Remove mercurius4 obfs4 bridge from Tor Browser?
According to my and Lynn Tsai's bridge reachability measurements, the default obfs4 bridge mercurius4 has not been running for a few months. It was refusing connections in March and April, and more recently has just been timing out. Time to remove it? pref("extensions.torlauncher.default_bridge.obfs4.6", "obfs4 104.131.108.182:56880 EF577C30B9F788B0E1801CF7E433B3B77792B77A cert=0SFhfDQrKjUJP8Qq6wrwSICEPf3Vl/nJRsYxWbg3QRoSqhl2EB78MPS2lQxbXY4EW1wwXA iat-mode=0");
On 18 Jul (17:36:54), David Fifield wrote:
I'm not sure what's the requirement to get a bridge in Tor Browser but if you are looking for a replacement, I've set up an obfs4 bridge couple weeks ago on a server that is pretty fast an with a nice port (443). If it could be useful, please let me known! Cheers! David
On Mon, Jul 18, 2016 at 08:42:30PM -0400, David Goulet wrote:
Yes, we're interested in having more bridges. Let's coordinate with Lynn and the TB maintainers so we can start measuring its reachability in advance. You should first block the bridge's ORPort, in order to keep it out of BridgeDB--that will help us in our blocking-delay experiment.
David Fifield transcribed 1.8K bytes:
Yes, this would be great! We need a lot more bandwidth for the TB default obfs4 bridges — the current bridges are pretty saturated.
Were tickets ever created for removing mercurius4 and adding David Goulet's bridge? -- ♥Ⓐ isis agora lovecruft _________________________________________________________ OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35 Current Keys: https://fyb.patternsinthevoid.net/isis.txt
David Fifield transcribed 2.8K bytes:
I made #19838 for adding dgoulet's bridge, and started asking if there's a second bridge we might add. -- ♥Ⓐ isis agora lovecruft _________________________________________________________ OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35 Current Keys: https://fyb.patternsinthevoid.net/isis.txt
David Fifield wrote:
Hi David, I decommissioned mercurius4 back in April. It had some odd behavior that I strongly suspect was an issue with the ISP (digital ocean). The bridge would seem to be up all the time (I even set it to restart process and SMS me when it went down), but was inexplicably slow and ultimately started refusing connections. I ruled out iptables issues and a few people couldn't figure the issue out either. Then I ran other test services on that box, and they were fine. There didn't seem to be a way forward with the bridge, so I shut it down. =/ If I were to run a large bridge again, I'd probably use Greenhost or run it from Harvard. best, Griffin -- Accept what you cannot change, and change what you cannot accept. PGP: 0x03cf4a0ab3c79a63
participants (5)
-
David Fifield -
David Goulet -
Griffin Boyce -
isis agora lovecruft -
Tom van der Woerdt