3 ms·

So mobile networks this days do MITM to all TCP connections, nice. Happy time to debug problems ....

• kevin_nisbet 11y ago
  As someone who has worked on mobile networks, and has a great deal of TCP/IP experience on CDMA, UMTS, and LTE networks, unless you know the mobile network inside and out, as a customer you likely won't be able to troubleshoot the network anyways. Now you're right on another aspect, is that additional complexity is a pain, and can make troubleshooting more difficult, but there are many steps of complexity in a mobile network, far beyond this. If this works in the majority of cases (and the claims of fall through do work), then there is a massive upside to this type of product. So one additional hop in the complexity of the 3GPP standards and associated equipment, than on top of that with a carrier grade NAT, a firewall, a cache, and perhaps an IDS system or two, and you've already got many potential places for failure. I think we just need to understand that these systems are complex, and try and understand and build them as robustly as we can, while offering the best customer experience possible. And ensuring that as problems are found that they're correctly addressed. Anyways, I think it's an interesting approach to a problem that affects many users, assuming the requisite due diligence is done and that the equipment operates as advertised. Disclaimer, I work in the mobile telecom industry in Canada, and my views are my own, and do not reflect those of my employer.
• ddoscampaign 11y ago
  Many carriers already MITM port 80/tcp (blindly sending SYN ACKs). Symptom: try connecting to a random domain without a webserver (like http://cse.ucdavis.edu/ http://cse.ucdavis.edu/ ) and it will seem to have a website but just hang.