Hacker News new | ask | show | jobs
by Matthias247 1096 days ago
A l7 (http) proxy will not work for this. Even if you are able to redirect the app to your proxy by overriding DNS it would just fail on the TLS handshake since Netflix is using https. You would need to have their private server certificate to make it work. Plus they might infer from extra headers that traffic is Proxied.

=> You need a L4 proxy, aka VPN
1 comments
justinclift 1096 days ago
That sounds weird to me, as your description of it sounds like https servers in general shouldn't work through a (squid) proxy.

However, they work just fine.

link
Matthias247 1095 days ago
They work if you have control over the client and can either explicitly configure them to use a proxy server or if your client is ok to speak to a different domain for which you have the legit certificates. With the Netflix app both of this won’t be the case. When using it with a browser for which you can change connection settings it might work.
link
justinclift 1095 days ago
> With the Netflix app both of this won’t be the case.

Thanks, I'd forgotten about that. I've not used Netflix, so didn't really associate "it's an app with no proxy settings ability".

That being said though, if it's being used on a device (android, iSomething) shouldn't it all "just work" if the proxy is set in the OS system settings?

link