Re: "blocking ... between 1 and 50 sites a year"
>Doesn't matter if the whole thing is dumb and unworkable.
Sadly I think the scheme is workable. As in, the plan is to turn the internet into a government-managed network.
It isn't hard to filter out all the video and audio providers and isp dns servers and then dpi remaining Udp for dns. I suspect those 30gbit nics with fpga's would be useful. You can do the dpi offline and once you've found the service, add in a redirect in an upstream isp network. Or don't do a redirect, just tag the source IP for "special attention."
Until we start building wholesale encrypted networks and/or manage to demand the removal of such features, the government control creep will continue.