Re: [tor-talk] meek-azure was blocked in China for about 4 days

[David Fifield <david@xxxxxxxxxxxxxxx>]

On Mon, Feb 08, 2016 at 08:21:47PM -0500, Nathan Freitas wrote:
> On Mon, Feb 8, 2016, at 06:02 PM, David Fifield wrote:
> > For about four days (January 29 to February 1, 2016), meek-azure was
> > blocked in China. The blocking may not have been intended for
> > meek-azure, and may not have been deliberate blocking, but it had the
> > effect of blocking the service. It is unblocked again since February 2.
> > 
> > The nature of the event seems to be dropping of HTTPS connections to a
> > specific Azure CDN edge server, cs3.wpc.v0cdn.net, which at the time had
> > an IP address of 68.232.45.200. Plain HTTP connections were not
> > affected. The blocking was not DNS blocking of a specific domain name,
> > nor was it TLS SNI (Server Name Indication) filtering: all domain names
> > we tried for the IP address failed equally.
> 
> Was it port 443 only? What if HTTPS was also made available on port
> 8443? Would that still allow the domain fronting to work?

It would work on any alternate port, but there's no reason why Azure
would open up an extra HTTPS port. We're not in control of that part.

I don't know if the TLS blocking was affecting any other ports. I only
tested using the GreatFire.org testing service.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk