Slashdot Mirror


EFF Slams Google Fiber For Banning Servers On Its Network

MojoKid writes "Anyone who has tried to host their own website from home likely knows all-too-well the hassles that ISPs can cause. Simply put, ISPs generally don't want you to do that, preferring you to move up to a business package (aka: more expensive). Not surprisingly, the EFF doesn't like these rules, which seem to exist only to upsell you a product. The problem, though, is that all ISPs are deliberately vague about what qualifies as a 'server.' Admittedly, when I hear the word 'server,' I think of a Web server, one that delivers a webpage when accessed. The issue is that servers exist in many different forms, so to target specific servers 'just because' is ridiculous (and really, it is). Torrent clients, for example, act as servers (and clients), sometimes resulting in a hundred or more connections being established between you and available peers. With a large number of connections like that being allowed, why would a Web server be classified any different? Those who torrent a lot are very likely to be using more ISP resources than those running websites from their home — yet for some reason, ISPs force you into a bigger package when that's the kind of server you want to run. We'll have to wait and see if EFF's movement will cause any ISP to change. Of all of them, you'd think it would have been Google to finally shake things up."

22 of 301 comments (clear)

  1. Why? by Anonymous Coward · · Score: 5, Insightful

    "Of all of them, you'd think it would have been Google to finally shake things up"

    Maybe when the do no evil line seemed to ring true, now they seem nearly as evil as the rest around.

  2. Obviously by Anonymous Coward · · Score: 0, Insightful

    Well, it is obvious that Google Fiber doesn't want to allow people to host their own server parks behind that really fast broadband line. (I can understand that.)
    I reckon that personal servers (like a Network Attached Storage (NAS) device with files for oneself and friends) is OK for Google, but hosting a high traffic business website is not.

    1. Re:Obviously by gl4ss · · Score: 5, Insightful

      Well, it is obvious that Google Fiber doesn't want to allow people to host their own server parks behind that really fast broadband line. (I can understand that.)
      I reckon that personal servers (like a Network Attached Storage (NAS) device with files for oneself and friends) is OK for Google, but hosting a high traffic business website is not.

      well what are they selling then exactly? write some goddamn rules down about it. tell the users of the service the goddamn rules!how many megabytes daily is too much? that's what it's all about in the end. if it's an income generating rule then tell that(if you're making money with the connection).

      a fileserver for a few friends can take EASILY the same amount of traffic as a general web service that has let's say 300 daily users.

      --
      world was created 5 seconds before this post as it is.
    2. Re: Obviously by Anonymous Coward · · Score: 1, Insightful

      They did read the fucking Terms of Service, it says they forbid for business servers, ie you make money off it. But no one on Slashdot can read.

  3. Pros/Cons by dlarmeir · · Score: 3, Insightful

    Yes, running a server from a home ISP is great for people to learn technology, sparks creativity, and is great for those of us who are IT focused. On the other hand, imagine the security nightmare a network like Google Fiber could become with 1gb uplinks and tons of rogue apps and sites infected by malware, bots, etc. There are a lot of IT admins not taking security seriously and if you couple that with inexperienced home admins the threat is real. I'm not taking a stance on this issue saying yes or no, but there would have to be tight controls on the network in order for this to work effectively - hence one of the reasons Google may be reluctant to support it.

    1. Re:Pros/Cons by vux984 · · Score: 3, Insightful

      There are a lot of IT admins not taking security seriously and if you couple that with inexperienced home admins the threat is real.

      The "threat"? The threat of what exactly?

      You do realize botnets are already a very real thing. What on earth would be made "worse" if a handful of savvy customers were also running their blog on a private webserver in their basement?

    2. Re:Pros/Cons by maccodemonkey · · Score: 5, Insightful

      On the other hand, imagine the security nightmare a network like Google Fiber could become with 1gb uplinks and tons of rogue apps and sites infected by malware, bots, etc.

      Because this never ever ever happens on machines that aren't web servers.

    3. Re:Pros/Cons by maccodemonkey · · Score: 4, Insightful

      I never implied that there are not other problems on networks, I was just stating a truth. I feel unnecessary exposure exasperates the problem. This is not a attack on home based servers, I am very much keen on running them myself.

      I'm confused. It's not like the article is saying everyone should turn on an http server. Just like how other users run Bittorrent servers, or Starcraft servers, or advertise any sort of port at all, why should people not be able to run web servers when they deem it necessary? I don't think the implication was that everybody should unnecessarily run web servers.

      If we're out to prevent unnecessary exposure, why not ban all those all services that have server components and could use resources or be reverse engineered?

    4. Re:Pros/Cons by girlintraining · · Score: 5, Insightful

      here are a lot of IT admins not taking security seriously and if you couple that with inexperienced home admins the threat is real.

      Hi. I've been doing network administration for close to a decade. If there's one thing I've learned, it's that you can't cure stupid. And being smart and experience is no bar from fucking up either. I've done it. You've done it. The guy replying to this comment insisting he wouldn't, yup -- he's done it too. You don't get good network security on your own... it's a team effort. The more eyeballs you have, the less of a chance of screwing up. But it's never zero. There's never perfect security; If it was achievable, I'd be out of a job.

      So let's just put to bed now the notion that "tons of rogue apps and sites infected" wouldn't happen if the people on the other end were intelligent and experienced. It'll happen to anyone you put on the other side of that router. Anyone.

      Now, let's talk about servers: On the internet, there's no such thing. Oh, you know and I know what a server is. But defining a server at the network level is like defining porn: You know it when you see it. But it's an arbitrary distinction. As far as the network is concerned, it's just a network address... like all the other network addresses. Its only job is to get the packets from the source to the destination. At the network level (ie, the internet), there's no such thing as a server. Now, here's the rub; Whatever arbitrary definition you come up with for what a server is, you're going to find an exception. A grey area. Bittorrent has no concept of a server, for example -- everyone is both a client and a server... or more accurately, a peer. Many protocols are like that.

      From a practical standpoint, there is no way to define a server that won't, in some manner, ban a legitimate use situation by someone who isn't trying to "serve" anything. It's unenforceable anyway -- you're just a tunneled connection away from plausible deniability. Connect your server to the Tor network as a hidden service...

      Ultimately, the only thing the ISP will be able to claim is that your upload:download ratio isn't like most of the others on their network. And this, right here, is the key to the argument. ISPs don't want people to have a lot of upstream capacity because they can't cache it, buffer it, or otherwise manipulate the data streams to avoid paying for bandwidth out to their border routers. Comcast, for example, intercepts windows update connections and re-routes them to local servers. They have hundreds of them. As far as the actual download of a patch goes, Microsoft never hears from your computer if you're a Comcast user.

      Stuff like that is the reason for the fail whale language about "servers"; It means less profit. Network administration and security is separate -- it may be the excuse, but it's not the reason.

      --
      #fuckbeta #iamslashdot #dicemustdie
  4. I'll be donating to the EFF again this week. by Simulant · · Score: 5, Insightful


    I can live with not running a business off my consumer internet connection but I am mad as hell that I can't run my own mail server.

    At this point one wonders if the NSA is involved....

  5. Why so confused? by scarboni888 · · Score: 4, Insightful

    It's very simple. If it's a 'server' that can generate revenue then they want their share.

    You can't charge bittorrent clients you are seeding to but you can take credit card numbers, paypal donations, and bitcoins through a web page.

    Remember to always follow the godforsaken $$$ whenever you want an answer to anything even remotely related to business.

    It's not hard, really.

  6. Use more, pay more by bhlowe · · Score: 4, Insightful

    If you're using the service more, you should expect to pay more. Otherwise, the little guys end up subsidizing your bandwidth hogging ways... rather than the other way around, where the big data guys pay more, and the little data using guys pay less. You expect that with almost every known business transaction.... get off your wallet and pay the extra cash for a business account... (I have Comcast business level internet for an extra $50/mo and I have 30Mbps upload... a terrific deal that I don't expect the little lady down the street to subsidize.)

  7. Re:WEB hosting isn't expensive by ODBOL · · Score: 4, Insightful

    Your choice. Other people have other reasons to make other choices. The question here is not, "why run a WWW server at home?" but, "why prohibit people from running servers at home?"

    --
    Mike O'Donnell http://people.cs.uchicago.edu/~odonnell/
  8. Re:friends by Sarten-X · · Score: 3, Insightful

    Here at Slashdot, we take pride in our relatively-uncensored publication practices. We rely on the public moderators to appropriately judge the value of comments, and accordingly hide spam comments from most viewers. Spam stories, however, are given free reign over the front page.

    --
    You do not have a moral or legal right to do absolutely anything you want.
  9. But Google said... by wjcofkc · · Score: 5, Insightful

    When they started this whole fiber deal, Google clearly stated that they had no idea what people might use this bandwidth for. They said it was an experiment to see what creative uses people might find for it. This policy clearly goes against that statement. As someone who will have Google Fiber available in the next couple months, this is frustrating. I am a "tinkerer/pseudo hacker", and that means sometimes running an internet facing server of some sort for pure nerd learning purposes. Sigh...

    --
    Brought to you by Carl's Junior.
  10. Default blocking and non-comm OK, but make opt. by damacus · · Score: 3, Insightful

    My opinion is that it makes sense for default settings (protecting those inadvertently sharing, preventing a trojan from starting up a common service or opening VNC to the world, etc etc), but a customer should be able to call in and ask that they be exempted from those restrictions. I do understand also non-commercial stipulations and am fine with that too.. but I should never have to wonder if, as a customer, I'm violating my ToS by having SSH and a VPN service sitting on my connection.. it's one of those things where even unenforced it can be used as means for termination and whatnot.

  11. A tale of two fibers. by DewDude · · Score: 4, Insightful

    Screw whatever karma points I'm not going to get...I have nothing too insightful to say on this matter; but i'm going to talk anyway.

    I, too, feel it's a trumped up way of making customers pay for a higher tier. I too wonder why they specifically are targeting web-servers than anything else. One part of me wants to say it's a "public" vs "private" aspect. Look at a device like a Slingbox for example. When you get down to it; it's a server. It's a little device that sends data over the internet. At the same time; it's "hidden" and not publically accessible. You need two individual logins to be able to connect to it; one for the slingbox website; another for the slingbox itself. It's not like *anyone* can drive by my IP and go "I think i'll stream some video". I don't know of a single ISP that's had issue with this. I'm sure there's a few people with google fiber running one. Verizon has never taken an attempt to block mine. or tell me I needed to stop running it. Hell, having this insane amount of bandwidth is what made me invest in one in the first place. Same goes for my remote SSH access. Yeah; that's a server alright; but again, it's not a "public" thing...and mine isn't even on a standard port. So, maybe there's a distinction between a "public" server; like an httpd; and "private" servers like SSH, games, torrents; etc. I run a VPN on my network...and that's not even raised any eyebrows by my ISP...and within that VPN I've got access to any server running on my LAN. Again, this is what leads me to believe they make a distinction between public servers pumping out data to everyone; and private servers that "just happen to use your residential" account.

    But, let me focus on Verizon for just another minute; since it's the only ISP I've used for the last 11 years (12 if you count the year my DSL was technically GTEi). My original DSL TOS was on like...a 4"x4" leaflet...and said *nothing* about servers. I read that tiny piece of paper three or four times.....GTE (this was before they completely merged the networks sometime in '02) didn't care if you ran a server on your DSL. Therefore; I did. In fact, I ran a server a large majority of the time I was on a DSL connection. Verizon never blocked port 80....and I don't think they even scanned. Oddly enough; the only port they blocked was 25. It was for trying to reduce the amount of spam people's PCs were sending out; and they gave a TON of notice about it. I didn't have a business account...they probably didn't have to tell me; but they did. They even called me to make sure I knew about the upcoming block on incoming port 25. I ran web-servers; ftp; ssh; shoutcast, even an ircd; never had Verizon "get after me" or block any ports.

    Ok, granted FiOS isn't offering a 1gpbs plan yet; and I don't know what ever happened to XG-PON...but even now, they don't forcibly prevent you from running a server by blocking ports. A buddy of mine up in MA has a residential FiOS account and has been running an httpd for who knows how long. I've tried running services that are public on standard ports and never had an issue.

    There's...a lot I don' t know about how they handle; or even if they check. If google's blocking port 80 incomming (which is what I gathered from some of the comments); then how is it Verizon...whose been called extremely evil...not?

    Maybe part of it is the "old" way of thinking it seems tech companies don't want to shake. Maybe they're lumping *anyone* who runs a server as a business; completely shunning the fact a home user might want to run a server as a hobby.

  12. Re:Bogus headline, flamebait. Shame, EFF. by FuzzNugget · · Score: 4, Insightful

    "Should not" is only a line in a config script away from "blocked."

    The point is that no ISP, least of all Google, should be taking this position. The terms "server" and "client" really just describe the instigator and direction of traffic flow. You start restricting that, the internet further degenerates into consumer and producer classes and becomes cable TV. *shudder*

    See why this is a net neutrality issue here?

  13. Re:If uploads are expensive, cap them specifically by symbolset · · Score: 4, Insightful

    Grandma has 5mbps up and 1mbps down in the case of Google Fiber free Internet. AFAIK she can saturate the whole thing for the whole seven years and it won't bother her or them. Google has said they expect 1Gbps connections to be free in 7 years.

    As far as overbuilding their network: they bought dark fiber already laid in the ground at pennies on the dollar during the .bomb era when companies who laid fiber thought interstate Long Distance at 56kbps and a dollar a minute would still be a thing. They bought it lock, stock and barrel. They didn't pay for overbuilding their network - failed telecom companies and their investors did. Technology has advanced now to where Google can put thousands of times more bits down that pipe than even the builders imagined. They didn't buy it to do this - they bought it to prevent being deprived of backhaul by a well monied competitor who wants to kill them. It is just incidental that technology has progressed to the point where they can push terabits rather than 100 megabits through each fiber.

    --
    Help stamp out iliturcy.
  14. Re:Bogus headline, flamebait. Shame, EFF. by peppepz · · Score: 4, Insightful
    Yes, they've put those words in the terms of services just for the fun of it. Because lawyers are such funny persons.

    Google was born out of net neutrality, and now that they've grown into a position of power, they suddendly find themselves against it. What specific words they chose to use has only a secondary importance. The decision they've made is political: you can only be in favour or against net neutrality, and they chose to be against. They don't want you to choose what to do with your internet connection. They want to be in control. In geekspeak, they're evil.

  15. Re:Bogus headline, flamebait. Shame, EFF. by peppepz · · Score: 5, Insightful

    Words mean things, and in this case they don't mean the things you say they do.

    Thank god vocabularies exist.

    You are trying to find a way to paint Google "evil".

    I speak concepts, and I do not question other people's motivations. The image of Google is painted by none other but Google themselves, with the actions they choose to take. You can't have a cake and eat it too.

    You are playing to your audience alone. Actually, the further out there you guys go with the tinfoil hat thing the less credible you are.

    Yes, resorting to personal attacks is the best-known sign of having good points.

  16. Re:Bogus headline, flamebait. Shame, EFF. by Eunuchswear · · Score: 2, Insightful

    That's an argument for them banning clients, not servers.

    --
    Watch this Heartland Institute video