[118447] in North American Network Operators' Group
Re: ISP/VPN's to China?
daemon@ATHENA.MIT.EDU (Alex Balashov)
Thu Oct 22 05:38:58 2009
Date: Thu, 22 Oct 2009 05:38:00 -0400
From: Alex Balashov <abalashov@evaristesys.com>
To: Chris Edwards <chris@eng.gla.ac.uk>
In-Reply-To: <Pine.SOC.4.64.0910221017110.20354@bowling.cent.gla.ac.uk>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Chris Edwards wrote:
> Doesn't necessarily have to be hugely accurate. The authorities could
> simply identify a few likely suspect tunnels, then knock-on-doors and ask
> you to explain what the traffic in question is...
Understood. I guess the angle I was going more for was: Is this
actually practical to do in a country with almost as many Internet
users as the US has people?
I had always assumed that broad policies and ACLs work in China, but
most forms of DPI and traffic pattern analysis aren't practical simply
for computational feasibility reasons. Not unless the system were
highly distributed.
--
Alex Balashov - Principal
Evariste Systems
Web : http://www.evaristesys.com/
Tel : (+1) (678) 954-0670
Direct : (+1) (678) 954-0671
