Choosing to run vanilla or obfuscated bridge
I know that vanilla bridges cannot carry obfsproxy traffic. But can obfsproxied bridges carry vanilla traffic? If not, are there criteria to help me decide which bridge configuration is useful at any particular time? - eliaz
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hey, as far as i know a bridge can carry both, normal vanilla traffic and obfsproxied traffic. you specify your normal ORPort to listen e.g. on port 443 and specify a different port for obfsproxy traffic. if you specify your obfsproxy as ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed the port for obfs3 is randomly chosen at first start. Regards Andreas Am 29.10.2014 um 09:20 schrieb eliaz:
I know that vanilla bridges cannot carry obfsproxy traffic. But can obfsproxied bridges carry vanilla traffic? If not, are there criteria to help me decide which bridge configuration is useful at any particular time? - eliaz _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJUUWKjAAoJEIQyuRD08qdahvAP/12X+V9myaIBYbSPRQrbfWYC q2Bx2p3QmWa4Gzapy5Be+OYfNS/6VnzwiizQLgz5lgU9DrCZ2jzWX7WFxyjFRUkh w0+akvYu5pSLpq0/tJAH38m2VlXgqxNVOOWCdGs7/a93btVe2nhL/9BAweEhq4vi T2cIyUH60ptwZvsABaH0zvfHcCfRJPiESvnWqjEIX2sM9sswXyTmTOdjfwe50SEl P8+K1HGNQmBiaeq5cBxNYtSWWzWFOFeRHYuGlc4yEjEyLhQLoDXGR306HD6lntJy rG5ao68rb+4WhxJBuv2gyMxRjIweagHZzuxsfKbZce1XfGM8vgewWhE2huWxlrUy MC77OgVVuuy3B4aPAO/vszGRH09IDcXGWO8vAsrsRegn+gW2R5qowCpSDA2XI7F2 ZMu/mGN2+Jk6eZ+JJdqaLcc18mpHK9DTEQYTxOkBjV4iRIjb4AZpx+L8nZIOGmL9 f6MYJ+lp4znHksjn2BL/8nSc6Yz+QGIRQ6Cw0HwvAmUFSP8B+k1+PeIz9CJJS4NO ANdmDIdGc95ir2tdP0ng+iKJuwnE9kMDltHwv8dfRabqyz0Xq1cixyP4+EDZcqxF siZBvfUy5KM+rFEz97eJqOI09r+0Ak4hEip9lFcBJ8JeA3tWoLOaPhKjOOEQeCvq mA80zUMmzc0y3dMm7Fes =SG5C -----END PGP SIGNATURE-----
On Wed, Oct 29, 2014 at 08:20:15AM +0000, eliaz wrote:
I know that vanilla bridges cannot carry obfsproxy traffic. But can obfsproxied bridges carry vanilla traffic? If not, are there criteria to help me decide which bridge configuration is useful at any particular time? - eliaz
Hi eliaz, As a followup to Andreas message, vanilla bridges (only setting the torrc Bridge line) will only speak and look like the Tor protocol on the wire. Pluggable transports usually sit directly in front of Tor and transform the Tor-protocol-looking-data into whatever the pluggable transport creates. At this point, Tor only speaks the Tor protocol and each pluggable transport only speak their specific protocols. Each component does what it does best. So, to answer your question, only Obfsproxy understands the obfuscated protocols (obfs2, obfs3, scramblesuit) and Tor understands Tor. If you are thinking about running a bridge then it would be awesome if you can run a bridge and run the pluggable transports[0]. And, if your brave, you can also try running the new Obfs4proxy[1] pluggable transport. Does this make sense? Let us know if you have any more questions. - Matt [0] https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en#in... [1] https://lists.torproject.org/pipermail/tor-relays/2014-September/005372.html
participants (3)
-
Andreas Reich -
eliaz -
Matthew Finkel