A method is implemented by a network device to establish secure communication over a maritime mesh network. The network device is in a local network of a communication system of a vessel in the maritime mesh network. The method includes receiving a communication session request from a local user device to access a remote service, determining whether the remote service is accessible via a terrestrial network available over the maritime mesh network, and establishing a secure tunnel between the network device and the terrestrial network for the communication session, in response to determining the remote service is accessible via the terrestrial network.