PSA: slow work internet? try proxy pipelining

ShawnD1

Lifer
May 24, 2003
15,987
2
81
I'm putting this in off topic because it's a public service announcement.

Most offices run all internet through a proxy just to make sure you're not fucking around at work. Things like facebook and myspace and tube8 are all blocked. That's fine and all since most people don't jack off at work anyway. The side effect of this is a much slower browsing experience because the proxy server adds a considerable amount of lag time to all requests.

At home, requests look like this:
ask website for data --> website sends data

At work, it's like this:
ask proxy for data --> proxy asks website for data --> website sends data to proxy --> proxy sends data to you

Using more connections at one time does not fix this lag because each of those connections is still high latency. The result of many connections is a page where it's loading in 10 pieces an all 10 of those pieces are loading slow, so it's basically trying to load the entire page at one time. Pipelining gets around this by sending multiple requests at one time and getting the results back as if it were 1 connection. Instead of 3 partially loaded images, you get image 1 then 2 then 3, all of which were requested at the same time. The page appears to load faster when pipelining is on because the top of the page loads immediately then all of the stuff lower down is loaded while you are looking at the top of the page.

Enabling pipelining is easy. In firefox, go to the address "about:config" and search for "pipe". One of the results will be "network.http.proxy.pipelining". Change that from false to true. Another one of the search results will be about the maximum number of requests. Feel free to play with that and see what works best. Default is 4, some people set that higher, I have it set to 500 because I like the idea of the work proxy getting hammered (firefox probably has a maximum well below 500)
 
Last edited:

sdifox

No Lifer
Sep 30, 2005
100,329
17,913
126
lulz, hammering the proxy server will get your ass kicked, if no fired.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
I can see a backfire coming. A proxy server doesn't slow you down unless it's overloaded and you're loading it up even more and slowing it down.
 

ShawnD1

Lifer
May 24, 2003
15,987
2
81
that was supposed to be a joke. the maximum supported by firefox is 8 pipeline requests
 

SunnyD

Belgian Waffler
Jan 2, 2001
32,675
146
106
www.neftastic.com
Yeah, network services hates me enough all ready (to the point I think they have me requests-over-time limited in the first place). I'll settle for being pissed off when I get proxy time-outs every few minutes in place of being pissed off I don't have a paycheck.
 

DesiPower

Lifer
Nov 22, 2008
15,299
740
126
I possible scenario for the future - Network defects something fishy, they monitor my traffic, I get caught neffing, I get fired, my post count reached 50k in 1 month.
 

Macamus Prime

Diamond Member
Feb 24, 2011
3,108
0
0
I'd rather take a dump on my boss' desk and then try to bang as many hot women as possible in the supply closet.

Who am I kidding?? I'd even fuck the ugly chicks.
 

drebo

Diamond Member
Feb 24, 2006
7,034
1
81
Properly configured proxy server should be invisible to users. You should not notice that your shit's going through a proxy.
 

ViviTheMage

Lifer
Dec 12, 2002
36,189
87
91
madgenius.com
Properly configured proxy server should be invisible to users. You should not notice that your shit's going through a proxy.

exactly....If you want to get around it (proxies get blocked very quickly), change your RDP port at home to 443 and terminal service into your home pc.
 

rcpratt

Lifer
Jul 2, 2009
10,433
110
116
I'll live with the slow internet. Doing that would be way more likely to get me in trouble than just neffing 6 hours a day.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
How? port 443/80 are open on our firewall, everything else is blocked.


I figured spidey would come in here :D

Normally you block 443 and 80 from clients and only allow it from the proxy. Or you put a transparent proxy directly in line so the traffic MUST go through it. proxies and L7 firewalls are smart enough to recognize legitimate SSL and somebody tunneling over it. Companies have a very real problem with visitors or consultants tunneling through their firewall because it effectively renders ANY security they have null.
 

Crusty

Lifer
Sep 30, 2001
12,684
2
81
How? port 443/80 are open on our firewall, everything else is blocked.


I figured spidey would come in here :D

When the firewall operates on L7 it understands the applications that the messages are bound to and can filter based on that. HTTP, FTP, RDP, SSH, NFS etc all fall under that category.
 

JimmiG

Platinum Member
Feb 24, 2005
2,024
112
106
A properly configured Proxy would cache websites, leading to faster browser speeds and less bandwidth usage over the WAN link...

I personally think workplaces should allow Facebook and such. No one can be productive 100% of the time. A small break now and then isn't going to do any harm. It might actually be beneficial. Instead of monitoring what each employee is doing on their breaks, monitor their performance at work.
 

ViviTheMage

Lifer
Dec 12, 2002
36,189
87
91
madgenius.com
luckily I do not have to manage the firewall, just websense and routers/switches.

not sure how it's configured, my guess is it's open, because I can TS out, and we have a lot of customers/clients coming in that have to vpn that need it open I am sure.

we allow facebook, and it's always number 1 bandwidth consumer, next to youtube.
 

ShawnD1

Lifer
May 24, 2003
15,987
2
81
I personally think workplaces should allow Facebook and such. No one can be productive 100% of the time. A small break now and then isn't going to do any harm. It might actually be beneficial. Instead of monitoring what each employee is doing on their breaks, monitor their performance at work.

The reason they can't do this is because everyone would fuck around. When everyone is screwing around, you can't get a sense of how productive people should be.

With a bunch of things blocked, it separates the group into people who work and are good at it vs people who are still incapable of getting anything done even when everything on the internet is blocked. The later group gets fired.
 

Phokus

Lifer
Nov 20, 1999
22,994
779
126
Is there some software where you can setup an encrypted server at home and just bypass filters and hide websites?