3 ms·

What / how do they do it then? SNI inspection?

lategloriousgnu 10mo ago
The ISP's blackhole the IP for some blocked domains. So changing your DNS to 8.8.8.8 will resolve the domain, but the IP won't work. A VPN avoids this, since the traffic goes via the VPN IP.
- hsbauauvhabzb 10mo ago
  How would that work with cloudflare and similar though?
  - lategloriousgnu 10mo ago
    Cloudflare works with the UK government to facilitate blocks within their infra, I assume in exchange for being allowed to access UK network infrastructure. In the case that a blocked site resolved to a Cloudflare IP, it would likely be kicked off of Cloudflare, or geo-blocked for UK users (by Cloudflare). https://www.ispreview.co.uk/index.php/2025/07/cloudflare-blocking-access-to-internet-piracy-websites-in-the-uk.html https://www.ispreview.co.uk/index.php/2025/07/cloudflare-blo...
    - hsbauauvhabzb 10mo ago
      Ironically that url is forbidden for me, I was under the impression that CF were fairly anti censorship, or at least they inferred that they should not be the one calling the shots (in reference to kiwifarms)
- nebezb 10mo ago
  Wow that’s intense. I remember hearing someone complain on HN of their site getting blocked because it shared an IP with an illegal soccer livestream. I can’t imagine they’re doing this to IP blocks owned by CDNs like Fastly, CloudFlare, or CloudFront though. Or are they? Does this regularly break most of the internet for UK customers?
  - xuki 10mo ago
    Spain ISPs block CloudFlare IPs during La Liga matches.
    - uncletammy 10mo ago
      Do you have a source for this claim?
      - jesuslop 10mo ago
        TBH it is not ALL cloudFlare IPs but a significant quantity of sites using and not using CF CDNs. You cannot imagine what a pest that is even for legit users of legit collateral damage pages. CloudFlare is in the courts appealing/countering initial court allowance to blockade and ISPs are bound to comply to blackout requests. You can look at https://hayahora.futbol https://hayahora.futbol (traslation: is there soccer match now?) to see affected domains.
      - lategloriousgnu 10mo ago
        https://protonvpn.com/blog/spain-laliga https://protonvpn.com/blog/spain-laliga
      - snvzz 10mo ago
        While I am not some reputable source per-se, I have some tailscale presence over there and can corroborate my exit nodes find cloudflare sites blanket blocked on weekends.
    - deleted 10mo ago
      [deleted]
- ollybee 10mo ago
  In that case it like someone controlling the DNS records for a banned site could cause some mischief
- flir 10mo ago
  I've never hit one. Flipping DNS works for (for example) Anna's Archive. Have you got an example?
Aldipower 10mo ago
Transparent DNS proxies on ISP side. Easy thing for them.
- hsbauauvhabzb 10mo ago
  DNS over HTTP is a thing also, though.

The ISP's blackhole the IP for some blocked domains. So changing your DNS to 8.8.8.8 will resolve the domain, but the IP won't work. A VPN avoids this, since the traffic goes via the VPN IP.

hsbauauvhabzb 10mo ago
How would that work with cloudflare and similar though?
- lategloriousgnu 10mo ago
  Cloudflare works with the UK government to facilitate blocks within their infra, I assume in exchange for being allowed to access UK network infrastructure. In the case that a blocked site resolved to a Cloudflare IP, it would likely be kicked off of Cloudflare, or geo-blocked for UK users (by Cloudflare). https://www.ispreview.co.uk/index.php/2025/07/cloudflare-blocking-access-to-internet-piracy-websites-in-the-uk.html https://www.ispreview.co.uk/index.php/2025/07/cloudflare-blo...
  - hsbauauvhabzb 10mo ago
    Ironically that url is forbidden for me, I was under the impression that CF were fairly anti censorship, or at least they inferred that they should not be the one calling the shots (in reference to kiwifarms)
nebezb 10mo ago
Wow that’s intense. I remember hearing someone complain on HN of their site getting blocked because it shared an IP with an illegal soccer livestream. I can’t imagine they’re doing this to IP blocks owned by CDNs like Fastly, CloudFlare, or CloudFront though. Or are they? Does this regularly break most of the internet for UK customers?
- xuki 10mo ago
  Spain ISPs block CloudFlare IPs during La Liga matches.
  - uncletammy 10mo ago
    Do you have a source for this claim?
    - jesuslop 10mo ago
      TBH it is not ALL cloudFlare IPs but a significant quantity of sites using and not using CF CDNs. You cannot imagine what a pest that is even for legit users of legit collateral damage pages. CloudFlare is in the courts appealing/countering initial court allowance to blockade and ISPs are bound to comply to blackout requests. You can look at https://hayahora.futbol https://hayahora.futbol (traslation: is there soccer match now?) to see affected domains.
    - lategloriousgnu 10mo ago
      https://protonvpn.com/blog/spain-laliga https://protonvpn.com/blog/spain-laliga
    - snvzz 10mo ago
      While I am not some reputable source per-se, I have some tailscale presence over there and can corroborate my exit nodes find cloudflare sites blanket blocked on weekends.
  - deleted 10mo ago
    [deleted]
ollybee 10mo ago
In that case it like someone controlling the DNS records for a banned site could cause some mischief
flir 10mo ago
I've never hit one. Flipping DNS works for (for example) Anna's Archive. Have you got an example?

Aldipower 10mo ago

Transparent DNS proxies on ISP side. Easy thing for them.

hsbauauvhabzb 10mo ago
DNS over HTTP is a thing also, though.