Can be run on provider edge and is much more stable than old ettercap. Of course set probe as close to target at possible. Combined with sslstrip+ and dns2proxy forwarding with multiple routeable interfaces hsts bypass flat dangerous  let along getting hooked bEef.