Network Engineering Thread

Servers and Networking
,
27

Without certs? Cert pinning? Youtube? Maps? mitm ignores?

28

With our own root CA. Cert pinning hasnā€™t been much of an issue. Youtube is only accessed through a player in our console. Google maps works just fine. We can do MITM ignores.

29

But if MITM is ignoring maps lets say, then it can do stuff to udp, but quic network is still untouched. streetview falls back to quic.

30

Can anyone name the right 20 categories for websites? Or report a site and see what your filter has to offer.

31

We block quic. It is much harder to filter. If you block it, everything falls back to regular http.

They report a site, and suggest a category, and then we either approve or deny.

32

Iā€™m looking for categoriesā€¦ just the names.

33

But without mitm, how do you block it? Because mitm has to be disabled ya know for google stuffā€¦

34

Block UDP port 443. Thatā€™s quic.

Build a system where you can add more later. Then add categories as you need them.

35

Look at this jotform from Techloq.

It lists some categories, if you want more then I can help you privately.

36

tysm

37

Wow. Great. IKEv2 is not going to work. Going to have to redo the whole thing with WireGuardā€¦ Network engineering is hard, after allā€¦

38

Love wireguard. Not a terrible thing. And speeds are great

Though speeds are definitely slower with exit nodes