7 ms·
A l7 (http) proxy will not work for this. Even if you are able to redirect the app to your proxy by overriding DNS it would just fail on the TLS handshake since
by Matthias247 3y ago
A l7 (http) proxy will not work for this. Even if you are able to redirect the app to your proxy by overriding DNS it would just fail on the TLS handshake since Netflix is using https. You would need to have their private server certificate to make it work. Plus they might infer from extra headers that traffic is Proxied.
=> You need a L4 proxy, aka VPN
- justinclift 3y agoThat sounds weird to me, as your description of it sounds like https servers in general shouldn't work through a (squid) proxy. However, they work just fine.
- Matthias247 3y agoThey work if you have control over the client and can either explicitly configure them to use a proxy server or if your client is ok to speak to a different domain for which you have the legit certificates. With the Netflix app both of this won’t be the case. When using it with a browser for which you can change connection settings it might work.
- justinclift 3y ago> With the Netflix app both of this won’t be the case. Thanks, I'd forgotten about that. I've not used Netflix, so didn't really associate "it's an app with no proxy settings ability". That being said though, if it's being used on a device (android, iSomething) shouldn't it all "just work" if the proxy is set in the OS system settings?