The problem is you can't tell bittorrent or any other protocol from SSL if its encrypted. The only way to stop it is slow all random ip to random ip connections, basically if one of the endpoints isn't a major, known company its in the slow lane. Count on AWS creating a few Canadian regions.