Re: [tor-relays] Checking a bridge
I have the same worry as Martin. I set up a bridge on AWS 2 weeks ago by following the instructions here https://cloud.torproject.org/ and choosing a bridge image for Ireland. Setup went well, log files on startup tell me my bridge contacts the tor network, and I checked I could use my bridge by explicitly configuring it in a tor client. But the traffic I see in arm is very small (around 100 MB / week) compared to what I observed when I tested a tor relay (over 2 GB in a week-end). On the other hand, I didn't find my fingerprint in Globe. Is there something wrong or can this be a normal situation that happens sometime ? Do all fingerprints end up in Globe ? T. Lunar :
Martin Kepplinger:
When my bridge uses only the same few MBs each day, i guess it isn't used at all right?
Is there a simple way to ensure it is in bridgeDB and functioning as it should?
You can search for the bridge fingerprint in Globe: http://globe.rndm.de/
Globe will hash the fingerprint before sending it to Onionoo to prevent leaks.
Gary Anderson:
I have the same worry as Martin. I set up a bridge on AWS 2 weeks ago by following the instructions here https://cloud.torproject.org/ and choosing a bridge image for Ireland.
Setup went well, log files on startup tell me my bridge contacts the tor network, and I checked I could use my bridge by explicitly configuring it in a tor client. But the traffic I see in arm is very small (around 100 MB / week) compared to what I observed when I tested a tor relay (over 2 GB in a week-end). On the other hand, I didn't find my fingerprint in Globe.
Is there something wrong or can this be a normal situation that happens sometime ? Do all fingerprints end up in Globe ?
T.
Please keep threads together. Just use reply normally. I will not send my fingerprint to globe over http. I want to keep it secret so I can't check my bridge. I hope it works. obfs-ports are forwarded and everything else are standard torrc-settings. But please make globe accessible over https. thanks
Lunar :
Martin Kepplinger:
When my bridge uses only the same few MBs each day, i guess it isn't used at all right?
Is there a simple way to ensure it is in bridgeDB and functioning as it should?
You can search for the bridge fingerprint in Globe: http://globe.rndm.de/
Globe will hash the fingerprint before sending it to Onionoo to prevent leaks.
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Martin Kepplinger:
I will not send my fingerprint to globe over http. I want to keep it secret so I can't check my bridge. I hope it works. obfs-ports are forwarded and everything else are standard torrc-settings.
But please make globe accessible over https.
Unless you are subject to a MITM and the JavaScript code is changed before reaching your browser, Globe will *not* send the fingerprint of the bridge to Onionoo (over HTTPS), only the hashed version. But I understand extra catiousness. -- Lunar <lunar@torproject.org>
Lunar:
Martin Kepplinger:
I will not send my fingerprint to globe over http. I want to keep it secret so I can't check my bridge. I hope it works. obfs-ports are forwarded and everything else are standard torrc-settings.
But please make globe accessible over https.
Unless you are subject to a MITM and the JavaScript code is changed before reaching your browser, Globe will *not* send the fingerprint of the bridge to Onionoo (over HTTPS), only the hashed version. But I understand extra catiousness.
Maybe there's no need to give my hash to globe. I checked with arm and it sees _outbound_ connections. Is that evidence enough that the bridge is used? My standard-relay doesn't see any outbound connections (though relaying lots of data of course). Would be nice if somebody could confirm that outbound connections in a properly configured bridge mean that it is actually _used_ already. thanks
_______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
participants (3)
-
Gary Anderson -
Lunar -
Martin Kepplinger