Netflix

[okcmallrat 0]

I've just recently started using Air VPN and everything is working great except for Netflix. When I go to Netflix it pops a bubble telling me that I'm "Travelling with Netflix" and will therefore lose some key services. I no longer have my instant que and a few other things are missing. I've looked through my Netflix settings but I couldn't find anything that seemed like it would help. Google didn't help either.

I set up my vpn using the dd-wrt method. Is there some way to bypass the open vpn settings for certain sites?

[Staff 9751]

I've just recently started using Air VPN and everything is working great except for Netflix. When I go to Netflix it pops a bubble telling me that I'm "Travelling with Netflix" and will therefore lose some key services. I no longer have my instant que and a few other things are missing. I've looked through my Netflix settings but I couldn't find anything that seemed like it would help. Google didn't help either.

I set up my vpn using the dd-wrt method. Is there some way to bypass the open vpn settings for certain sites?

Hello!

Yes, it's possible. By default our servers push routes so that all traffic is tunneled. You need to change the routing table in order to route the traffic for Netflix through your normal gateway instead of the VPN one.

You need also to know the Netflix IP ranges.

According to comment by "Jon" here: http://kaeding.name/articles/2010/11/15/prioritizing-netflix-traffic-with-dd-wrt/

the IP addresses used by Netflix to serve content are many:

208.75.76.0/22

128.242.0.0/16

63.97.94.0/24

65.200.11.0/24

96.16.0.0/15

216.246.75.0/24

204.0.0.0/14

204.200.0.0/14

184.84.0.0/14

62.0.0.0/8

58.0.0.0/8

198.76.0.0/14

4.27.0.0/16

8.0.0.0/8

206.32.0.0/14

209.84.28.0/23

209.84.24.0/22

209.84.16.0/21

192.221.0.0/16

205.128.0.0/14

4.0.0.0/8

204.160.0.0/14

199.92.0.0/14

184.72.0.0/15

208.111.128.0/18

Now, you need to modify your routing table so that the above IP ranges do not get tunneled:

route add -net 208.75.76.0/22 gw <your "non-VPN" gateway>
...
route add -net 208.111.128.0/18 gw <your "non-VPN" gateway>

In this way you'll obtain that all the traffic for Netflix (assuming that the above IP ranges list is correct and exhaustive) will not be tunneled.

Kind regards

[YLwpLUbcf77U 32]

Would whitelisting those IP addresses be a privacy risk? When you say not tunneled, do you mean that the traffic will be sent not through AirVPN/OpenVPN and thus be unencrypted?

How do you add IP addresses to the routing table?

[Staff 9751]

Would whitelisting those IP addresses be a privacy risk? When you say not tunneled, do you mean that the traffic will be sent not through AirVPN/OpenVPN and thus be unencrypted?

Hello!

That's exactly what our customer asked for.

How do you add IP addresses to the routing table?

Please elaborate, it's written in the message above.

If you mean how an OpenVPN server pushes routes, then the answer is "with the push directive". A client may refuse pushes with the nopull directive, in which case a tunnel is established but nothing will be tunneled until a proper routing table is defined.

Kind regards

[Staff 9751]

@okcmallrat

The IP ranges published list is not correct, it includes too many IP addresses not belonging to Neflix, please ignore it.

Kind regards

[Staff 9751]

UPDATE

After further investigation, you should be able to accomplish your task simply adding in the routing table specified above the following IP range:

208.79.64.0/22

Kind regards

[okcmallrat 0]

I guess maybe I'm using the wrong gateway. I've been using the router gateway of 192.168.1.1

Is this wrong?

[Staff 9751]

I guess maybe I'm using the wrong gateway. I've been using the router gateway of 192.168.1.1

Is this wrong?

Hello!

Please determine your router gateway (192.168.1.1 looks ok on most DD-WRT default setup). Please do not forget to read all our replies on your open ticket in the HelpDesk, we have detected several problems on your iptables rules.

Kind regards