Netflix VPN detection - actual engineer needed

Sat Jun 4 18:33:33 UTC 2016

> On Jun 3, 2016, at 18:31 , Cryptographrix <cryptographrix at gmail.com> wrote:
> 
> Honestly I was trying to make that sound like a "missed connections" ad
> there for a moment, but seriously I'd buy a /40 right now if possible to
> have non-tunneled IPv6 if I could.

You can easily get a /48 from ARIN. Not sure why you think you’d need a /40 for home.

I’m a pretty big fan of sparse allocation and tend to be considered an outlier for extreme
home networking and my /48 still has many subnets available.

> It's so weird being on US internet - your content distributor makes you
> feel like a criminal because their content provider has standing orders to
> deny you from viewing the content they provide and the only other thing you
> can do about it is turn off the thing that gives you access to the way you
> make the money to pay for their stuff.

Yep… RIAA and MPAA proving once again that they just don’t get it.

Owen

> 
> 
> 
> On Fri, Jun 3, 2016 at 9:25 PM Raymond Beaudoin <
> raymond.beaudoin at icarustech.com> wrote:
> 
>> As an alternative, there are multiple cloud service offerings that will
>> advertise your IPv6 allocations on your behalf direct to a server in their
>> data centers. It seems pretty tongue-in-cheek, and satisfying, to turn up a *<insert
>> favorite virtual router instance> *and then route through it. The
>> Internet is such an amazing place.
>> 
>> On Fri, Jun 3, 2016 at 8:15 PM, Cryptographrix <cryptographrix at gmail.com>
>> wrote:
>> 
>>> Yeah I RAWRed to them pretty hard whilst being as understanding to the CS
>>> rep that it wasn't their fault.
>>> 
>>> They thought I was weird as anything.
>>> 
>>> If there are any Verizon FiOS network engineers on the thread, a fellow
>>> Verizon employee would thank you kindly for an off-thread email regarding
>>> BGP advertisement (I'll buy the IPv6 block and the drink-of-choice, you
>>> configure my account to listen for route advertisement).
>>> 
>>> Strange that it has to come to this to get "legit" IPv6 service.
>>> 
>>> 
>>> 
>>> 
>>> On Fri, Jun 3, 2016 at 9:08 PM Raymond Beaudoin <
>>> raymond.beaudoin at icarustech.com> wrote:
>>> 
>>>> I wasn't originally affected on my he.net tunnel, but this evening it
>>>> started blocking. The recommended ACLs are a functional temporary
>>>> workaround, but I've also opened a request with Netflix.
>>>> 
>>>> On Fri, Jun 3, 2016 at 7:54 PM, Mark T. Ganzer <ganzer at spawar.navy.mil>
>>>> wrote:
>>>> 
>>>>> So far I am not seeing a Netflix block on my he.net tunnel yet. I
>>>> connect
>>>>> to the Los Angeles node, so maybe not all of HE's address space is
>>>> being
>>>>> blocked.
>>>>> 
>>>>> Not going to be disabling IPv6 here either. + HAD native IPv6 from Time
>>>>> Warner, but they decided to in their wisdom to disable IPv6 service for
>>>>> anyone that has an Arris SB6183 due to an Arris firmware bug.  And
>>>> they are
>>>>> taking their sweet time pushing out the fixed firmware update that
>>>> Comcast
>>>>> and Cox seemed to be able to push to their customers last fall.
>>>>> 
>>>>> -Mark Ganzer
>>>>> 
>>>>> 
>>>>> On 6/3/2016 4:49 PM, Cryptographrix wrote:
>>>>> 
>>>>>> Depends - how many US users have native IPv6 through their ISPs?
>>>>>> 
>>>>>> If I remember correctly (I can't find the source at the moment),
>>>> HE.net
>>>>>> represents something like 70% of IPv6 traffic in the US.
>>>>>> 
>>>>>> And yeah, not doing that - actually in the middle of an IPv6 project
>>>> at
>>>>>> work at the moment that's a bit important to me.
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>> On Fri, Jun 3, 2016 at 7:45 PM Baldur Norddahl <
>>>> baldur.norddahl at gmail.com
>>>>>>> 
>>>>>> wrote:
>>>>>> 
>>>>>> Den 4. jun. 2016 01.26 skrev "Cryptographrix" <
>>>> cryptographrix at gmail.com>:
>>>>>>> 
>>>>>>>> The information I'm getting from Netflix support now is explicitly
>>>>>>>> 
>>>>>>> telling
>>>>>>> 
>>>>>>>> me to turn off IPv6 - someone might want to stop them before they
>>>>>>>> completely kill US IPv6 adoption.
>>>>>>>> 
>>>>>>> Not allowing he.net tunnels is not killing ipv6. You just need need
>>>>>>> native
>>>>>>> ipv6.
>>>>>>> 
>>>>>>> On the other hand it would be nice if Netflix would try the other
>>>>>>> protocol
>>>>>>> before blocking.
>>>>>>> 
>>>>>>> 
>>>>> 
>>>> 
>>> 
>> 