alardus / portaller Goto Github PK

Pass traffic through SNI will not run for Netflix or Hulu Plus with non-SNI players like the PS3, Xbox 360, Samsung TVs, Sony BluRay players and possibly quite a few other devices. Other guys suggested to use Netfilter’s DNAT port forwarding mechanism to overcome this limitation. Using DNAT you can forward packets based on the source-ip:port to a remote-ip:port.

Depending on the resolved IP addresses and ports, iptables DNAT rules will forward the request to a HAProxy proxy on your remote server. Each domain name can have its own internal IP adress and thus its own listening port on your remote server’s HAProxy. And since every domain name can have it’s own HAProxy TCP proxy on your remote server, there’s no need for SNI!

http://trick77.com/2014/04/02/netflix-dns-unblocking-without-sni-xbox-360-ps3-samsung-tv/

Собственно можете добавить прокси до данных ресурсов?

It would be great if the list here http://portaller.com/setup#dnsmasq would be more complete on which domains to add to dnsmasq.conf (which you are supporting)

Love the service!

Не все люди могут использовать DNS для проксирования трафика:

• У некоторых изменения DNS запрещены доменной политикой;
• Кто-то боится что его запросы могут логироваться на чужом сервере;
• Кому-то, даже по инструкции, сложно перенастроить системный DNS.

Вместо этого они были бы рады установить расширение для браузера, через которое могли бы включать и выключать "доступ к заблокированным сервисам" (читай проксирование). Работа над расширением ведется в отдельном проекте - https://github.com/alardus/radiotower.

Существующий раздел Настроек (http://portaller.com/setup) уныл:

• Информации очень мало, даны лишь базовые рекомендации по настройке DNS в системе;
• Какого-либо визуального стиля нет.

Что хочется сделать:

• Превратить раздел настроек в сборник рецептов - как настроить то или иное клиентское оборудование;
• Рассказать о том как настроить:
  • Роутер из магазина (asus, zyxel, etc);
  • Cамосборного роутера (dnsmasq);
  • Win & Mac;
  • XBOX One;
  • PlayStation 4;
  • Samsung Smart Tv;
• Для устройств поддержка которых сейчас отсутствует - фактически всё android-based - честно пишем что пока не работает.

Are there any thoughts on incorporation of Hulu support to the service ?

In this topic I suggest considering and looking for the possible ways.

Hello
I just tried to create the 3 rules for the Firewall, as suggested in http://portaller.com/setup
But unfortunately no traffic is being forwarded...
0 Bytes and 0 Packets for the NAT rule (after I open www.pandora.com in the webbrowser)

What am I doing wrong?
Regards

Описать текущий алгоритм по которому происходит защита от dns amp, какие другие методы используются. Разобрать случаи, когда эти меры не помогают. Придумать как улучшить существующее решение. Улучшить.

Hi,

Thanks for the free awesome service. Everything works except Pandora.

I visited pandora once (dont know if it changes anything) and then knew about Portaller. Even after changing DNS, clearing dns cache and evrything, I still get the "Pandora is not available in your country"page.

I have checked Netflix, Amazon, Spotify, i dont have any problems

Hi folks,

First, thanks for the awesomeness of portaller :)

I've been trying to use the Logitech Media Server (LMS) with Pandora plugin to no avail...
I have now a RPI3 with dietpi and squeezebox (server ) and squeezelite (player) installed.

Even though i force dns on my squezzebox server and player, I keep getting error because country is not supported by pandora.
What I discovered from tcpdump is that the plugin communicates with http://www.mysqueezebox.com/api/pandora (POST with mysqueezebox credentials, mac adress and so on)
which send the error back ("country not supported"). It is very likely that this api do an IP region verification.

I was wondering if you could add "www.mysqueezebox.com" to portaller to route everything from your servers. I do think that this verification is only on connection initiation.

I'll try to help as much as I can but my knowledge in python is quite inexistant. I just couldn't even figure if this github hosts all the portaller code ...

With my Sony Blu-ray player I'm not able to stream Netflix. This is the log from dnsmasq (from cold boot 'till access of the native Netflix app):

Mar 30 17:05:55 unknown daemon.info dnsmasq-dhcp[30412]: DHCPOFFER(br0) 192.168.1.34 3c:07:71:cd:3d:XX 
Mar 30 17:05:55 unknown daemon.info dnsmasq-dhcp[30412]: DHCPREQUEST(br0) 192.168.1.34 3c:07:71:cd:3d:XX 
Mar 30 17:05:55 unknown daemon.info dnsmasq-dhcp[30412]: DHCPACK(br0) 192.168.1.34 3c:07:71:cd:3d:XX 
Mar 30 17:05:55 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:55 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:55 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:56 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:56 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:56 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:57 unknown daemon.info dnsmasq[30412]: query[A] m.root-servers.net from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[A] ssm.internet.sony.tv from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm.internet.sony.tv from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[A] ssm.internet.sony.tv from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[A] blu-ray.update.sony.net from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[AAAA] blu-ray.update.sony.net from 192.168.1.34
Mar 30 17:05:58 unknown daemon.info dnsmasq[30412]: query[A] blu-ray.update.sony.net from 192.168.1.34
Mar 30 17:05:59 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:59 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:05:59 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:00 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:00 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:00 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:02 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:02 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:02 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:03 unknown daemon.info dnsmasq[30412]: query[A] call.me.sel.sony.com from 192.168.1.34
Mar 30 17:06:03 unknown daemon.info dnsmasq[30412]: query[AAAA] call.me.sel.sony.com from 192.168.1.34
Mar 30 17:06:03 unknown daemon.info dnsmasq[30412]: query[A] call.me.sel.sony.com from 192.168.1.34
Mar 30 17:06:36 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:36 unknown daemon.info dnsmasq[30412]: query[AAAA] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:36 unknown daemon.info dnsmasq[30412]: query[A] ssm1.internet.sony.tv from 192.168.1.34
Mar 30 17:06:46 unknown daemon.info dnsmasq[30412]: query[A] uiboot.netflix.com from 192.168.1.34
Mar 30 17:06:46 unknown daemon.info dnsmasq[30412]: query[AAAA] uiboot.netflix.com from 192.168.1.34
Mar 30 17:06:49 unknown daemon.info dnsmasq[30412]: query[A] nrdp.nccp.netflix.com from 192.168.1.34
Mar 30 17:06:49 unknown daemon.info dnsmasq[30412]: query[AAAA] nrdp.nccp.netflix.com from 192.168.1.34
Mar 30 17:06:49 unknown daemon.info dnsmasq[30412]: query[A] nrdp.nccp.netflix.com from 192.168.1.34

Как сейчас считаются активные пользователи (те, что в онлайне):

• netstat -ant | grep EST | awk {'print $5'} | cut -d : -f 1 | sort | uniq | wc -l

Нужно верифицировать алгоритм и либо как-то поправить, либо оставить как есть.

As experiment shown, commit 5f96453 resolved this bug, but needed 3 extra VPS with individual IP. Need do find more cheep way to get a few extra individual IP ;(

Workaround for those who have router with linux onboard on client side - set up additional virtual IP's on router and forward them to Portaller - https://github.com/alardus/portaller/pull/12/files#diff-dd9686770b7e0194e42cda1b551e88f5

Affected:
#21
#15
#13

Привет.
spotify.com резолвится в реальные адреса.

$ dig @107.170.15.247 spotify.com +short
194.132.198.228
194.132.198.165
194.132.197.147
$ dig @107.170.15.247 pandora.com +short
107.170.15.247

После запуска, видимо, не может достучаться до своих серверов и считает что находится в offline mode. По ощущениям проблема имеет те же корни, что и баг в работе TuneIn.

It seems to be a good idea to implement the support of the Amazon Fire TV / TV Stick.

I've just got the one from US Amazon via a mail-forwarder service and after initial connection (to both a WiFi and Amazon account) it recognized me as German user of Amazon.de. It's completely wrong since my A account has been registered to american shipping address.

As it's seen below, the 1st Amazon's address is already German one. Just a reboot hasn't been force it to resolve any additional addresses. In the week I'll try to factory reset the Stick and to compare the addresses list is being resolved immediately after.

The full list of addresses resolved by the Stick is following:
A? 2.android.pool.ntp.org.
AAAA? spectrum.s3.amazonaws.com.
AAAA? ntp-g7g.amazon.com.
A? spectrum.s3.amazonaws.com.
A? ntp-g7g.amazon.com.
AAAA? www.amazon.com.
A? www.amazon.com.
AAAA? prime.amazon.eu.
A? prime.amazon.eu.
AAAA? ktpx-eu.amazon.com.
AAAA? ktpx-eu.amazon.com.
A? ktpx-eu.amazon.com.
AAAA? ktpx-eu.amazon.com.
AAAA? atv-eu.amazon.com.
A? atv-eu.amazon.com.
AAAA? aax-eu.amazon-adsystem.com.
A? aax-eu.amazon-adsystem.com.
AAAA? df9v6ngw2bw7n.cloudfront.net.
A? df9v6ngw2bw7n.cloudfront.net.
AAAA? clients3.google.com.
A? clients3.google.com.
AAAA? messaging-director-us-east-1.amazon.com.
A? messaging-director-us-east-1.amazon.com.
AAAA? transponder.amazon.de.
A? transponder.amazon.de.
AAAA? ktpx-eu.amazon.com.
AAAA? cs-ext-eu.amazon.com.
A? cs-ext-eu.amazon.com.
AAAA? dp-gw-na.amazon.com.
A? dp-gw-na.amazon.com.
AAAA? www.amazon.com.
A? www.amazon.com.
AAAA? d21m0ezw6fosyw.cloudfront.net.
A? d21m0ezw6fosyw.cloudfront.net.
AAAA? device-messaging-na.amazon.com.
A? device-messaging-na.amazon.com.
AAAA? www.amazon.com.
AAAA? www.amazon.com.
AAAA? todo-ta-g7g.amazon.com.
A? todo-ta-g7g.amazon.com.
AAAA? dp-rsm-prod.amazon.com.
A? dp-rsm-prod.amazon.com.
A? spectrum.s3.amazonaws.com.
AAAA? dp-gw-na.amazon.com.

• Remove Rdio support from configs

Amazon video seems to have stopped working.

I think will be really cool if you create app for mac (menubar) with autoconfiguration and on/off mode :)

just not loading

У tunein есть несколько вариантов прослушивания:

• На сайте
• Через приложение на iOS / Android

После разлочки основных хостов прослушивание на сайте работает прекрасно, однако приложение не работает вообще - пробует установить SSL коннекшен при статте, но почему-то не может.

Добрый день,

Не работает на Spotify клиенте под MacOS, и на IOS, стандартная ошибка: Error code 408

Ну и самое обидное - не может залогиниться и на ресивере тоже. Там есть два типа ошибок - или логин еррор, или вроде как залогинилось, но при попытке проиграть - cannot play.

http://avasil.at.yandex-team.ru/25

Web client works fine, but the Mac OS client not working.

How hard is it to add vudu.com to the list?

hi can you add some future in primary dns like : block ads , filter porn sexual website , malware , .... ??
and can you please fix the status page ? they have issue in that

thank you