[189736] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Netflix VPN detection - actual engineer needed

daemon@ATHENA.MIT.EDU (Spencer Ryan)
Mon Jun 6 11:03:18 2016

X-Original-To: nanog@nanog.org
In-Reply-To: <2a51a7ac36d54b59b4c06a696358402b@pur-vm-exch13n2.ox.com>
Date: Mon, 6 Jun 2016 11:03:16 -0400
From: Spencer Ryan <sryan@arbor.net>
To: Matthew Huff <mhuff@ox.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

As an addendum to this and what someone said earlier about the tunnels not
being anonymous: From Netflix's perspective they are. Yes HE knows who
controls which tunnel, but if Netflix went to HE and said "Tell me what
user has xxxxx/48" HE would say "No". Thus, making them an effective
anonymous VPN service from Netflix's perspective.


*Spencer Ryan* | Senior Systems Administrator | sryan@arbor.net
*Arbor Networks*
+1.734.794.5033 (d) | +1.734.846.2053 (m)
www.arbornetworks.com

On Mon, Jun 6, 2016 at 10:59 AM, Matthew Huff <mhuff@ox.com> wrote:

> Netflix IS acting in their user's best interest. In order to provide
> content that the user's want, the content providers have mandated that they
> do their due diligence to block out of region users including VPN and open
> tunnel access. As Hulu and Amazon prime become more popular and their
> contracts with the content provides come due, they will have to also.
>
> You can argue about the content provides business model all you want, but
> Netflix has to do what they are doing. They aren't blocking IPv6 users,
> they are blocking users that are using VPNs and/or tunnels since their
> currently is no practical way of providing GEOIP information about that
> users that the content providers require.
>
>
> ----
> Matthew Huff             | 1 Manhattanville Rd
> Director of Operations   | Purchase, NY 10577
> OTA Management LLC       | Phone: 914-460-4039
> aim: matthewbhuff        | Fax:   914-694-5669
>
> > -----Original Message-----
> > From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Scott Morizot
> > Sent: Monday, June 6, 2016 10:50 AM
> > To: Mark Tinka <mark.tinka@seacom.mu>
> > Cc: NANOG list <nanog@nanog.org>
> > Subject: Re: Netflix VPN detection - actual engineer needed
> >
> > I have Hulu Plus and Amazon Prime. The only thing I would miss from
> > Netflix
> > is their Marvel original series. And I can live with that. I can't live
> > without my IPv6 enabled home network and Internet connection since
> > that's
> > an essential part of my job. (I'm the IPv6 transition technical lead
> > for a
> > large organization.) While I actually manage my home internet gateway
> > through a linux server and have fine-grained control over the firewall
> > rules, I'm still debating whether I care enough about a handful of
> > series
> > to continue paying a company that is deliberately acting against its
> > users'
> > interests. Right now I'm leaning toward no. But I'll discuss it with my
> > wife before making a final decision.
> >
> > Scott
> >
> > On Mon, Jun 6, 2016 at 8:03 AM, Mark Tinka <mark.tinka@seacom.mu>
> > wrote:
> >
> > >
> > >
> > > On 6/Jun/16 01:45, Damian Menscher wrote:
> > >
> > > >
> > > > Who are these non-technical Netflix users who accidentally stumbled
> > into
> > > > having a HE tunnel broker connection without their knowledge?  I
> > wasn't
> > > > aware this sort of thing could happen without user consent, and
> > would
> > > like
> > > > to know if I'm wrong.  Only thing I can imagine is if ISPs are
> > using HE
> > > as
> > > > a form of CGN.
> > >
> > > There are several networks around the world that rely on 6-in-4
> > because
> > > their local provider does not offer IPv6.
> > >
> > > Mark.
> > >
>

home help back first fref pref prev next nref lref last post