Contd. Blocking VPNs & Circumvention Tools
However, at the time of the leak, the AppSketch Works project appeared to be in the early
stages of development and the prototype had received unfavorable feedback from clients
due to the need for higher level technical skills to configure it, and issues with
misclassifications.11 However, it is worth noting as further development of this tool would
allow Geedge to shift the responsibility of defining blocking rules onto the government
client, instead of the client always outsourcing this process to Geedge.
Image Caption:
This is a screenshot
extracted from the Geedge
Networks dataset showing
Appsketch. The screenshot
was included in a guide to
clients on how to update
blocking features by
removing the older versions
of blocking rules for
applications before
uploading new ones.
Throttling Traffic
TSG incorporates traffic shaping capabilities that facilitate the prioritization or throttling of
traffic from specific services, which can degrade the quality of service rather than blocking
it outright. This is accomplished either through direct traffic shaping or by applying
Differentiated Services Code Point (DSCP) marking, the industry standard for limiting or
prioritizing traffic. This is another instance where we can see that Geedge clients are able
to use network equipment from any manufacturer and it will be compatible with TSG.
Assigning User Reputation Scores
Sanity Directory (SAN) or User Reputation Traffic Management System is a subscriber
awareness system designed to integrate TSG seamlessly with Internet Service Providers'
(ISPs) existing signaling and authentication, authorization, and accounting (AAA) protocols
including RADIUS, 3GPP, and CGNAT. This integration facilitates the attribution of traffic
flows to real identities.