India Weighs Hardware Security Layer for Starlink and Other Foreign Satellite Networks

A proposed checkpoint for satellite traffic

India is discussing a small hardware device that would require traffic carried by Starlink and other foreign satellite providers to pass through a security layer under Indian control. The appliance could sit at a customer's premises or at a satellite ground station, giving authorities another means of enforcing domestic routing and security requirements.

The proposal remains under discussion among government departments. Officials are considering public sector research and development organisations with communications expertise to build it, while leaving room for selected private companies to participate. No implementation date, technical specification or supplier has been announced. The communications ministry did not respond to questions about the proposal.

The debate comes after India granted satellite service authorisations to three companies: OneWeb India Communications, JIO Satellite Communications and Starlink Satellite Communications. In an answer to Parliament dated 5 August 2026, the Department of Telecommunications said security clearance depends on successfully demonstrating compliance with licence conditions.

For customers, the practical issue is when those authorisations will turn into connections they can actually buy. For the government, the question is whether Indian authorities can control traffic, enforce lawful monitoring and direct service restrictions during an emergency when the satellites belong to a network operated abroad.

The proposed appliance would add a physical enforcement mechanism to a wider framework already centred on Indian gateways, domestic network control and traceable user terminals. Its place in that framework matters: a licence, a security demonstration and permission to use radio frequencies are separate parts of bringing a satellite service into operation.

What would the hardware do?

An official familiar with the discussions described the proposed device as a checkpoint through which satellite communications would have to travel:

All satellite traffic will have to pass through this hardware, which is likely to be a small appliance that can be placed at the subscriber end or at the satellite ground stations.

A subscriber terminal is the equipment a customer uses to connect to a satellite. A gateway is a larger ground station that connects the satellite network to networks on Earth. Placing a control device at either point could give India a domestic location at which to enforce its requirements.

Officials describe the aim as creating a sovereign security architecture, meaning controls that Indian authorities can enforce within their own jurisdiction. Their concern is that a large foreign network could otherwise route communications or make service decisions beyond India's effective reach.

The technical design will determine how much the appliance can do. A device that checks traffic routing has a different job from equipment that manages customer access or carries out authorised interception. Those functions already appear in India's wider satellite regulation debate.

Three operators face the same clearance process

The government's most concrete account of the licensing position appears in its answer to Parliament on Lok Sabha Unstarred Question No. 2902, submitted by S Venkatesan. Minister of State for Communications and Rural Development Dr. Pemmasani Chandra Sekhar listed all three companies as holding Global Mobile Personal Communications by Satellite authorisations for the national area.

The minister explained the remaining security requirement:

Security clearance to these licensees is subject to successful demonstration of compliance with the stipulated security and technical conditions of license.

The answer also listed 11 companies with Commercial VSAT CUG authorisations, a separate category for satellite networks serving closed groups of users. Starlink, OneWeb, JIO Satellite Communications and Inmarsat India were among them. The figures show that the three companies seeking broader satellite internet services sit within a larger authorised satellite communications sector.

Government officials say Starlink's reluctance to meet requirements for domestic infrastructure has delayed its launch. Starlink has claimed it designed its Indian operations to meet security and data localisation requirements. Authorities say the same security conditions apply to Starlink, OneWeb and Jio, rejecting allegations of discriminatory treatment.

The Telecommunications Act, 2023 provides for administrative assignment of spectrum for specified satellite services. Spectrum means the radio frequencies used to carry signals. Administrative assignment puts allocation through the applicable government process rather than an auction for those services.

The documents behind the debate

India's policy discussion has developed through several dated steps, moving from the structure of network authorisations to company compliance and a public dispute over market entry.

• 3 July 2025: The Department of Telecommunications asked TRAI to develop terms for a proposed Satellite Communication Network authorisation, including spectrum for gateway and customer links.
• 8 April 2026: TRAI's consultation paper set out the proposed network framework and draft technical and security conditions.
• 23 June 2026: The government notified the Telecommunications (Authorisation for Provision of Principal Telecommunication Services) Rules, 2026.
• 5 August 2026: The government confirmed in Parliament that OneWeb, Jio Satellite and Starlink held national GMPCS authorisations, with security clearance dependent on compliance demonstrations.
• 7 October 2026: Elon Musk publicly accused Indian business interests of obstructing Starlink's entry.
• 14 October 2026: Ukrainian military units reported satellite connection interruptions, bringing service control during conflict back into focus.

The hardware discussions add another element to that process. They concern how requirements might be enforced through equipment, while the regulatory documents address who may operate networks and what obligations those networks must meet.

Why India wants traffic routed through Indian gateways

TRAI's satellite network consultation contains draft rule 64, which would require traffic originating or ending at terminals in India to pass through an Indian gateway and associated domestic telecommunications network.

The draft goes further than requiring a local gateway during normal operation. It would prohibit sending Indian terminal traffic through foreign gateways even when an Indian gateway fails or an operator is trying to improve network performance. It would also bar copying user traffic to satellite systems or servers abroad and require monitoring in real time.

Starlink's satellites can pass information between one another before sending it down to Earth. Those links help explain the government's concern: traffic from an Indian customer could otherwise travel through several satellites and reach a gateway outside India. The draft rules seek to keep the point where that traffic enters the terrestrial network inside the country.

Direct communication between customer terminals through satellites would also have to pass through a gateway. A connection between two terminals in India would therefore remain subject to the domestic routing controls.

Draft rule 66 places the operation, maintenance and control facilities for gateways, terminals and associated networks in India. It also requires interception and monitoring capabilities, including monitoring based on geographic location. These provisions are part of the proposed framework presented for consultation.

Who controls the equipment that manages a connection?

TRAI's consultation identifies baseband equipment as a central point of control. This equipment turns processed satellite signals into usable communications and manages functions such as customer addresses, service plans, connection speeds and network resources.

A gateway provides the physical connection between space and ground networks. Its baseband system helps decide how that connection is used. That makes ownership and access to the system important to any attempt to give Indian service providers effective control.

TRAI had recommended a Satellite Earth Station Gateway Provider Authorisation under Section 3(1)(b) of the Telecommunications Act, 2023. Under that approach, a gateway provider would supply infrastructure to eligible entities authorised to provide services. TRAI recommended that the service entity own the baseband equipment, while allowing the gateway provider to install it on that entity's behalf.

The Department of Telecommunications subsequently proposed the broader Satellite Communication Network authorisation. Under the model described in the consultation, a network provider could obtain satellite capacity, build gateways and supply network access commercially to authorised service providers. It could not sell telecommunications services directly to users under that authorisation.

TRAI asked whether network providers should have to extend control, visibility and resource management capabilities to their partner service providers on mutually agreed terms. The proposed security appliance belongs alongside this wider discussion about who can operate the controls, inspect the network and enforce decisions.

Terminals, monitoring and domestic manufacturing

Security requirements described for GMPCS licensees include domestic Network Control and Monitoring Centres, gateways and Points of Presence, the locations where a provider connects its network to other networks. Operators must integrate lawful interception systems with the government's Centralised Monitoring System and Integrated Monitoring System and demonstrate those capabilities before commercial launch.

Terminal records are expected to contain precise coordinates, device identifiers, equipment and subscriber numbers, and public and private internet addresses. For terminals used while moving, the reported requirements call for location updates after every 2.6 kilometres of movement or every minute. Equipment or software that falsifies a terminal's location is prohibited.

Retired Lieutenant General Kamal Davar, the first Director General of India's Defence Intelligence Agency, described further security provisions in his 15 October 2026 satellite security analysis for the Observer Research Foundation. He said terminals must be registered and authenticated, with geographic restrictions and closer monitoring within 50 kilometres of land borders and up to 200 nautical miles offshore.

Davar also described requirements for operators to block or suspend service to specified users or areas during hostilities or emergencies. For customers near sensitive locations, the permitted area of use and the operator's ability to restrict a terminal would therefore be practical conditions of access.

Domestic manufacturing is another part of the framework. Draft rule 66(15) in TRAI's consultation calls for a plan targeting Indian production and procurement of at least 20% of the value of ground segment goods within five years of commercial launch. That target concerns equipment on the ground, rather than the satellites themselves.

Emergency control has a longer policy history

The Department of Space's satellite policy guidelines state a long term objective of operating India's communications infrastructure through systems controlled by India. They also require security concerns to be considered when authorising an Indian registered satellite system.

For systems covered by those provisions, Satellite Control Centres should be in India, subject to a technical exception authorised by the relevant committee, CAISS. Where a control centre is overseas, the document requires its transfer to India within a period set by the committee, capped at two years after licensing, with no other control centre remaining abroad.

A Satellite Control Centre manages the spacecraft, including its movement and key technical functions. A communications gateway carries customer traffic between the satellite system and terrestrial networks. Both involve control, but they perform different jobs.

Clause 3.7.4.7 reserves the Department of Space's right to take over a licensee's system, equipment and networks, partly or wholly, during emergency, war, low intensity conflict or other public interest circumstances declared by the government. Clause 3.7.4.8 allows security conditions to be changed or added.

For foreign satellite operations, clause 4.4.1 requires consultation with the Department of Space before authorisation. Clause 4.4.6 requires the licensing process to address security and international coordination of frequencies and orbits. The current hardware proposal gives a more specific technical form to India's longstanding demand for enforceable control.

Ukraine and the argument over dependence

Indian officials have taken note of complaints about Starlink in Iran, Namibia and South Africa concerning services allegedly offered without necessary permission. They have also cited Ukrainian President Volodymyr Zelenskyy's accusation that restrictions and slower connections impeded Ukraine during its conflict with Russia.

The Ukrainian drone disruptions reported on 14 October included interruptions lasting 10 to 20 seconds. Ukrainian officials said unexpected restrictions complicated missions and military logistics. Musk said the restrictions involved Starshield, the government version of the service, and attributed its limits to the United States military and president.

Those competing descriptions matter to India's debate because officials want clarity over who can change access during a crisis. A connection used to guide a drone, coordinate logistics or maintain emergency communications can become unusable when a restriction interrupts it for even a short period.

Musk's market entry accusations put competition at the centre of the dispute. The government responded that all three satellite licensees faced a common security process. Davar's analysis also noted that Airtel and Jio had signed distribution arrangements with SpaceX, subject to government approval, making them prospective partners as well as backers of competing services.

Davar said Starlink had reportedly built around 20 gateway sites in India. His analysis also described a proposed spectrum allocation lasting five years, with a usage charge of 5% of adjusted gross revenue and a reduction of one percentage point for operators serving rural and remote areas. On those figures, the reduced charge would be 4%. Both the commercial framework and the security requirements will shape the eventual service.

What this means for people waiting for connectivity

Rural, border, tribal and island communities are the intended beneficiaries identified in the government's parliamentary answer. Satellite connections can reach places where laying fibre or building terrestrial links is difficult, including mountainous terrain and isolated settlements.

India is trying to make those connections available while retaining domestic authority over routing, monitoring and emergency decisions. For providers, that means building and demonstrating compliant infrastructure before commercial deployment. For prospective customers, it means the wait involves more than receiving a dish or finding a satellite overhead.

The proposed hardware layer brings those aims together at a physical checkpoint. Its eventual design, approval and relationship with existing gateway equipment will determine how it fits into the network. The next practical steps remain the government's decisions on the proposal and operators' completion of the required security and spectrum processes.

Key Points

• India is discussing a hardware appliance through which foreign satellite providers' traffic would have to pass.
• The device could be installed at customer premises or satellite ground stations.
• OneWeb, Jio Satellite and Starlink hold national GMPCS authorisations, with security clearance dependent on compliance demonstrations.
• TRAI's proposed network framework requires Indian gateways, domestic control facilities and monitoring capabilities.
• A draft manufacturing target calls for at least 20% of ground equipment value to be produced and procured in India within five years of commercial launch.
• Security demonstrations and spectrum assignment remain central to making commercial services available.