Re: Netflix banning HE tunnels

2016-06-10 Thread Cryptographrix
(alternate solution: rename IPv6 to something media-friendlyish and request ISPs to enable support for it, advertising that most of their hardware "*already supports it*") On Fri, Jun 10, 2016 at 2:58 PM Cryptographrix wrote: > Just to clarify - there's no transition involved

Re: Netflix banning HE tunnels

2016-06-10 Thread Cryptographrix
Just to clarify - there's no transition involved - IPv4 to IPv6 is like going from the VINES protocol to IPv6: IPv6 may as well have been called "PROTOCOL 493" - it bares very little relation to the original protocol that brought us the internet as-it-is-today. The deployment of IPv4 had nothing t

Re: Netflix banning HE tunnels

2016-06-09 Thread Cryptographrix
I suspect we should just accept that IPv6 is never actually happening with all this infighting of its own very vocal proponents. On Thu, Jun 9, 2016 at 2:49 PM Steve Mikulasik wrote: > https://i.imgur.com/LvVHJZf.png > > I had to make this, talking about IPv6 or geo-ip in nanog is like throwing

Re: Netflix VPN detection - actual engineer needed

2016-06-07 Thread Cryptographrix
On Tue, Jun 7, 2016 at 10:22 AM Ca By wrote: > > > On Tuesday, June 7, 2016, Cryptographrix wrote: > >> As I said to Netflix's tech support - if they advocate for people to turn >> off IPv6 on their end, maybe Netflix should stop supporting it on their >> end.

Re: Netflix VPN detection - actual engineer needed

2016-06-07 Thread Cryptographrix
As I said to Netflix's tech support - if they advocate for people to turn off IPv6 on their end, maybe Netflix should stop supporting it on their end. It's in the air whether it's just an HE tunnel issue or an IPv6 issue at the moment, and if their tech support is telling people to turn off IPv6,

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
And yeah, most every US ISP *can* route IPv6, but they just haven't for absolutely no reason. On Fri, Jun 3, 2016 at 11:11 PM Cryptographrix wrote: > Surely they could - for some reason they haven't. > > It's not better - it's desperate. > > But it's m

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
PM Mansoor Nathani wrote: > How is this better than getting native IPv6 from a provider? If they are > willing to run a BGP session with you (that too with a private ASN), surely > they can offer native IPv6 as well. > > On Fri, Jun 3, 2016 at 10:19 PM, Cryptographrix > wrote: &g

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
"Yeah, I'm actually only going to use 6 of them, between all of my phones, my Roku, and my laptop, but I'll advertise for all 1.2Septillion" On Fri, Jun 3, 2016 at 10:21 PM Cryptographrix wrote: > "Hello Time Warner?I happen to have 1.2Septillion IPv6 IPs I need

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
"Hello Time Warner?I happen to have 1.2Septillion IPv6 IPs I need to advertise" On Fri, Jun 3, 2016 at 10:19 PM Cryptographrix wrote: > "A /48 is officially the smallest"...but apparently smaller gets > advertised all over, and I imagine esp for private ASNs..

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
un 3, 2016 at 10:11 PM Cryptographrix wrote: > Nope - You'd have the /56 and only people within your /56 (or /64 if you > sliced it up nicely) would be able to do things with it routed by your ISP. > > Of course this means we'll have to get our ISPs to listen for our BGP > a

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
ani wrote: > Wouldn't the /56 get blocked as soon as Netflix detects multiple accounts > logging in from the same IPv6 range? > > On Fri, Jun 3, 2016 at 9:49 PM, Cryptographrix > wrote: > >> This is a good idea. We should do this. >> >> >> >> On

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
This is a good idea. We should do this. On Fri, Jun 3, 2016 at 9:48 PM Raymond Beaudoin < raymond.beaud...@icarustech.com> wrote: > Make it a /56 each and you've got a deal. Hell, I'll throw in a round of > drinks. > > On Fri, Jun 3, 2016 at 8:40 PM, Cryptograph

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
ings that will > >> advertise your IPv6 allocations on your behalf direct to a server in > their > >> data centers. It seems pretty tongue-in-cheek, and satisfying, to turn > >> up a * >> favorite virtual router instance> *and then route through it. The > Inter

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
rtual router instance> *and then route through it. The > Internet is such an amazing place. > > On Fri, Jun 3, 2016 at 8:15 PM, Cryptographrix > wrote: > >> Yeah I RAWRed to them pretty hard whilst being as understanding to the CS >> rep that it wasn't their fault. &

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
Warner, but they decided to in their wisdom to disable IPv6 service for > > anyone that has an Arris SB6183 due to an Arris firmware bug. And they > are > > taking their sweet time pushing out the fixed firmware update that > Comcast > > and Cox seemed to be able to pu

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
off and it starts to look like a trend, > it can > change things. > > Owen > > > On Jun 3, 2016, at 17:17 , Cryptographrix > wrote: > > > > Very true. Telling people to turn off IPv6 support through their customer > > service portal is completely infuriatin

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
bor Networks* > +1.734.794.5033 (d) | +1.734.846.2053 (m) > www.arbornetworks.com > > On Fri, Jun 3, 2016 at 8:07 PM, Cryptographrix > wrote: > >> I don't remember the source, but I do remember that even with Comcast's >> deployment, HE still represented the maj

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
s.com > > On Fri, Jun 3, 2016 at 7:49 PM, Cryptographrix > wrote: > >> Depends - how many US users have native IPv6 through their ISPs? >> >> If I remember correctly (I can't find the source at the moment), HE.net >> represents something like 70% of IPv6 tr

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
(and this is coming from someone that has serious issues with IPv6 but understands that we need to move forward) On Fri, Jun 3, 2016 at 7:49 PM Cryptographrix wrote: > Depends - how many US users have native IPv6 through their ISPs? > > If I remember correctly (I can't find the

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
t's a bit important to me. On Fri, Jun 3, 2016 at 7:45 PM Baldur Norddahl wrote: > Den 4. jun. 2016 01.26 skrev "Cryptographrix" : > > > > The information I'm getting from Netflix support now is explicitly > telling > > me to turn off IPv6 - someone m

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
The information I'm getting from Netflix support now is explicitly telling me to turn off IPv6 - someone might want to stop them before they completely kill US IPv6 adoption. On Fri, Jun 3, 2016 at 7:15 PM Cryptographrix wrote: > > "What you are NOT allowed to do is impose new

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
> "What you are NOT allowed to do is impose new requirements on our Internet to support your business licensing models and make it our problem" They're not imposing new regulation on your internet to support their business licensing models - they're imposing existing (and international) regulation

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
ing how badly Netflix VPN detection works and why it is so hard for > us to help with it and why they should be complaining to Netflix. > > Steven Naslund > > From: Cryptographrix [mailto:cryptograph...@gmail.com] > Sent: Friday, June 03, 2016 5:06 PM > To: Naslund, Steve; na

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
e no assurance that it can not use Wifi to determine your location much more precisely than IP geolocation. Period. On Fri, Jun 3, 2016 at 6:35 PM Cryptographrix wrote: > But wait, content providers *do that.* > > *Microsoft too...for illegal copies of Outlook, even...* > > How

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
packet - and of course all of them can be hacked - but those same content providers have established in their audit requirements that they're perfectly willing to accept the risks involved. On Fri, Jun 3, 2016 at 6:18 PM Cryptographrix wrote: > " > there is no reliable geo-loc

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
here never has been yet. Good luck ever getting that to > work behind the great firewall of China. > > Steven Naslund > Chicago IL > > From: Cryptographrix [mailto:cryptograph...@gmail.com] > Sent: Friday, June 03, 2016 4:56 PM > To: Naslund, Steve; nanog@nanog.org > Subj

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
There's really no point in whining about content providers and regionalization as long as TV channels are still a thing. I get that the internet totally annihilated borders of all kind (including the book store), but some businesses change slower than others, and content production is still back i

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
+1 to this idea. On Fri, Jun 3, 2016 at 5:29 PM Mark Andrews wrote: > > It's time for Netflix to offer IPv6 tunnels. That way they can > correlate IPv4 and IPv6 addresses. Longest match will result is > the correct source address being selected if they do the job > correctly. > > -- > Mark And

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
beat all of the location systems with a > simple proxy. A proxy makes a Netflix connection from an allowed IP, > location or whatever and then builds a new video/audio stream out the back > end to the client anywhere in the world. Simple to implement and damn near > impossible to b

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
age- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Cryptographrix > Sent: Friday, June 03, 2016 3:21 PM > To: Spencer Ryan > Cc: North American Network Operators' Group > Subject: Re: Netflix VPN detection - actual engineer needed > > Come now, content providers

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
t; > 1. My TV is going to have a hard time figuring out its GPS location > inside my living room. > 2. It's not hard to make a device lie about a GPS position. > > Steven Naslund > Chicago IL > > -Original Message- > From: NANOG [mailto:nanog-boun...@

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
1.734.794.5033 (d) | +1.734.846.2053 (m) > www.arbornetworks.com > > On Fri, Jun 3, 2016 at 4:09 PM, Cryptographrix > wrote: > >> I have a VPN connection at my house. There's no way for them to know the >> difference between me using my home network connection from

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
mail > immediately. > > > > -Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Spencer Ryan > Sent: Friday, June 3, 2016 2:49 PM > To: Cryptographrix > Cc: North American Network Operators' Group > Subject: Re: Netflix VPN detect

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
(since we must dual-stack still here in the US) On Fri, Jun 3, 2016 at 4:09 PM Cryptographrix wrote: > I have a VPN connection at my house. There's no way for them to know the > difference between me using my home network connection from Hong Kong or my > home network connection

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
d using the tunnel, and you living in Hong Kong and using the tunnel. > > > *Spencer Ryan* | Senior Systems Administrator | sr...@arbor.net > *Arbor Networks* > +1.734.794.5033 (d) | +1.734.846.2053 (m) > www.arbornetworks.com > > On Fri, Jun 3, 2016 at 4:03 PM, Cryptograp

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
nect from Tokyo because I forgot to shut off my work VPN? Finelet me know and I'll turn *that* off. On Fri, Jun 3, 2016 at 3:49 PM Spencer Ryan wrote: > I don't blame them for blocking a (effectively) anonymous tunnel broker. > I'm sure their content providers are forci

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Cryptographrix
Netflix needs to figure out a fix for this until ISPs actually provide IPv6 natively. On Fri, Jun 3, 2016 at 3:13 PM Blair Trosper wrote: > Confirmed that Hurricane Electric's TunnelBroker is now blocked by > Netflix. Anyone nice people from Netflix perhaps want to take a crack at > this? > >

Re: Microwave link capacity

2016-04-04 Thread Cryptographrix
I do not have direct experience with this, but Ubiquiti's AirFiber 5 seems like an applicable solution: https://www.ubnt.com/airfiber/airfiber5/ It runs around $1.000USD each On Mon, Apr 4, 2016 at 1:30 PM Jean-Francois Mezei < jfmezei_na...@vaxination.ca> wrote: > > In a context of providing ru

Re: How to force rapid ipv6 adoption

2015-10-02 Thread Cryptographrix
ity to have all ports open from the get-go as an incentive? On Fri, Oct 2, 2015 at 12:02 PM George, Wes wrote: > > On 10/2/15, 10:48 AM, "NANOG on behalf of Cryptographrix" > wrote: > > >For ISPs that already exist, what benefit do they get from > >p

Re: How to force rapid ipv6 adoption

2015-10-02 Thread Cryptographrix
some hacking, but because of the callback cloud services that much of them employ combined with most places not having IPv6, they all develop their products for use with, and train developers on their platforms, expecting IPv4 (at least the ones I've been to). On Fri, Oct 2, 2015 at 11:26

Re: How to force rapid ipv6 adoption

2015-10-02 Thread Cryptographrix
For ISPs that already exist, what benefit do they get from providing/allowing IPv6 transit to their customers? Keep in mind that the net is now basically another broadcast medium. On Fri, Oct 2, 2015 at 10:33 AM Steve Mikulasik wrote: > I think more focus needs to be for carriers to deliver

How to build an IPv6-only internal network?

2015-07-08 Thread Cryptographrix
Hypothetically, I want to build an internal network that runs just IPv6 and apply stateless ACLs at redundant external connections. How do users access the current v4 address space?

Re: OPM Data Breach - Whitehouse Petition - Help Wanted

2015-06-18 Thread Cryptographrix
Have to agree with Shawn on this. If you watch her testimony in front of Congress, it is clear that she was completely flustered at the inability to hire competent people, and the lack of her superiors to prioritize the modernization project she had so passionately advocated for. When I've worked f

Re: All of .mil tld is down

2014-05-19 Thread Cryptographrix
Well that's the most ludicrous thing I've heard all month. *grabs popcorn* On Mon, May 19, 2014 at 10:40 PM, jamie rishaw wrote: > At time of post.. > .mil. is down. > Apparently an Anonymous "Operation Payback". > > .mil nameservers are unresponsive. >

Re: Residential CPE suggestions

2014-05-06 Thread Cryptographrix
It also has support for some type of ipv4 and ipv6 offload. On Tue, May 6, 2014 at 3:01 AM, Joe Greco wrote: > > I was also going to recommend the EdgeRouter Pro as it has dual SFP = > > ports and the Vyatta/Linux stuff works quite well. > > > > I suspect you will be very surprised with the qu

Re: Residential CPE suggestions

2014-05-05 Thread Cryptographrix
I've used both the Ubiquiti EdgeRouter and Cisco RV042G. The EdgeRouter runs a modified version of Vyatta that's incredibly versatile. The RV042G is your standard Cisco SOHO Dual-WAN router - it has telnet, but is limited, and otherwise is solid. On Mon, May 5, 2014 at 7:59 PM, Deepak Jain w