My guess Netflix can guide that by handing back different IPs when the end user requests the netflix server name. They can also handle it in application the ne

My guess Netflix can guide that by handing back different IPs when the end user requests the netflix server name. They can also handle it in application the netflix application can look and see it is in a network that has a box and just goto that ip/host/proxy instead of the generic one. Netflix still controls the keys. No MITM needed.