• yeehaw
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    26
    ·
    18 hours ago

    Core routers are the core.

    • bobs_monkey@lemm.ee
      link
      fedilink
      English
      arrow-up
      55
      ·
      18 hours ago

      That’s not exactly how it works. There is no specific core, all web traffic doesn’t go through one centralized location; it gets routed through the most direct route on each if these routers’ routing tables

      • credo@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 hours ago

        You can poison the routes within the BGP core to send traffic into a black hole. Basically, just tell everyone you have the best path, and they will send traffic to you.

        There have been instances of this at the international level with adversary nations “accidentally” routing all traffic through them first. It can be done to a degree that it makes life difficult. They won’t be able to prevent you from finding a VPN that pops you out near a router that refuses the poisoned routes however- not without a global agreement at least.

      • yeehaw
        link
        fedilink
        English
        arrow-up
        4
        ·
        9 hours ago

        My point is, if you’re blocked traversing the routers across the sea you’re not reaching those other continents. That’s a bit of a simplistic way of looking at it, given satellite internet and stuff but my point is it is not that incredibly hard to block the routes. Especially with BGP. BGP on the internet also has some bodies regulating route ASN reputation, so those could be potentially null routed.

        Anyways, I clearly have no clue what I’m talking about so I’ll stop there.

        • rumba@lemmy.zip
          link
          fedilink
          English
          arrow-up
          9
          ·
          9 hours ago

          You can’t even truly read what’s inside of an SSL packet. They probably want to fuck with the routes around torrent trackers.

          There are always ways around, tor, retro share, i2p. I kind of wish we’d find a harder to track version of torrent.

          • Hoimo@ani.social
            link
            fedilink
            English
            arrow-up
            1
            ·
            5 hours ago

            Torrents are already very hard to block. You don’t actually need a tracker, because all modern torrent clients support DHT (distributed hash table). You only need some way to get the initial hash for a torrent, so that’s where trackers are still useful, but once you’re connected to the swarm, you can only be blocked if the entire swarm is blocked.

            Tracking though… It’s too easy to get IP addresses for the entire swarm and I don’t see how you could ever fix that. Tor doesn’t really solve that issue either, it just moves it to places where you won’t get in legal trouble or to people who don’t mind getting in legal trouble, a bit like VPN providers.

          • Pika@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            39
            ·
            edit-2
            17 hours ago

            impossible to detect? No, extremly hard to identify what it is? yes.

            Who cares if they can see it’s 5 GB stream, they have no way of knowing whether or not it’s a pirated movie versus a backup from a home server or a data stream.

            In fact some vpns are actually starting to implement data buffering where it makes every request is the same size regardless of what it is to protect against AI Assisted traffic analysis

            • EngineerGaming@feddit.nl
              link
              fedilink
              English
              arrow-up
              16
              ·
              17 hours ago

              Plus, people are fighting detection too. Where “normal” VPN protocols are recognized and blocked, like China, people are trying to make them indistinguishable from normal HTTPS traffic.

              • Toes♀@ani.social
                link
                fedilink
                English
                arrow-up
                9
                ·
                16 hours ago

                Yeah, if they wanted to setup deep packet inspection on that level. I’d imagine it would require billions of dollars in compute resources. And it would still suck.

          • heavydust@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            12
            ·
            17 hours ago

            There are a lot of industries where huge amount of data is moved all the time (health data, VMs, anything actually). Even small startups can do that and it’s cheaper than ever.