sits one layer deeper. If the fast link fails, a region blocks one provider, satellite capacity degrades or the ship deliberately isolates itself during a cyber event, which applications still have to operate locally with no shore connection at all?

Wagenborg rollout
~160
Owned and managed general cargo vessels in a multiyear integrated IT programme.
Connectivity paths
5
Starlink, OneWeb, Ku-band VSAT, Iridium Certus and 5G.
OneWeb constellation
600+
LEO satellites in Eutelsat's current global network.
Iridium Certus 700
704 kbps
Maximum published downlink speed, illustrating its different resilience role from broadband LEO.

Shipping is moving from buying internet to designing infrastructure

Old question

How much bandwidth does the ship need?

Buy a connection

VSAT serves business traffic, email and crew communications. Most important vessel applications remain fundamentally local.

→
New question

Which network should each workload use?

Design a digital system

Cloud applications, remote OEM support, live telemetry, crew traffic, cybersecurity and onboard analytics compete for multiple network paths.

The architectural shift
The antenna is no longer the system. The system now includes connectivity orchestration, onboard switching, identity, segmentation, cybersecurity, edge compute, storage, cloud services, remote access and the application itself.

Wagenborg is building the stack at fleet scale

Royal Wagenborg + De Boer Marine

One digital framework across roughly 160 ships

The programme combines communications, vessel IT and cyber controls rather than treating each as a separate project.

LEO 01 Starlink

High-throughput broadband for cloud access, large transfers, remote work and crew traffic.

LEO 02 OneWeb

A second independent LEO path adds coverage, supplier diversity and another high-performance route.

Satellite Ku VSAT

Existing satellite infrastructure remains useful as part of a hybrid architecture rather than disappearing with LEO.

Resilience Iridium

Lower-throughput L-band connectivity provides another global communications layer for critical traffic and fallback.

Near shore 5G

Terrestrial bandwidth can take over when the vessel enters suitable coastal, terminal or port coverage.

Cyber controls Firewalling · intrusion prevention · web filtering · endpoint management · secure remote access
Network visibility LinQontrol monitors and visualises onboard communications data

The winning architecture does not ask every network to do the same job

Starlink / OneWeb
Broadband LEO
Best suited to bandwidth-heavy cloud applications, remote technical support, video, large file transfer, crew welfare and frequent operational synchronisation.
Primary broadband
Ku VSAT
Alternate satellite
Offers additional diversity and can remain valuable where equipment, coverage, contracts or operational requirements make GEO capacity useful.
Resilience layer
Iridium Certus
Global L-band
Much lower throughput than broadband LEO, but global L-band service is useful for resilient operational communications, messaging and narrow critical data flows.
Critical fallback
5G
Port / coastal terrestrial
High-capacity terrestrial connectivity can support bulk synchronisation, remote inspection, video and low-latency applications when the ship is within network coverage.
Opportunistic high speed
Edge compute
No external link
Local compute, cache and storage allow applications to keep working, filter raw data and defer synchronisation when every external path is poor or intentionally isolated.
Last resilience layer
Multi-network does not mean load everything everywhere
The highest-value architecture routes traffic by operational requirement. Crew streaming does not need the same network policy as an engine alarm. A chart update does not need the same latency guarantee as onboard machine vision.

The cloud-versus-edge decision becomes a consequence-of-failure test

Edge first

Keep it onboard when delay or outage matters

Real-time anomaly detection

Machinery alarms should not wait for a round trip to a cloud service before the ship sees the result.

Machine vision

Video can be analysed locally and only events, clips or metadata transmitted ashore.

Local operational dashboards

Crew should retain essential situational awareness when external connectivity fails.

Cyber monitoring

Local detection remains valuable during network isolation or an incident involving shore connectivity.

Store-and-forward data

Buffer sensor data locally and synchronise when a suitable link returns.

Cloud first

Move it ashore when fleet context matters

Fleet benchmarking

Comparing one ship against 100 others requires central access to normalized fleet data.

Enterprise reporting

Emissions, finance, maintenance and compliance workflows often need shore-side integration.

Long-term analytics

Large historical datasets and cross-fleet model development suit central infrastructure.

Collaboration

OEMs, shore engineers and operations centres need shared access to selected vessel information.

Software distribution

Shore infrastructure can manage versioning and packages while the ship controls when they are safely deployed.

Hybrid is not indecision
A well-designed hybrid system may run the operational algorithm onboard, transmit only the result ashore, aggregate the result across the fleet in the cloud, train a better model centrally and then send an approved new model back to the ship.

Resilience has four different layers

Level 01

Fast link fails

Traffic moves from one LEO provider to the second provider or another broadband path.

Level 02

Broadband degrades

Non-critical traffic is delayed while selected operational data moves over a narrower fallback connection.

Level 03

External links disappear

Edge applications continue locally, data queues onboard and the crew retains essential functionality.

Level 04

Network isolated deliberately

During a cyber event, the vessel may need to operate safely while shore connectivity is intentionally restricted.

The design mistake
Adding a backup satellite does not fix a cloud-dependent application. If every communications path fails and the software itself cannot function locally, the ship still loses the application.

Put each workload where failure hurts least

ShipUniverse workload placement matrix Architecture guidance, not class rules
Workload Primary compute Cloud role Connectivity need Outage tolerance
Engine anomaly detection Onboard analysis. Fleet trends, model improvement and shore diagnostics. Moderate after event detection. Must run offline
Bridge machine vision Local video processing. Event review, training data and fleet safety analysis. High only if raw video leaves ship. Must run offline
Remote OEM troubleshooting Local control remains onboard. Shore expert reviews telemetry and diagnostics. High during session. Graceful degradation
Voyage optimisation Local voyage plan and fallback. Weather, optimisation models and fleet operations. Periodic updates rather than continuous dependency. Hybrid
Emissions reporting Local data collection and buffering. Reporting, aggregation and regulatory workflow. Delay tolerant. Cloud leaning
Crew internet Local access control. Internet application traffic. High bandwidth, low operational criticality. Can stop
Fleet benchmarking Minimal onboard processing. Central comparison and analytics. Periodic bulk synchronisation. Cloud first

More networks create resilience and more doors

Integrated cyber architecture

Connectivity is now inside the security boundary

Bureau Veritas' 2026 cyber type approval of NexusWave examined onboard ICT architecture, network equipment, orchestration and managed edge infrastructure together rather than validating a modem in isolation.

Segmentation Crew traffic should not share trust with operational systems
High-bandwidth crew access increases traffic volume and device diversity, making network zones and policy enforcement more important.
Remote support More connectivity makes OEM access easier
That is operationally valuable only if identity, approval, logging and scope of remote access are tightly controlled.
Orchestration Traffic routing becomes a cyber control
Network policy determines which systems can use which links, where data is allowed to go and what survives a degraded state.
Edge Local compute must be managed like infrastructure
Virtual machines, local applications, credentials, backups and software versions become part of the vessel's attack and recovery surface.

The difficult part is not connecting one ship. It is keeping 160 ships identical enough to manage.

160×

Configuration problem

A firewall policy, local application or remote-access rule has to be deployed consistently across many vessel classes, ages and hardware generations.

5

Connectivity domains

More paths improve availability but also create contracts, terminals, routing policies, firmware and monitoring that must be controlled fleetwide.

1

Operating model

The value comes when shore IT sees the fleet as one managed environment instead of 160 individually configured floating offices.

Standardisation is the multiplier
Wagenborg itself operates roughly 160 dry-cargo vessels across dozens of vessel types. A common digital stack does not make the hulls identical, but it can make connectivity, cyber policy, remote support and monitoring far more repeatable.

5G changes what happens when the ship gets close to shore

Satellite connectivity will remain essential offshore, but terrestrial maritime networks can become a high-capacity synchronisation zone around ports. Singapore completed Maritime 5G coverage across its major fairways, anchorages, terminals and boarding grounds in 2025 and explicitly cites remote inspections, autonomous operations, digital bunkering and other real-time applications as use cases.

That creates an architecture opportunity. A vessel does not necessarily need to transmit every large dataset continuously at sea. High-volume files, software packages, inspection video or stored sensor data can be prioritised for a terrestrial window when suitable coverage is available.

This is where edge storage becomes economic
An edge architecture does not merely protect against an outage. It can deliberately postpone low-priority data movement until a cheaper, faster or operationally preferable connection becomes available.

Cloud vs Edge Vessel Architecture Simulator

Select a shipboard workload and change its data volume, latency requirement, operational criticality and offline requirement. The model estimates how much processing should remain onboard, how much data needs to cross the satellite link and what network hierarchy best fits the workload.

ShipUniverse Workload Placement Console

Should this application live in the cloud, at the edge or both?

The model is intentionally architectural rather than vendor-specific. It treats bandwidth, latency, continuity, data sensitivity and fleet-value as competing design requirements.

Hybrid architecture model
Workload profile
Data strategy
Share of raw daily data that must eventually reach shore.
Connectivity
Recommended architecture
EDGE-FIRST HYBRID

Run the operational logic onboard and synchronise selected results and history to the cloud.

Edge placement 73%
Cloud placement 27%
Upload after filtering 4.0 GB/day
Local storage 560 GB
Connectivity resilience High
Offline requirement Mandatory
Compute placement
Onboard edge
73%
Shore cloud
27%
Suggested network hierarchy
1
LEO broadband
routine sync
2
Alternate LEO / VSAT
failover
3
L-band
critical messages
4
Local edge
no link required
Architecture interpretation Connectivity improves the application. It must not be required to keep it alive.

The entered workload is operationally important and must survive an external-network outage, while its fleet-wide data still has substantial shore-side value.

ShipUniverse architecture screening model only. Percentages are analytical placement scores, not literal CPU utilisation or a class requirement. The model does not predict satellite availability, bandwidth, latency or cyber risk. Actual architecture should consider equipment certification, vendor requirements, class, flag, SOLAS functions, data sovereignty, network coverage, software support, operational safety and the consequences of losing both connectivity and shore services.

The connected ship is becoming a distributed computer

The first stage of maritime connectivity put email and internet aboard. The second stage gave ships enough bandwidth to behave like remote branch offices. The current stage is different: shipboard applications, edge compute, cloud services, cybersecurity and several network providers are beginning to operate as one distributed technology environment.

That makes the cloud-versus-edge decision an operational design decision. The wrong architecture can leave an application unavailable when the crew needs it most. The right one allows the ship to continue locally, reduce its data before transmission, use the best connection available and synchronise with the fleet when the network permits.

The next maturity test
A digitally mature vessel is not the ship that sends the most data ashore. It is the ship that knows which data must leave, which decisions must remain onboard and which functions still work when every external link is gone.
Research basis: De Boer Marine and Digital Ship reporting on Royal Wagenborg's 2026 fleetwide connectivity, IT and cybersecurity rollout; Digital Ship's 13 October 2026 Cloud vs Edge analysis and August 2026 Multi-LEO feature; Marlink XChange NextGen edge-cloud platform and Sealink Multi-LEO service; Eutelsat OneWeb maritime and constellation information; SpaceX Starlink maritime specifications; Iridium Certus and Certus 700 specifications; Inmarsat Maritime / Viasat NexusWave Bureau Veritas IACS UR E27 cyber type approval; Lloyd's Register and Marlink digital-transformation research; Singapore MPA Maritime 5G programme; and IACS cyber-resilience requirements. Workload placement recommendations and simulator scores are ShipUniverse analytical models.
Feedback Welcome

We welcome your feedback, suggestions, corrections, and ideas for enhancements.

Please click here to get in touch
By the ShipUniverse Editorial Team — About Us | Contact