←back to thread

Doxx/Darkflare: DarkFlare TCPoCDN (TCP over CDN)

(github.com)
81 points josephscott | 3 comments | 20 Nov 24 22:49 UTC | HN request time: 0s | source
Show context
est ◴[21 Nov 24 05:12 UTC] No.42201341[source]▶
> Services like Cloudflare, Akamai Technologies, Fastly, and Amazon CloudFront ... support millions of websites across critical sectors, including government and healthcare, making them indispensable

The author is pretty naive. There is a reason why Google was left out of the list, in the 2010s people argue "Google is too important and China never dare to block it" then google's whole IP range is blocked.

Amazon Cloudfront, Akmai, Fastly are also (partially) blocked and barely working.

IMHO cleve tricks like "domain fronting" is just freebooting

replies(1): >>42201606 #
1. dlenski ◴[21 Nov 24 06:13 UTC] No.42201606[source]▶
> IMHO cleve tricks like "domain fronting" is just freebooting

What do you mean by "freebooting"?

We added domain fronting support to the OpenConnect TLS-VPN client _in 2022_ because it is still working and useful for many people working in censored countries and environments. https://gitlab.com/openconnect/openconnect/-/merge_requests/...

replies(1): >>42201756 #
2. est ◴[21 Nov 24 06:41 UTC] No.42201756[source]▶
> because it is still working

That's a big "still" and you don't loose anything in case the real owner of the "fronted" domain suffers loss.

replies(1): >>42201990 #
3. notpushkin ◴[21 Nov 24 07:35 UTC] No.42201990[source]▶
I don't think it's right to assign blame here to any party other than the authoritarian regime that decides to block the whole CDN.