Mike Perry authored Aug 04, 2022 and David Goulet committed Aug 11, 2022

We need to tune these, but we're not likely to need the subtle differences
between a few of them. Removing them will prevent our consensus parameter
string from becoming too long in the event of tuning.

Mike Perry authored Jul 31, 2022 and David Goulet committed Aug 11, 2022

This can avoid circuits getting stuck due to an abnormally low min value.

Mike Perry authored Jul 31, 2022 and David Goulet committed Aug 11, 2022

This allows us to average out minimums due to lulls in activity a bit more.

Mike Perry authored Jul 31, 2022 and David Goulet committed Aug 11, 2022

Since slow-start now checks every sendme, lower EWMA is better.

Mike Perry authored Jul 22, 2022 and David Goulet committed Aug 11, 2022

RFC3742 updates the cwnd every sendme during slow start, and backs off of the
exponential growth based on a cap parameter.

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

mike is concerned that we would get too much exposure to adversaries,
if we enforce that none of our L2 guards can be in the same family.

this change set now essentially finishes the feature that commit a77727cd
was attempting to add, but strips the "_and_family" part of that plan.

We had omitted some checks for whether our vanguards (second layer
guards from proposal 333) overlapped or came from the same family.
Now make sure to pick each of them to be independent.

Fixes bug 40639; bugfix on 0.4.7.1-alpha.

Signed-off-by: David Goulet <dgoulet@torproject.org>

Remove UPTIME_TO_GUARANTEE_STABLE, MTBF_TO_GUARANTEE_STABLE,
TIME_KNOWN_TO_GUARANTEE_FAMILIAR WFU_TO_GUARANTEE_GUARD and replace each
of them with a tunnable torrc option.

Related to #40652

Signed-off-by: David Goulet <dgoulet@torproject.org>