Throttling and SafeVPN

Christopher Browne cbbrowne-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Mon May 12 16:08:09 UTC 2008


On Sat, May 10, 2008 at 10:52 AM, Dave Cramer <davec-zxk95TxsVYDyHADnj0MGvQC/G2K4zDHf at public.gmane.org> wrote:
>  On 10-May-08, at 2:37 AM, William Muriithi wrote:
> > Dave,
> >
> > > Ah yes, but OpenVPN uses OpenSSL to encrypt so it looks very much like
> SSL
> > > traffic.
> > >
> >
> > You are missing the point. What is happening is there are a lot of ISP
> > assuming that any encrypted traffic is torrent. So irrespective what
> > port you choose to use, as long as your traffic is encrypted - and
> > equipments like packeteer will easily flag this - your traffic will be
> > shaped.
> >
>  Even port 443 ? This is what everyone uses for https ?

Throttling this, at some significantly-non-zero level, shouldn't
injure any "experiences" other than bulk data transfer too enormously
badly.

Consider several use cases:
- Running terminal sessions across ssh
- Pulling web pages with financial data
- Visiting web pages where you're authenticating the action

All of these are either occasional or involve relatively low "burst
rates" of activity.

If they cap these connections at 10K/s, well, I can't type at 10K/s,
and hitting ^L in an Emacs session isn't going to be *that* bad at
10K/s.  And getting occasional *SOMEWHAT* slow page accesses for
things that are important authentication steps isn't going to feel
*too* punitive.

I'm not saying they're in the right; I'm not happy about it either,
just pointing out that there is more than one possible nuance on this.
-- 
http://linuxfinances.info/info/linuxdistributions.html
"The definition of insanity is doing the same thing over and over and
expecting different results." -- assortedly attributed to Albert
Einstein, Benjamin Franklin, Rita Mae Brown, and Rudyard Kipling
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list