tor-commits June 2011

tor-commits@lists.torproject.org

14 participants
716 discussions

[flashproxy/rtmfp] Make parse_addr_spec static.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 3cfcc0dcab1f8235bc847b12b03e265006575382 Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 13:47:53 2011 -0700 Make parse_addr_spec static. Uniformity with master. --- swfcat.as | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/swfcat.as b/swfcat.as index d24c833..e75ffac 100644 --- a/swfcat.as +++ b/swfcat.as @@ -260,7 +260,7 @@ package /* Parse an address in the form "host:port". Returns an Object with keys "host" (String) and "port" (int). Returns null on error. */ - private function parse_addr_spec(spec:String):Object + private static function parse_addr_spec(spec:String):Object { var parts:Array; var addr:Object;

1 0

[flashproxy/rtmfp] Move the rate limit back into swfcat from ProxyPair.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 832f6bcf7fda65054a553aeeaf569d493030bf85 Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 14:03:08 2011 -0700 Move the rate limit back into swfcat from ProxyPair. It should be global, not per-ProxyPair. Also uniformity with master. --- ProxyPair.as | 117 ++-------------------------------------------------------- swfcat.as | 108 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 112 insertions(+), 113 deletions(-) diff --git a/ProxyPair.as b/ProxyPair.as index 6ca60ef..fa51933 100644 --- a/ProxyPair.as +++ b/ProxyPair.as @@ -30,13 +30,6 @@ package private var relay_socket:Socket; private var r2c_schedule:Array; - // Bytes per second. Set to undefined to disable limit. - private const RATE_LIMIT:Number = undefined; //10000; - // Seconds. - private const RATE_LIMIT_HISTORY:Number = 5.0; - - private var rate_limit:RateLimit; - // Callback id. private var flush_id:uint; @@ -51,11 +44,6 @@ package this.c2r_schedule = new Array(); this.r2c_schedule = new Array(); - if (RATE_LIMIT) - rate_limit = new BucketRateLimit(RATE_LIMIT * RATE_LIMIT_HISTORY, RATE_LIMIT_HISTORY); - else - rate_limit = new RateUnlimit(); - setup_relay_socket(); /* client_socket setup should be taken */ @@ -147,25 +135,25 @@ package /* Can't do anything until connected. */ return; - while (!rate_limit.is_limited() && (c2r_schedule.length > 0 || r2c_schedule.length > 0)) { + while (!ui.rate_limit.is_limited() && (c2r_schedule.length > 0 || r2c_schedule.length > 0)) { var num_bytes:uint; if (c2r_schedule.length > 0) { num_bytes = c2r_schedule.shift(); transfer_bytes(null, relay_socket, num_bytes); - rate_limit.update(num_bytes); + ui.rate_limit.update(num_bytes); } if (r2c_schedule.length > 0) { num_bytes = r2c_schedule.shift(); transfer_bytes(relay_socket, null, num_bytes); - rate_limit.update(num_bytes); + ui.rate_limit.update(num_bytes); } } /* Call again when safe, if necessary. */ if (c2r_schedule.length > 0 || r2c_schedule.length > 0) - flush_id = setTimeout(flush, rate_limit.when() * 1000); + flush_id = setTimeout(flush, ui.rate_limit.when() * 1000); } /* Helper function to write output to the @@ -177,100 +165,3 @@ package } } } - -import flash.utils.getTimer; - -class RateLimit -{ - public function RateLimit() - { - } - - public function update(n:Number):Boolean - { - return true; - } - - public function when():Number - { - return 0.0; - } - - public function is_limited():Boolean - { - return false; - } -} - -class RateUnlimit extends RateLimit -{ - public function RateUnlimit() - { - } - - public override function update(n:Number):Boolean - { - return true; - } - - public override function when():Number - { - return 0.0; - } - - public override function is_limited():Boolean - { - return false; - } -} - -class BucketRateLimit extends RateLimit -{ - private var amount:Number; - private var capacity:Number; - private var time:Number; - private var last_update:uint; - - public function BucketRateLimit(capacity:Number, time:Number) - { - this.amount = 0.0; - /* capacity / time is the rate we are aiming for. */ - this.capacity = capacity; - this.time = time; - this.last_update = getTimer(); - } - - private function age():void - { - var now:uint; - var delta:Number; - - now = getTimer(); - delta = (now - last_update) / 1000.0; - last_update = now; - - amount -= delta * capacity / time; - if (amount < 0.0) - amount = 0.0; - } - - public override function update(n:Number):Boolean - { - age(); - amount += n; - - return amount <= capacity; - } - - public override function when():Number - { - age(); - return (amount - capacity) / (capacity / time); - } - - public override function is_limited():Boolean - { - age(); - return amount > capacity; - } -} diff --git a/swfcat.as b/swfcat.as index e75ffac..42bcfea 100644 --- a/swfcat.as +++ b/swfcat.as @@ -41,6 +41,11 @@ package // Milliseconds. private const FACILITATOR_POLL_INTERVAL:int = 10000; + // Bytes per second. Set to undefined to disable limit. + public const RATE_LIMIT:Number = undefined; + // Seconds. + private const RATE_LIMIT_HISTORY:Number = 5.0; + // Socket to Cirrus server private var s_c:CirrusSocket; // Socket to facilitator. @@ -65,6 +70,8 @@ package private var fac_addr:Object; private var relay_addr:Object; + public var rate_limit:RateLimit; + public function swfcat() { proxy_mode = false; @@ -73,6 +80,11 @@ package // Absolute positioning. stage.scaleMode = StageScaleMode.NO_SCALE; stage.align = StageAlign.TOP_LEFT; + + if (RATE_LIMIT) + rate_limit = new BucketRateLimit(RATE_LIMIT * RATE_LIMIT_HISTORY, RATE_LIMIT_HISTORY); + else + rate_limit = new RateUnlimit(); // Wait until the query string parameters are loaded. this.loaderInfo.addEventListener(Event.COMPLETE, loaderinfo_complete); @@ -279,6 +291,7 @@ package import flash.text.TextFormat; import flash.text.TextField; +import flash.utils.getTimer; class Badge extends flash.display.Sprite { @@ -360,3 +373,98 @@ class Badge extends flash.display.Sprite cur_client_count_tf.appendText("."); } } + +class RateLimit +{ + public function RateLimit() + { + } + + public function update(n:Number):Boolean + { + return true; + } + + public function when():Number + { + return 0.0; + } + + public function is_limited():Boolean + { + return false; + } +} + +class RateUnlimit extends RateLimit +{ + public function RateUnlimit() + { + } + + public override function update(n:Number):Boolean + { + return true; + } + + public override function when():Number + { + return 0.0; + } + + public override function is_limited():Boolean + { + return false; + } +} + +class BucketRateLimit extends RateLimit +{ + private var amount:Number; + private var capacity:Number; + private var time:Number; + private var last_update:uint; + + public function BucketRateLimit(capacity:Number, time:Number) + { + this.amount = 0.0; + /* capacity / time is the rate we are aiming for. */ + this.capacity = capacity; + this.time = time; + this.last_update = getTimer(); + } + + private function age():void + { + var now:uint; + var delta:Number; + + now = getTimer(); + delta = (now - last_update) / 1000.0; + last_update = now; + + amount -= delta * capacity / time; + if (amount < 0.0) + amount = 0.0; + } + + public override function update(n:Number):Boolean + { + age(); + amount += n; + + return amount <= capacity; + } + + public override function when():Number + { + age(); + return (amount - capacity) / (capacity / time); + } + + public override function is_limited():Boolean + { + age(); + return amount > capacity; + } +}

1 0

[flashproxy/rtmfp] Remove SQSProxyPair.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit e36a17361895f039409458aeff5e6786c87236eb Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 14:26:36 2011 -0700 Remove SQSProxyPair. At the moment it's just dead code. --- SQSProxyPair.as | 77 ------------------------------------------------------- swfcat.as | 9 ------ 2 files changed, 0 insertions(+), 86 deletions(-) diff --git a/SQSProxyPair.as b/SQSProxyPair.as deleted file mode 100644 index 20a6a65..0000000 --- a/SQSProxyPair.as +++ /dev/null @@ -1,77 +0,0 @@ -package -{ - import flash.events.Event; - import flash.events.EventDispatcher; - import flash.events.IOErrorEvent; - import flash.events.ProgressEvent; - import flash.events.SecurityErrorEvent; - import flash.net.Socket; - import flash.utils.ByteArray; - - public class SQSProxyPair extends ProxyPair - { - private var client_socket:Socket; - - public function SQSProxyPair(ui:swfcat) - { - super(this, ui); - - log("Starting SQS proxy pair"); - setup_client_socket(); - } - - override public function set client(client_addr:Object):void - { - this.client_addr = client_addr; - log("Client: connecting to " + client_addr.host + ":" + client_addr.port + "."); - client_socket.connect(client_addr.host, client_addr.port); - } - - override public function close():void - { - super.close(); - if (client_socket != null && client_socket.connected) { - client_socket.close(); - } - dispatchEvent(new Event(Event.CLOSE)); - } - - override public function get connected():Boolean - { - return (super.connected && client_socket != null && client_socket.connected); - } - - override protected function transfer_bytes(src:Object, dst:Object, num_bytes:uint):void - { - var bytes:ByteArray = new ByteArray(); - - if (src == null) { - src = client_socket; - } - - if (dst == null) { - dst = client_socket; - } - - Socket(src).readBytes(bytes, 0, num_bytes); - log("SQSProxyPair: transferring " + num_bytes + " bytes."); - Socket(dst).writeBytes(bytes); - } - - private function setup_client_socket():void - { - client_socket = new Socket(); - - client_socket.addEventListener(Event.CONNECT, function (e:Event):void { - log("Client: connected to " + client_addr.host + ":" + client_addr.port + "."); - if (connected) { - dispatchEvent(new Event(Event.CONNECT)); - } - }); - client_socket.addEventListener(Event.CLOSE, socket_error("Client: closed")); - client_socket.addEventListener(IOErrorEvent.IO_ERROR, socket_error("Client: I/O error")); - client_socket.addEventListener(SecurityErrorEvent.SECURITY_ERROR, socket_error("Client: security error")) - client_socket.addEventListener(ProgressEvent.SOCKET_DATA, client_to_relay); - } - } -} diff --git a/swfcat.as b/swfcat.as index 42bcfea..1281b9f 100644 --- a/swfcat.as +++ b/swfcat.as @@ -13,7 +13,6 @@ package import ProxyPair; import RTMFPProxyPair; - import SQSProxyPair; import TCPProxyPair; import rtmfp.CirrusSocket; @@ -257,14 +256,6 @@ package return new RTMFPProxyPair(this, s_c, s_c.local_stream_name); } - // currently is the same as TCPProxyPair - // could be interesting to see how this works - // can't imagine it will work terribly well... - private function sqs_proxy_pair_factory():ProxyPair - { - return new SQSProxyPair(this); - } - private function tcp_proxy_pair_factory():ProxyPair { return new TCPProxyPair(this);

1 0

[flashproxy/rtmfp] Remove unused and unnecessary proxy_pairs local.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 02c9a40838804f2e0cc2b935b00b944078d9d7cd Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 14:45:24 2011 -0700 Remove unused and unnecessary proxy_pairs local. --- swfcat.as | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) diff --git a/swfcat.as b/swfcat.as index 1281b9f..8e54f72 100644 --- a/swfcat.as +++ b/swfcat.as @@ -55,8 +55,6 @@ package private var client_id:String; private var proxy_pair_factory:Function; - private var proxy_pairs:Array; - private var debug_mode:Boolean; private var proxy_mode:Boolean; @@ -118,9 +116,6 @@ package } puts("Starting: parameters loaded."); - - /* TODO: use this to have multiple proxies going at once */ - proxy_pairs = new Array(); fac_spec = this.loaderInfo.parameters["facilitator"]; if (fac_spec) {

1 0

[flashproxy/rtmfp] Add an RTMFPSocket class.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 9a85e5b90a37c8c989cda04f69862b82f25ca924 Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 21:26:55 2011 -0700 Add an RTMFPSocket class. --- RTMFPSocket.as | 209 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 209 insertions(+), 0 deletions(-) diff --git a/RTMFPSocket.as b/RTMFPSocket.as new file mode 100644 index 0000000..e23c4fd --- /dev/null +++ b/RTMFPSocket.as @@ -0,0 +1,209 @@ +/* +The RTMFPSocket class provides a socket-like interface around RTMFP +NetConnection and NetStream. Each RTMFPSocket contains one NetConnection and two +NetStreams, one for reading and one for writing. + +To create a listening socket: + var rs:RTMFPSocket = new RTMFPSocket(url, key); + rs.addEventListener(Event.COMPLETE, function (e:Event):void { + // rs.id is set and can be sent out of band to the client. + }); + rs.addEventListener(RTMFPSocket.ACCEPT_EVENT, function (e:Event):void { + // rs.peer_id is the ID of the connected client. + }); + rs.listen(); +To connect to a listening socket: + // Receive peer_id out of band. + var rs:RTMFPSocket = new RTMFPSocket(url, key); + rs.addEventListener(Event.CONNECT, function (e:Event):void { + // rs.id and rs.peer_id are now set. + }); +*/ + +package +{ + import flash.events.Event; + import flash.events.EventDispatcher; + import flash.events.IOErrorEvent; + import flash.events.NetStatusEvent; + import flash.events.ProgressEvent; + import flash.net.NetConnection; + import flash.net.NetStream; + import flash.utils.ByteArray; + + public class RTMFPSocket extends EventDispatcher + { + public static const ACCEPT_EVENT:String = "accept"; + + public var connected:Boolean; + + private var nc:NetConnection; + private var incoming:NetStream; + private var outgoing:NetStream; + + /* Cache to hold the peer ID between when connect is called and the + NetConnection exists. */ + private var connect_peer_id:String; + + private var buffer:ByteArray; + + private var cirrus_url:String; + private var cirrus_key:String; + + public function RTMFPSocket(cirrus_url:String, cirrus_key:String) + { + connected = false; + + buffer = new ByteArray(); + + this.cirrus_url = cirrus_url; + this.cirrus_key = cirrus_key; + + nc = new NetConnection(); + } + + public function get id():String + { + return nc.nearID; + } + + public function get peer_id():String + { + return incoming.farID; + } + + /* NetStatusEvents that aren't handled more specifically in + listen_netstatus_event or connect_netstatus_event. */ + private function generic_netstatus_event(e:NetStatusEvent):void + { + switch (e.info.code) { + case "NetConnection.Connect.Closed": + dispatchEvent(new Event(Event.CLOSE)); + break; + case "NetStream.Connect.Closed": + connected = false; + close(); + break; + default: + var event:IOErrorEvent = new IOErrorEvent(IOErrorEvent.IO_ERROR); + event.text = e.info.code; + dispatchEvent(event); + break; + } + } + + private function listen_netstatus_event(e:NetStatusEvent):void + { + switch (e.info.code) { + case "NetConnection.Connect.Success": + outgoing = new NetStream(nc, NetStream.DIRECT_CONNECTIONS); + outgoing.client = { + onPeerConnect: listen_onpeerconnect + }; + outgoing.publish("server"); + + /* listen is complete, ready to accept. */ + dispatchEvent(new Event(Event.COMPLETE)); + break; + case "NetStream.Connect.Success": + break; + default: + return generic_netstatus_event(e); + break; + } + } + + private function listen_onpeerconnect(peer:NetStream):Boolean { + incoming = new NetStream(nc, peer.farID); + incoming.client = { + r: receive_data + }; + incoming.play("client"); + + connected = true; + dispatchEvent(new Event(ACCEPT_EVENT)); + + return true; + } + + private function connect_netstatus_event(e:NetStatusEvent):void + { + switch (e.info.code) { + case "NetConnection.Connect.Success": + outgoing = new NetStream(nc, NetStream.DIRECT_CONNECTIONS); + outgoing.publish("client"); + + incoming = new NetStream(nc, connect_peer_id); + incoming.client = { + r: receive_data + }; + incoming.play("server"); + break; + case "NetStream.Connect.Success": + connected = true; + dispatchEvent(new Event(Event.CONNECT)); + break; + default: + return generic_netstatus_event(e); + break; + } + } + + /* Function called back when the other side does a send. */ + private function receive_data(bytes:ByteArray):void { + var event:ProgressEvent; + + event = new ProgressEvent(ProgressEvent.SOCKET_DATA); + event.bytesLoaded = bytes.bytesAvailable; + + bytes.readBytes(buffer, buffer.length, bytes.bytesAvailable); + if (bytes.bytesAvailable == 0) { + /* Reclaim memory space. */ + bytes.position = 0; + bytes.length = 0; + } + + dispatchEvent(event); + } + + public function listen():void + { + nc.addEventListener(NetStatusEvent.NET_STATUS, listen_netstatus_event); + nc.connect(cirrus_url, cirrus_key); + } + + public function connect(peer_id:String):void + { + /* Store for later reading by connect_netstatus_event. */ + this.connect_peer_id = peer_id; + + nc.addEventListener(NetStatusEvent.NET_STATUS, connect_netstatus_event); + nc.connect(cirrus_url, cirrus_key); + } + + public function close():void + { + outgoing.close(); + incoming.close(); + nc.close(); + } + + public function readBytes(output:ByteArray, offset:uint = 0, length:uint = 0):void + { + buffer.readBytes(output, offset, length); + } + + public function writeBytes(input:ByteArray, offset:uint = 0, length:uint = 0):void + { + var sendbuf:ByteArray; + + /* Read into a new buffer, in case offset and length do not + completely span input. */ + sendbuf = new ByteArray(); + sendbuf.writeBytes(input, offset, length); + + /* Use a short method name because it's sent over the wire. */ + outgoing.send("r", sendbuf); + } + } +}

1 0

[flashproxy/rtmfp] Remove spurious differences from master branch.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 04b11aa394ec3484844ed146d832ffa8d90fb16a Author: David Fifield <david(a)bamsoftware.com> Date: Sat Jun 11 14:52:18 2011 -0700 Remove spurious differences from master branch. --- swfcat.as | 98 +++++++++++++++++++++++++++++++++--------------------------- 1 files changed, 54 insertions(+), 44 deletions(-) diff --git a/swfcat.as b/swfcat.as index 8e54f72..ac52ec8 100644 --- a/swfcat.as +++ b/swfcat.as @@ -37,6 +37,8 @@ package port: 9002 }; + private const MAX_NUM_PROXY_PAIRS:uint = 1; + // Milliseconds. private const FACILITATOR_POLL_INTERVAL:int = 10000; @@ -54,84 +56,90 @@ package private var client_id:String; private var proxy_pair_factory:Function; + private var relay_addr:Object; - private var debug_mode:Boolean; private var proxy_mode:Boolean; /* TextField for debug output. */ private var output_text:TextField; - - /* Badge for display */ + + /* UI shown when debug is off. */ private var badge:Badge; + /* Number of proxy pairs currently connected (up to + MAX_NUM_PROXY_PAIRS). */ + private var num_proxy_pairs:int = 0; + private var fac_addr:Object; - private var relay_addr:Object; public var rate_limit:RateLimit; + public function puts(s:String):void + { + output_text.appendText(s + "\n"); + output_text.scrollV = output_text.maxScrollV; + } + public function swfcat() { - proxy_mode = false; - debug_mode = false; - // Absolute positioning. stage.scaleMode = StageScaleMode.NO_SCALE; stage.align = StageAlign.TOP_LEFT; + output_text = new TextField(); + output_text.width = stage.stageWidth; + output_text.height = stage.stageHeight; + output_text.background = true; + output_text.backgroundColor = 0x001f0f; + output_text.textColor = 0x44cc44; + + badge = new Badge(); + if (RATE_LIMIT) rate_limit = new BucketRateLimit(RATE_LIMIT * RATE_LIMIT_HISTORY, RATE_LIMIT_HISTORY); else rate_limit = new RateUnlimit(); - + + puts("Starting."); // Wait until the query string parameters are loaded. this.loaderInfo.addEventListener(Event.COMPLETE, loaderinfo_complete); } - - public function puts(s:String):void - { - if (output_text != null) { - output_text.appendText(s + "\n"); - output_text.scrollV = output_text.maxScrollV; - } - } private function loaderinfo_complete(e:Event):void { var fac_spec:String; - var relay_spec:String; - debug_mode = (this.loaderInfo.parameters["debug"] != null) - proxy_mode = (this.loaderInfo.parameters["proxy"] != null); - if (proxy_mode && !debug_mode) { - badge = new Badge(); - addChild(badge); - } else { - output_text = new TextField(); - output_text.width = stage.stageWidth; - output_text.height = stage.stageHeight; - output_text.background = true; - output_text.backgroundColor = 0x001f0f; - output_text.textColor = 0x44cc44; + puts("Parameters loaded."); + + if (this.loaderInfo.parameters["debug"]) addChild(output_text); - } - - puts("Starting: parameters loaded."); - - fac_spec = this.loaderInfo.parameters["facilitator"]; - if (fac_spec) { - puts("Facilitator spec: \"" + fac_spec + "\""); - fac_addr = parse_addr_spec(fac_spec); - if (!fac_addr) { - puts("Error: Facilitator spec must be in the form \"host:port\"."); - return; - } - } else { - fac_addr = DEFAULT_FACILITATOR_ADDR; + else + addChild(badge); + + proxy_mode = (this.loaderInfo.parameters["proxy"] != null); + + fac_addr = get_param_addr("facilitator", DEFAULT_FACILITATOR_ADDR); + if (!fac_addr) { + puts("Error: Facilitator spec must be in the form \"host:port\"."); + return; } main(); } + /* Get an address structure from the given movie parameter, or the given + default. Returns null on error. */ + private function get_param_addr(param:String, default_addr:Object):Object + { + var spec:String, addr:Object; + + spec = this.loaderInfo.parameters[param]; + if (spec) + return parse_addr_spec(spec); + else + return default_addr; + } + /* The main logic begins here, after start-up issues are taken care of. */ private function main():void { @@ -175,7 +183,8 @@ package proxy_pair_factory = rtmfp_proxy_pair_factory; start_proxy_pair(); s_c.send_hello(e.peer); - } else if (!debug_mode && badge != null) { + } else { + num_proxy_pairs++; badge.proxy_begin(); } @@ -238,7 +247,8 @@ package p_p.addEventListener(Event.CLOSE, function (e:Event):void { puts("ProxyPair: connection closed."); p_p = null; - if (proxy_mode && !debug_mode && badge != null) { + if (proxy_mode) { + num_proxy_pairs--; badge.proxy_end(); } establish_facilitator_connection();

1 0

[flashproxy/master] Show the debug window output always in client mode.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit 67ac951f4b75983d1329edab7ab781f0caafd28c Author: David Fifield <david(a)bamsoftware.com> Date: Sun Jun 12 01:24:53 2011 -0700 Show the debug window output always in client mode. --- swfcat.as | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/swfcat.as b/swfcat.as index 27752e9..9739419 100644 --- a/swfcat.as +++ b/swfcat.as @@ -96,7 +96,7 @@ package puts("Parameters loaded."); - if (this.loaderInfo.parameters["debug"]) + if (this.loaderInfo.parameters["debug"] || this.loaderInfo.parameters["client"]) addChild(output_text); else addChild(badge);

1 0

[flashproxy/master] Move the rate limit back into swfcat from ProxyPair.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

1 0

[flashproxy/master] Make proxy mode the default in swfcat.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit f0e063240a4c3d673256d82f42fbecd4e35ba1e5 Author: David Fifield <david(a)bamsoftware.com> Date: Sun Jun 12 01:21:59 2011 -0700 Make proxy mode the default in swfcat. In other words, use client=true instead of nothing for client mode, and nothing instead of proxy=true for proxy mode. This makes it a drop-in replacement for master swfcat. --- swfcat.as | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/swfcat.as b/swfcat.as index 1d99ad4..27752e9 100644 --- a/swfcat.as +++ b/swfcat.as @@ -107,10 +107,10 @@ package return; } - if (this.loaderInfo.parameter["proxy"]) - proxy_main(); - else + if (this.loaderInfo.parameters["client"]) client_main(); + else + proxy_main(); } /* Get an address structure from the given movie parameter, or the given

1 0

[flashproxy/master] Update documentation for combined TCP/RTMFP proxy.
by dcf＠torproject.org 12 Jun '11

12 Jun '11

commit f6e2fb73a707c34760326fa760406a38f7144c35 Author: David Fifield <david(a)bamsoftware.com> Date: Sun Jun 12 01:40:11 2011 -0700 Update documentation for combined TCP/RTMFP proxy. --- README | 73 +++++++++++++++++++++++++++++++++++++----------------------- design.txt | 19 +++++++++++---- 2 files changed, 59 insertions(+), 33 deletions(-) diff --git a/README b/README index ff12174..4b6a2dc 100644 --- a/README +++ b/README @@ -16,6 +16,10 @@ There are five main parts. Our terminology for each part is in quotes. 5. A Tor "relay," which is just a normal Tor relay except that its host must also serve a Flash crossdomain policy. +A proxy is capable of connecting to a client in two ways: Using a normal +TCP connection, or over Adobe RTMFP, which involves a third party but is +capable of traversing NAT. + == Demonstration page https://crypto.stanford.edu/flashproxy/ @@ -28,42 +32,56 @@ Download the (free software) Flex SDK. http://opensource.adobe.com/wiki/display/flexsdk/Flex+SDK Put its bin directory in your PATH. The important executable is mxmlc. -You need a Cirrus developer key from Adobe. Put it in the environment -variable CIRRUS_KEY so it can be found by Makefile. +For RTMFP support, you need a Cirrus developer key from Adobe. Put it in +the environment variable CIRRUS_KEY so it can be found by Makefile. $ export CIRRUS_KEY=XXXXXXXXXXXXXXXXXXXXXXXX-YYYYYYYYYYYY To build, run $ make Copy the resulting swfcat.swf file to a web server. -On the computer that will be the facilitator, run +=== Connecting + +On the Tor relay, run sudo ./crossdomaind.py - ./facilitator.py -crossdomaind.py needs to be run on any server that will accept -connections from a Flash proxy. It serves a chunk of data on port 843. +In general, any computer that a proxy connects to needs to serve a +crossdomain policy, but the connector and facilitator have it built in. + +On the facilitator, run + ./facilitator.py -r <relay-ip> The facilitator runs on port 9002 by default. +In a browser somewhere, open swfcat.swf and pass it a parameters telling it +which facilitator to use, for example + http://www.example.com/swfcat.swf?facilitator=<facilitator-ip>:9002&debug=1 + +There are two ways in which the client can receive connections: over TCP +or RTMFP. TCP doesn't send traffic to anyone other than the facilitator +and the proxy, but it only works if you have a public IP address. RTMFP +coordinates connections using a server controlled by Adobe, but works +when the client is behind a NAT. + +To connect with TCP, run + ./connector.py -f <facilitator-ip> +(If you are running the facilitator locally, be sure to use an external +IP address, not 127.0.0.1.) The connector informs the facilitator that +it wants a connection, then listens on 0.0.0.0:9000 and 127.0.0.1:9001. +The proxy will connect on port 9000 and the local Tor will connect on +9001. + +To connect with RTMFP, run + ./connector.py 127.0.0.1:9001 127.0.0.1:9002 +and open in a browser + http://www.example.com/swfcat.swf?client=1&facilitator=<facilitator-ip>:9002 +In this case, it is swfcat running in client mode that registers with +the facilitator. The connector acts to join the local swfcat and the +local Tor client. + The client needs to be running a version of Tor that supports the Socks4Proxy configuration. This means version 0.2.2.1-alpha or later--not the current stable release. -On the client, run - ./connector.py 127.0.0.1:9001 127.0.0.1:9002 -Also on the client, open up the browser to swfcat.swf. Passing no -arguments should give you good defaults (expects the facilitator running -on Nate's server). swfcat will connect to the Cirrus server to -obtain a client ID which it then registers with the facilitator. - -In a browser somewhere, open swfcat.swf and pass parameters telling it -which facilitator to use and to operate in proxy mode. - http://www.example.com/swfcat.swf?proxy=true&facilitator=<FACILITATOR_IP>:9002&debug=1 -This swfcat will also connect to the Cirrus server to obtain a client ID, -and then it will ping the facilitator to check if there are any registered -client IDs. If there is one, it will open a RTMFP connection (coordinated -by the Cirrus server) to the client and an additional connection to a -Tor relay. - -Back on the client, start Tor with the following configuration: +Start Tor with the following configuration: UseBridges 1 Bridge 127.0.0.1:9001 Socks4Proxy 127.0.0.1:9001 @@ -73,8 +91,8 @@ If you see messages like [notice] no known bridge descriptors running yet; stalling try deleting the files in ~/.tor or /var/lib/tor. -You will be able to see byte counts flowing in both browsers displaying -swfcat.swf (client and proxy), and eventually be able to build a circuit. +You will be able to see byte counts flowing in the browser window, and +eventually be able to build a circuit. == Rationale @@ -92,16 +110,15 @@ policy. Clients register with the facilitator by sending an HTTP message: POST / HTTP/1.0\r\n \r\n - client=<CIRRUS-CLIENT-ID> + client=<ip-addr/rtmfp-id> The Flash proxy also gets a client address over HTTP: GET / HTTP/1.0\r\n \r\n The server sends back address specifications of a client and a relay in an HTTP respose. HTTP/1.0 200 OK\r\n - Server: BaseHTTP/0.3 Python/2.5.2\r\n \r\n - client=<CIRRUS-CLIENT-ID>&relay=9.9.9.9:9001 + client=<ip-addr/rtmfp-id>&relay=<relay-ip> == ActionScript programming diff --git a/design.txt b/design.txt index 27be8ab..2d5ad2b 100644 --- a/design.txt +++ b/design.txt @@ -101,13 +101,19 @@ Design of Flash proxies On startup, the connector sends a registration message to the facilitator, informing the facilitator that it is waiting for a connection. The facilitator will later hand this registration to a - Flash proxy. The registration message is an HTTP POST request of this + Flash proxy. The registration message is an HTTP POST request of the form: POST / HTTP/1.0 client=[<address>]:<port> + or the form: + + POST / HTTP/1.0 + + client=[<rtmfp-id>]:<port> + The facilitator sends a 200 reply if the registration was successful and an error status otherwise. If the connector omits the [<address>] part, the facilitator will automatically fill it in based on the HTTP @@ -141,11 +147,14 @@ Design of Flash proxies client=[<address>:<port>]&relay=<address>:<port> - If <address>:<port> is missing, it means that there are no client - registrations for this proxy. + or this: + + client=[<rtmfp-id>]&relay=<address>:<port> + + If the value for the client parameter is empty, it means that there are no + client registrations for this proxy. - The Flash proxy may serve more than one relay–client pair at once. It - limits its own bandwidth to 10 KB/s (combined upload/download). + The Flash proxy may serve more than one relay–client pair at once. 8. Behavior of the facilitator

1 0

← Newer
1
...
33
34
35
36
37
38
39
...
72
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits June 2011