However in this case, the pressure coming from the government must be
incredible. Amazon is not the only victim of these intimidations. US
government employees have been forbidden to visit Wikileaks sites and
to discuss these matters on Facebook. At least one US university has
been 'persuaded' to ask their students not to reference any Wikileaks
documents in their research papers... (how is that for doing thorough
research!).
Even crounties bend under US pressure. We have seen it to be the case
with Spain & Germany which dropped their lawsuits, investigations and
enforcement of arrest warrants for torture and kidnappings
(renditions) after the US pressured them (source Wikileaks cables).
So I would assume that Google or any organization would probably comply as well.
To ensure free speech can not be prevented by taking down web sites,
we need to create a totally distributed website hosting technology
based on BitTorrent or something similar.
Happy coding. ;-)
Daniel Guermeur
Co-author of App Engine Java and GWT Development: http://bit.ly/hdTHyB
Blog: http://supercobrablogger.blogspot.com/
> --
> You received this message because you are subscribed to the Google Groups "Google App Engine" group.
> To post to this group, send email to google-a...@googlegroups.com.
> To unsubscribe from this group, send email to google-appengi...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
>
>
http://www.google.com/transparencyreport/governmentrequests
--
Ikai Lan
Developer Programs Engineer, Google App Engine
Blogger: http://googleappengine.blogspot.com
Reddit: http://www.reddit.com/r/appengine
Twitter: http://twitter.com/app_engine
Surely in this thread you asking if Google would do anything themselves?
That IP address gets banned? Set up a new instance. Keep getting
banned? Automate the process.
Jeff
http://lmgtfy.com/?q=reverse+proxy
On Fri, Dec 10, 2010 at 8:25 AM, timwhunt <timw...@gmail.com> wrote:
> Regarding the reverse proxy idea:
>
> Will the user's IP address get passed through so your app / Google's
> service sees it (and not the proxy server)?
Google's service will see the proxy's address. However you can pass
the originating IP as an additional header and process it as you like.
> Will it work for SSL/https connections too? Will browsers bark that
> names don't match certificates or some other problem?
You can use SSL for this but it's a bit more complicated. The SSL
connection will be established between the client and the proxy using
your certificate, then a different connection is established between
the proxy and GAE. Depending on your threat model you may wish to use
SSL for the backend connection, which will use the google cert to
appspot.com.
It's worth noting that this is essentially what the SSL feature does
at Google Apps for Business, except that Google runs the proxy, and
the leg between the proxy and GAE is on Google's secure network.
Without SNI, SSL requires a dedicated IP address.
> Is that a good alternative to using a custom domain via Google
> domains?
It isn't an either/or issue. If you need to work around the fact that
AppEngine uses a pool of shared IP addresses (SSL is an example;
geocode ratelimits are another), use proxies - either outbound
(traditional proxy) or inbound (reverse proxy). Pick a facility that
is logically close to GAE (ping from rackspace cloud is 12ms) and
users will never notice the difference.
Jeff