[tor-bugs] #30599 [Applications/Tor Browser]: Cloudflare alt-svc onions cause a different exit to be used at each request

[Tor Bug Tracker & Wiki]

#30599: Cloudflare alt-svc onions cause a different exit to be used at each request
--------------------------------------+--------------------------------
 Reporter:  cypherpunks2              |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ux-team                   |  Actual Points:
Parent ID:  #30024                    |         Points:
 Reviewer:                            |        Sponsor:  Sponsor27-must
--------------------------------------+--------------------------------

Comment (by sysrqb):

 From ticket:27502#comment:15
 {{{
 2020-01-16 00:10:32.776036 UTC - [Parent 2414: Socket Thread]: V/nsHttp
 nsHttpConnectionMgr::RestrictConnections 0x7f50a89a4040
 .S.P....[tlsflags0x00000000]perfectoid.space:443
 (socks:127.0.0.1:9150)[perfectoid.space:2<D4>><B2>G<A4>r<C0>JX^^<BA><9E>N<B2><C2>Q^V<DD><E0>r<8D>_u<90><E1><CA>A'<E4><B9>"]
 <ROUTE-via
 cflares35lvdlczhy3r6qbza5jjxbcplzvdveabhf7bsp7y4nzmn67yd.onion:443> {NPN-
 TOKEN h2}^privateBrowsingId=1&firstPartyDomain=perfectoid.space restricted
 due to active >=h2
 2020-01-16 00:10:32.776038 UTC - [Parent 2414: Socket Thread]: V/nsHttp
 OnMsgSpeculativeConnect Transport not created due to existing connection
 count
 2020-01-16 00:10:32.776040 UTC - [Parent 2414: Socket Thread]: D/nsHttp
 AltSvcTransaction dtor 0x7f50a94bda80 map 0x7f50a892f230 running 1
 2020-01-16 00:10:32.776042 UTC - [Parent 2414: Socket Thread]: D/nsHttp
 AltSvcTransaction::MaybeValidate() 0x7f50a94bda80 reason=0 running=1
 conn=(nil) write=0
 2020-01-16 00:10:32.776044 UTC - [Parent 2414: Socket Thread]: D/nsHttp
 AltSvcTransaction::MaybeValidate 0x7f50a94bda80 Failed due to precondition
 2020-01-16 00:10:32.776046 UTC - [Parent 2414: Socket Thread]: D/nsHttp
 AltSvcTransaction dtor 0x7f50a94bda80 map 0x7f50a892f230 validated 0
 [https:perfectoid.space:443:P:^privateBrowsingId=1&firstPartyDomain=perfectoid.space]
 }}}

 The failed validation was due to existing connections at that time.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30599#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online