nanog mailing list archives

Re: Netflix VPN detection - actual engineer needed


From: Jon Lewis <jlewis () lewis org>
Date: Sun, 5 Jun 2016 22:51:58 -0400 (EDT)

On Sun, 5 Jun 2016, Owen DeLong wrote:

What is non-standard about an HE tunnel? It conforms to the relevant RFCs and
is a very common configuration widely deployed to many thousands of locations
around the internet.

Itÿÿs not that Netflix happens to not work with these tunnels, the problem is
that they are taking deliberate active steps to specifically block them.

It's not a question of standard vs non-standard. If Netflix is blocking HE IPv6 space (tunnel customers), I suspect they're doing so because this is effectively an IPv6 VPN service that masks the end-user's real IP making invalid any IP-based GEO assumptions Netflix would like to make about customer connections in order to satisfy their content licenses.

Soÿÿ I donÿÿt know how many ÿÿnormal usersÿÿ use HE tunnels vs. ÿÿgeeksÿÿ or how one
would go about defining the difference. I can tell you that there are an awful
lot of people using HE tunnels, and based on what I saw while working at HE,
I donÿÿt believe they are all geeks. While I would say that geeks are a larger

You have to be at least somewhat of a geek to even care about IPv6 and know that HE provides free IPv6 tunnels for those who can't get it natively from their own ISP. Ideally, HE's v6 tunnel service should become more or less redundant as more service provider networks dual-stack their customers.


----------------------------------------------------------------------
 Jon Lewis, MCP :)           |  I route
                             |  therefore you are
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


Current thread: