6 ms·

The article mentions that WARP is exposing the end user's IP to websites they visit. I'd be interested in how they do that, especially with HTTPS websites where

by eis 7y ago

The article mentions that WARP is exposing the end user's IP to websites they visit. I'd be interested in how they do that, especially with HTTPS websites where they can't MITM and inject headers. > WARP is not designed to allow you to access geo-restricted content when you’re traveling. It will not hide your IP address from the websites you visit.

deleted 7y ago
[deleted]
aasdasdasdasd 7y ago
The requests come from a CloudFlare address range -- my original IP isn't visible to the server. Not sure what they mean either.
- deleted 7y ago
  [deleted]
- xuki 7y ago
  It passes on your IP address if the website you're visiting is using CF. See for yourself: https://icanhazip.com https://icanhazip.com - on CF network https://ifconfig.me https://ifconfig.me - not on CF network
  - deleted 7y ago
    [deleted]
zackbloom 7y ago
Great eye! We haven't figured out how to expose them yet for sites not using Cloudflare. We do have some experience solving this problem for Spectrum [1] we're hoping to lean on. The most important thing to us is users don't expect us to keep their IP private, as that is not the intent of WARP. 1- https://blog.cloudflare.com/mmproxy-creative-way-of-preserving-client-ips-in-spectrum/ https://blog.cloudflare.com/mmproxy-creative-way-of-preservi...
- fnordsensei 7y ago
  Are you going out of your way to forward the original IP to the end recipient? What's the point of that? Is it to support IP authenticated logins or similar?
  - r1ch 7y ago
    Most likely so the receivers of abusive traffic can contact the original ISP rather than Cloudflare having to deal with abuse reports.
    - basch 7y ago
      analytics.
  - dgudkov 7y ago
    For instance, to play nicely with IP whitelisting in firewalls as an additional security measure.
  - e12e 7y ago
    Not step on the toes of Netflix, Amazon Prime and other services that rely on geo location for enforcing licensing of content / geo-location based artificial scarcity of digital goods?
  - fjni 7y ago
    I'd like an answer to this also! It sounds like cloudflare spent the time to do away with hiding ip addresses. Actively removing that feature of a VPN, which you should get for free in a wireguard implementation, seems fishy to say the least. Especially since no reasonable explanation for this was given.
  - fro0116 7y ago
    From the deafening silence I'm going to take the less charitable interpretation that it's meant to enable Cloudflare to essentially sell Warp users' IPs to Cloudflare customers as an added perk.
Iwillgetby 7y ago
This split tunneling article may be useful. https://www.macobserver.com/news/tmo-scoop/cloudflare-warp-split-tunneling/ https://www.macobserver.com/news/tmo-scoop/cloudflare-warp-s...
mobilio 7y ago
I can confirm. Last night i was testing it and geo-location was visible...
bithavoc 7y ago
Warp doesn't provide anonymity, however, for some reason Netflix in my phone can stream US TV shows with Warp on while my non warped devices can not even list the show. Weird.
- xeroaura 7y ago
  It seems to not be hiding IP, but it does inadvertently(?) do so for some site's detection methods I think. When I did an IP lookup, some sites reported correct while others reported one I didn't recognize (assumed its the one from WARP).
  - judge2020 7y ago
    Ya it only forwards the IP for websites behind CF for now https://news.ycombinator.com/item?id=21070828 https://news.ycombinator.com/item?id=21070828
- PentiumBug 7y ago
  Because Netflix is not a Cloudflare client, so CF can't pass the source (client) IP. The same should happen with Google, Facebook (or anyone not behind CF infrastructure). At least, that's the way I'm currently understanding it.

by eis 7y ago

deleted 7y ago

[deleted]

aasdasdasdasd 7y ago

The requests come from a CloudFlare address range -- my original IP isn't visible to the server. Not sure what they mean either.

deleted 7y ago
[deleted]
xuki 7y ago
It passes on your IP address if the website you're visiting is using CF. See for yourself: https://icanhazip.com https://icanhazip.com - on CF network https://ifconfig.me https://ifconfig.me - not on CF network
- deleted 7y ago
  [deleted]

zackbloom 7y ago

Great eye! We haven't figured out how to expose them yet for sites not using Cloudflare. We do have some experience solving this problem for Spectrum [1] we're hoping to lean on. The most important thing to us is users don't expect us to keep their IP private, as that is not the intent of WARP. 1- https://blog.cloudflare.com/mmproxy-creative-way-of-preserving-client-ips-in-spectrum/ https://blog.cloudflare.com/mmproxy-creative-way-of-preservi...

fnordsensei 7y ago
Are you going out of your way to forward the original IP to the end recipient? What's the point of that? Is it to support IP authenticated logins or similar?
- r1ch 7y ago
  Most likely so the receivers of abusive traffic can contact the original ISP rather than Cloudflare having to deal with abuse reports.
  - basch 7y ago
    analytics.
- dgudkov 7y ago
  For instance, to play nicely with IP whitelisting in firewalls as an additional security measure.
- e12e 7y ago
  Not step on the toes of Netflix, Amazon Prime and other services that rely on geo location for enforcing licensing of content / geo-location based artificial scarcity of digital goods?
- fjni 7y ago
  I'd like an answer to this also! It sounds like cloudflare spent the time to do away with hiding ip addresses. Actively removing that feature of a VPN, which you should get for free in a wireguard implementation, seems fishy to say the least. Especially since no reasonable explanation for this was given.
- fro0116 7y ago
  From the deafening silence I'm going to take the less charitable interpretation that it's meant to enable Cloudflare to essentially sell Warp users' IPs to Cloudflare customers as an added perk.

Iwillgetby 7y ago

This split tunneling article may be useful. https://www.macobserver.com/news/tmo-scoop/cloudflare-warp-split-tunneling/ https://www.macobserver.com/news/tmo-scoop/cloudflare-warp-s...

mobilio 7y ago

I can confirm. Last night i was testing it and geo-location was visible...

bithavoc 7y ago

Warp doesn't provide anonymity, however, for some reason Netflix in my phone can stream US TV shows with Warp on while my non warped devices can not even list the show. Weird.

xeroaura 7y ago
It seems to not be hiding IP, but it does inadvertently(?) do so for some site's detection methods I think. When I did an IP lookup, some sites reported correct while others reported one I didn't recognize (assumed its the one from WARP).
- judge2020 7y ago
  Ya it only forwards the IP for websites behind CF for now https://news.ycombinator.com/item?id=21070828 https://news.ycombinator.com/item?id=21070828
PentiumBug 7y ago
Because Netflix is not a Cloudflare client, so CF can't pass the source (client) IP. The same should happen with Google, Facebook (or anyone not behind CF infrastructure). At least, that's the way I'm currently understanding it.