Presumably they have to change servers so often because that's how quickly Netflix detects them.
It's extremely unlikely Netflix will publish how they perform the detection, because that would make it easier for people to get around. My guess is that they know where your account should be located based on payment information or previous detection of region-switching services, and they use these flagged accounts to uncover new region switchers.
There are a finite number of instant-provisioning VM/VPS hosts that such an organization can use, in terms of ASNs and IP blocks which are easily identified by netflix. Once Netflix has blocked a /22 or /20 belonging to a colo/VPS/VM hosting ISP, it's worthless bringing up a new VM with the same host. Repeat 30 times, you've run out of hosting companies to work with.
I would guess they have to get 'clean' IPs too. Simply moving the IP to a different server likely is not sufficient. Netflix also filters the common ASes, so you need to shuffle between exotic/new blocks
Even the TTL on a.dns.whatever is set to 1min, a lot of clients ignore the TTL and use the cached value for minutes to days after TTL expiration.
However, the monthly cost was so low that I got paranoid about their business model. They could do all kinds of MITM things with people who used their DNS rewrite+proxy service, in addition to enabling Netflix...
12 comments
[ 4.9 ms ] story [ 40.0 ms ] thread> have to replace servers every 24-48 hours with lots of downtime
Which part causes lots of downtime?
It's extremely unlikely Netflix will publish how they perform the detection, because that would make it easier for people to get around. My guess is that they know where your account should be located based on payment information or previous detection of region-switching services, and they use these flagged accounts to uncover new region switchers.
Even the TTL on a.dns.whatever is set to 1min, a lot of clients ignore the TTL and use the cached value for minutes to days after TTL expiration.
However, the monthly cost was so low that I got paranoid about their business model. They could do all kinds of MITM things with people who used their DNS rewrite+proxy service, in addition to enabling Netflix...