[189686] in North American Network Operators' Group
Re: Netflix VPN detection - actual engineer needed
daemon@ATHENA.MIT.EDU (Owen DeLong)
Sat Jun 4 14:40:23 2016
X-Original-To: nanog@nanog.org
From: Owen DeLong <owen@delong.com>
In-Reply-To: <D3742ADD-AB17-4935-A45D-8D026019DB4A@matthew.at>
Date: Sat, 4 Jun 2016 11:38:10 -0700
To: Matthew Kaufman <matthew@matthew.at>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
If you=E2=80=99re wife is really worried about $100/year, give up your =
first 2 weeks of Starbucks each year in trade.
Owen
> On Jun 3, 2016, at 18:33 , Matthew Kaufman <matthew@matthew.at> wrote:
>=20
> If early adopter PI IPv6 was the same price as early adopter PI v4 =
space, my wife would be totally on board with this solution.
>=20
> Matthew Kaufman
>=20
> (Sent from my iPhone)
>=20
>> On Jun 3, 2016, at 6:27 PM, Spencer Ryan <sryan@arbor.net> wrote:
>>=20
>> Well if you have PI space just use HE's BGP tunnel offerings.
>>=20
>>=20
>> *Spencer Ryan* | Senior Systems Administrator | sryan@arbor.net
>> *Arbor Networks*
>> +1.734.794.5033 (d) | +1.734.846.2053 (m)
>> www.arbornetworks.com
>>=20
>> On Fri, Jun 3, 2016 at 9:24 PM, Raymond Beaudoin <
>> raymond.beaudoin@icarustech.com> wrote:
>>=20
>>> As an alternative, there are multiple cloud service offerings that =
will
>>> advertise your IPv6 allocations on your behalf direct to a server in =
their
>>> data centers. It seems pretty tongue-in-cheek, and satisfying, to =
turn
>>> up a *<insert
>>> favorite virtual router instance> *and then route through it. The =
Internet
>>> is such an amazing place.
>>>=20
>>> On Fri, Jun 3, 2016 at 8:15 PM, Cryptographrix =
<cryptographrix@gmail.com>
>>> wrote:
>>>=20
>>>> Yeah I RAWRed to them pretty hard whilst being as understanding to =
the CS
>>>> rep that it wasn't their fault.
>>>>=20
>>>> They thought I was weird as anything.
>>>>=20
>>>> If there are any Verizon FiOS network engineers on the thread, a =
fellow
>>>> Verizon employee would thank you kindly for an off-thread email =
regarding
>>>> BGP advertisement (I'll buy the IPv6 block and the drink-of-choice, =
you
>>>> configure my account to listen for route advertisement).
>>>>=20
>>>> Strange that it has to come to this to get "legit" IPv6 service.
>>>>=20
>>>>=20
>>>>=20
>>>>=20
>>>> On Fri, Jun 3, 2016 at 9:08 PM Raymond Beaudoin <
>>>> raymond.beaudoin@icarustech.com> wrote:
>>>>=20
>>>>> I wasn't originally affected on my he.net tunnel, but this evening =
it
>>>>> started blocking. The recommended ACLs are a functional temporary
>>>>> workaround, but I've also opened a request with Netflix.
>>>>>=20
>>>>> On Fri, Jun 3, 2016 at 7:54 PM, Mark T. Ganzer =
<ganzer@spawar.navy.mil>
>>>>> wrote:
>>>>>=20
>>>>>> So far I am not seeing a Netflix block on my he.net tunnel yet. I
>>>>> connect
>>>>>> to the Los Angeles node, so maybe not all of HE's address space =
is
>>> being
>>>>>> blocked.
>>>>>>=20
>>>>>> Not going to be disabling IPv6 here either. + HAD native IPv6 =
from
>>> Time
>>>>>> Warner, but they decided to in their wisdom to disable IPv6 =
service
>>> for
>>>>>> anyone that has an Arris SB6183 due to an Arris firmware bug. =
And
>>> they
>>>>> are
>>>>>> taking their sweet time pushing out the fixed firmware update =
that
>>>>> Comcast
>>>>>> and Cox seemed to be able to push to their customers last fall.
>>>>>>=20
>>>>>> -Mark Ganzer
>>>>>>=20
>>>>>>=20
>>>>>>> On 6/3/2016 4:49 PM, Cryptographrix wrote:
>>>>>>>=20
>>>>>>> Depends - how many US users have native IPv6 through their ISPs?
>>>>>>>=20
>>>>>>> If I remember correctly (I can't find the source at the moment),
>>> HE.net
>>>>>>> represents something like 70% of IPv6 traffic in the US.
>>>>>>>=20
>>>>>>> And yeah, not doing that - actually in the middle of an IPv6 =
project
>>> at
>>>>>>> work at the moment that's a bit important to me.
>>>>>>>=20
>>>>>>>=20
>>>>>>>=20
>>>>>>>=20
>>>>>>> On Fri, Jun 3, 2016 at 7:45 PM Baldur Norddahl <
>>>>> baldur.norddahl@gmail.com
>>>>>>> wrote:
>>>>>>>=20
>>>>>>> Den 4. jun. 2016 01.26 skrev "Cryptographrix" <
>>>>> cryptographrix@gmail.com>:
>>>>>>>>=20
>>>>>>>>> The information I'm getting from Netflix support now is =
explicitly
>>>>>>>> telling
>>>>>>>>=20
>>>>>>>>> me to turn off IPv6 - someone might want to stop them before =
they
>>>>>>>>> completely kill US IPv6 adoption.
>>>>>>>> Not allowing he.net tunnels is not killing ipv6. You just need =
need
>>>>>>>> native
>>>>>>>> ipv6.
>>>>>>>>=20
>>>>>>>> On the other hand it would be nice if Netflix would try the =
other
>>>>>>>> protocol
>>>>>>>> before blocking.
>>>=20
>=20
