This is all great information. FWIW, managing and automating anycasted 'middleboxes' for others is part of my work. The scary part, to me, is what paying cust

This is all great information. FWIW, managing and automating anycasted 'middleboxes' for others is part of my work. The scary part, to me, is what paying customers demand. Largely, they don't want to fix broken or legacy systems, but just want an A+ on SSL-Labs. Of course, you can imagine the security implications of downgrading, or worse, terminating the TLS connection at the proxy. The end user has no idea their data is being sent in plaintext over the open web. I won't do such things, but I'm sure plenty of other companies are willing.