traffic shaping

[Alexwerilles 3]

Hello

Does anyone have any alternative to avoid traffic shaping by operators? Some of my relatives are having difficulty accessing my server, including me. It appears that the operator is throttling my server speed. If I use VPN on any device, the server works normally, without slowdowns.

Unfortunately it is no longer possible to use cloudflare due to their new policy. Does anyone have any alternative to avoid this blocking?

[Alexwerilles 3]

Hello

Does anyone have any alternative to avoid traffic shaping by operators? Some of my relatives are having difficulty accessing my server, including me. It appears that the operator is throttling my server speed. If I use VPN on any device, the server works normally, without slowdowns.

Unfortunately it is no longer possible to use cloudflare due to their new policy. Does anyone have any alternative to avoid this blocking?

[Luke 42081]

Hi, have you setup https? That can help.

[Luke 42081]

Also using different port numbers from the defaults may help.

[Alexwerilles 3]

1 hour ago, Luke said:

Also using different port numbers from the defaults may help.

I always change the ports every month, even after this started to happen, i changed the port again on friday. and yes, I use https

[rbjtech 5284]

Https is no different to http in terms of everything external to the packets themselves (which are obviously encrypted ) - but traffic patterns, headers, dns etc are 'in the clear' for the ISP to see - and it's likely these that are being monitored/shaped.    Securing things such as DNS can be done, but it's not an easy fix.    Implementing a secure 'tunnel' such as tailscale is likely the answer here - as everything inside the tunnel is hidden from the ISP.

[Alexwerilles 3]

11 hours ago, rbjtech said:

Https is no different to http in terms of everything external to the packets themselves (which are obviously encrypted ) - but traffic patterns, headers, dns etc are 'in the clear' for the ISP to see - and it's likely these that are being monitored/shaped.    Securing things such as DNS can be done, but it's not an easy fix.    Implementing a secure 'tunnel' such as tailscale is likely the answer here - as everything inside the tunnel is hidden from the ISP.

Is there any tutorial here on how to use tailscale in emby using Linux?

[Alexwerilles 3]

11 hours ago, rbjtech said:

Https is no different to http in terms of everything external to the packets themselves (which are obviously encrypted ) - but traffic patterns, headers, dns etc are 'in the clear' for the ISP to see - and it's likely these that are being monitored/shaped.    Securing things such as DNS can be done, but it's not an easy fix.    Implementing a secure 'tunnel' such as tailscale is likely the answer here - as everything inside the tunnel is hidden from the ISP.

I don't know if this is right, but I saw someone here on forum saying that tailscale cannot use its own domain and that tailscale has to be installed on each device you use. If so, it's not viable for me

 

 

[bakes82 167]

On 1/28/2024 at 10:37 AM, Alexwerilles said:

Some of my relatives are having difficulty accessing my server, including me

Sooo is your server remote? What ISP?  Maybe upgrade to a business line or you known spin up a reverse proxy. Or tell your shares oh well.  You’ll be playing this whack a mole game every week. Routing is dynamic.  I live in NY and my routing goes to Chicago first because upstate NY spectrum fiber links back thru Chicago rather than NYC even though I’m much closer to NYC.  But someone in PA could route with comcast thru NYC.  So for ME a box in Chicago is actually better even if my “family” in pa 20min away on Comcast one in NYC would be better.  And then you need to figure out data center peering host/exchanges for ISPs and their speeds and then the hops between them and oh yeah there’s an outage so todays route is diff.