Misleading article re shaping.
Nice article, but I think shaping gets off the hook far too lightly, too often. The degree of shaping here is a mostly a South African phenomenon and I'd argue that it is detrimental to the South African Internet user and the economy. The damage is a result of unintended consequences in the war against P2P traffic. Unfortunately, the South African broadband experience is the victim while P2P traffic surges under the cockroach-like resilience of the BitTorrent protocol.
Let's pretend you're Telkom. You notice that 90% of the traffic on SAT3/SAFE is P2P traffic and its coming from 5% of the user base. Lets now pretend you take unilateral technical steps to try and reduce this for the benefit of your customers.
Step 1: Protocols
- Summary: It's 2002, so eMule and eDonkey are responsible for most of the P2P traffic. Since these predominantly use ports 4661-4669, it seems like a good idea to shape any traffic travelling on these ports. Surely this will work?
- Result: P2P traffic immediately drops off from 90% of SAT3 to 50%. Hooray. The boss has new Gulfstream private jet from the savings and you've got a new Telkom gold pen.
- Unintended consequences: Virtually none, unless this port range is used by some bespoke applications. Hardly anyone is harmed by this action but will it last?
Step 2: Port whitelist
- Summary: It's 2003. P2P has moved on. eDonkey and eMule are dying. Limewire is at its peak and a little known protocol called BitTorrent is just starting to make an impact. Tracking all these ports is becoming a problem. But hey, why should you keep track of this constantly shifting mess? Simply let HTTP, HTTPS, FTP, VPN, POP3 and IMAP through unshaped and slow down everything else.
- Result: P2P drops down from 90% to 80%. It didn't help this much this time as P2P programs are opening so many shaped connections as to negate the effect somewhat. Still, the boss managed to buy a new car and you got a pat on the back. You also develop a God complex having just made an executive decision on behalf of the entire South African public's Global Internet experience (And your mother said you'd amount to nothing. Ha!).
- Unintended consequences: Users are wondering why video feeds from BBC news are so choppy, why global Internet radio is so rubbish and why the Internet seems like its got a multiple personality disorder. But the porn still loads quickly so the lay public assume video, radio, VoIP and teleconferencing are slow because South Africa is far away and the electrons get jetlagged.
Step 3: Cripple VPN/encrypted content
- Summary: Its 2004 and some cheeky bastards are using encrypted VPN connections to the UK and the US to bypass all your draconian measures. You can't tell good VPN usage from bad. In fact, when a connection is encrypted, you really have no idea what's inside it (perhaps that's the point?). Determined not be outdone and hoping for a refill for your gold pen, you decide to cripple all encrypted content.
- Result: VPN traffic drops to zero on shaped accounts. Your shaping is so effective that it isn't even possible to sustain a connection to the UK for more than a few minutes. P2P traffic drops from 90% to 89%. The boss isn't talking to you anymore.
- Unintended consequences: Anyone doing support work for overseas clients is forced to upgrade to an unshaped account. Overseas businessmen who are used to logging into multinational headquarters find that it just doesn't work in hotels or Internet cafes as they all use shaped connections. International businessmen assume South Africa has crap Internet.
I doubt in most parts of the world that a shaped South African Internet connection would meet the definition of broadband. As only a narrow range of protocols are allowed through at full speed, you are experiencing the global Internet according to Telkom. VPN connections simply don't work outside SA. Most VoIP software doesn't work reliably (Skype is only tolerable at times because of its P2P nature). In effect, Telkom has provided South Africa with a very fast 1990s Internet experience.
Sadly, most people don't even know what they're missing. Only a few people who've been able to put up the cash for an unshaped connection actually know what everyone is missing. And what's worse is that Telkom gets to compare its shaped prices with the UK's unshaped packages claiming that the price gap is not all that bad. Its still a factor of 10 if you compare apples to apples.
To top it off, the only thing that isn't a victim of all this shaping is P2P traffic which, owing to its massively distributed, highly innovative design, has been largely unaffected by the very measures meant to stop it.