Eddie gaia

Workarounds for Netflix and the blocking of Hurricane Electric IPv6 tunnels

The dreaded "You seem to be using an unblocker or proxy." error message. Cool story bro.

This gist was essentially created out of my own rant about Netflix being hostile to IPv6 tunnel services since June 2016. You are welcome to read my opinion on the matter, this is the more technical side to the issue and how to combat it within your own network.

Since I wrote this, various GitHub users have contributed their thoughts and ideas which has been incorporated into this gist. Thank you to everyone who have contributed their own methods and implementations.

The problem

Netflix now treats IPv6 tunnel brokers (such as Hurricane Electric) as proxy servers. A while ago it became apparent to users and Netflix that somewhat by accident, IPv6 tunnel users were being served content outside of their geolocation because of the way Netflix was identifyi

What I Wish I'd Known About Equity Before Joining A Unicorn

Disclaimer: This piece is written anonymously. The names of a few particular companies are mentioned, but as common examples only.

This is a short write-up on things that I wish I'd known and considered before joining a private company (aka startup, aka unicorn in some cases). I'm not trying to make the case that you should never join a private company, but the power imbalance between founder and employee is extreme, and that potential candidates would

Enable persistent storage for the systemd journal log

Overview

The assumed default setting in /etc/systemd/journald.conf is Storage=auto which implies that systemd journaling will only persist the journal if the expected storage location is available. Otherwise, the journal data is stored in memory and lost between reboots. On Ubuntu 16.04, /var/log/journal does not exist by default. Create it to keep and query events from previous boots.

Considerations:

Syslog still provides the persistant log records for Ubuntu 16.04, so enabling persistant systemd journal logging does cause a level of duplicaiton.
There are sane defaults:

In experience to get a proper working multiple wan configuration using mwan3 starting from scratch you should:

Important: this works well on OpenWRT 15.05.1, on newer versions there was some breaking changes, for example, the wan ifaces have ipv6 capability and now are named with letters ("wan, wanb... , wanc" instead of "wan, wan2... wan3" so wanb6 means 2nd wan ipv6.): https://github.com/openwrt/packages/blob/master/net/mwan3/files/etc/config/mwan3

The official documentation seems to be very detailed and up to date, I recommend reading those first: https://openwrt.org/docs/guide-user/network/wan/multiwan/mwan3 but I recommend to give a look at my config file below, since my approach for policyes is very nice.

First of all: Activate conntrack, docs says that is important and neccesary to get MWAN3 work properly, and it is needed to reboot:

	/**
	* AutoArlo
	*
	* Created by Joe Beeson <[email protected]>
	*
	* This is free and unencumbered software released into the public domain.
	*
	* Anyone is free to copy, modify, publish, use, compile, sell, or
	* distribute this software, either in source code form or as a compiled
	* binary, for any purpose, commercial or non-commercial, and by any

	#!/usr/bin/python

	"""Convert all of your Viscosity connections into OVPN configuration files for OpenVPN
	https://gist.github.com/ishahid/693c2c97b3236a3c2416fc09ab170244
	"""


	import re
	import glob
	from os.path import expanduser, dirname

	https://rfc3161.ai.moda
	https://rfc3161.ai.moda/adobe
	https://rfc3161.ai.moda/microsoft
	https://rfc3161.ai.moda/apple
	https://rfc3161.ai.moda/any
	http://rfc3161.ai.moda
	http://timestamp.digicert.com
	http://timestamp.globalsign.com/tsa/r6advanced1
	http://rfc3161timestamp.globalsign.com/advanced
	http://timestamp.sectigo.com

	###
	# Proxmox or other server kernel params cheap tune and secure.
	# Try it if you have heavy load on server - network or memory / disk.
	# No harm assumed but keep your eyes open.
	#
	# @updated: 2020-02-06 - more params used, adjust some params values, more comments on params
	#

	### NETWORK ###

	/**
	* Overflow aware uint math functions.
	*
	* Inspired by https://github.com/MakerDAO/maker-otc/blob/master/contracts/simple_market.sol
	* Sourced from https://github.com/bokkypoobah/TokenTrader/wiki/1ST-%E2%80%90-First-Blood
	*
	* WARNING: I'm currently researching proper usage - Not recommended based solely on my gist.
	*/
	contract SafeMath {
	//internals

	#!/bin/sh

	URL="https://file.io"
	DEFAULT_EXPIRE="14d" # Default to 14 days

	if [ $# -eq 0 ]; then
	echo "Usage: file.io FILE [DURATION]\n"
	echo "Example: file.io path/to/my/file 1w\n"
	exit 1
	fi