Is that a thing countries do, like if they want to "punish" a site while retaining plausible deniability?
> Is that a thing countries do, like if they want to "punish" a site while retaining plausible deniability?
China and Russia do this with a lot of western sites, from what I've heard.
I have seen this actually happen IRL
If that's all too much fun for you, then skip most of it and only do #s 8 to 11 from your own network or favourite hot-spot.
Other times, they'll allow for bursts but sustained get rate limited - these can be detected just the same depending on their approach; if it's per connection (and not IP) you may have to find a big file to download.
It also helps to establish that traffic to other sites is not rate limited, and to use 3rd party checkers that check for connection rate across the globe. Or DIY and spin up a bunch of EC2 machines that are geographically diverse.
The easiest way to prove it is by using a VPN or a proxy. Check with different ISPs, also try mobile vs home.
That said, it’s not easy to prove it’s your country/ISP doing the slow down vs that website slowing down connections to your country.
It could be the bandwidth limitation of your ISP itself.
Sites like Github are slow when accessed from few countries. It's just that their servers are located mainly in the US(afaik).
tcpdump / wireshark would likely show lots of retransmits. Traceroute/mtr may give you an idea of where the loss starts. If you can find servers on similar hosting, you can get some idea of if it's targetted or not.
for example, stateful firewalls can only track a certain number of connections. If you don't have a public IP, or if they are trying to protect you, it may be necessary to wait for a connection resource to come available. Connections are generally expensive, different from data transfer, for these and other reasons, such as port starvation, syn flood defenses inappropriately targeting you, so many others.