WofWca authored 3 months ago and Cecylia Bocovich committed 3 months ago

Just once, to offload unrestricted proxies.
This is useful when our STUN servers are blocked or don't support
the NAT discovery feature, or if they're just slow.

Closes tpo/anti-censorship/pluggable-transports/snowflake#40178.
Partially addresses tpo/anti-censorship/pluggable-transports/snowflake#40376



Signed-off-by: Cecylia Bocovich <cohosh@torproject.org>

WofWca authored 4 months ago and Cecylia Bocovich committed 3 months ago

As per tpo/anti-censorship/pluggable-transports/snowflake!392 (comment 3096760)
in preparation for further changes to `Negotiate`.

Remove STUN servers that are offline, appear to be misconfigured, or do
not support NAT discovery

WofWca authored 4 months ago and Cecylia Bocovich committed 4 months ago

Closes tpo/anti-censorship/pluggable-transports/snowflake#40271.
Supersedes tpo/anti-censorship/pluggable-transports/snowflake!417

.

This simplifies the code and (probably) removes the need for
`StripLocalAddresses`, although makes us more dependent on Pion.

Signed-off-by: Cecylia Bocovich <cohosh@torproject.org>

Return an error if the connection was already closed. On the first
close, return an error if any of the calls inside Close() returned an
error in this order:
- smux.Stream.Close()
- pconn.Close()
- smux.Session.Close()

Use synchronization to avoid a panic if SnowflakeConn.Close is called
more than once.

Neel Chauhan authored 5 months ago and Cecylia Bocovich committed 5 months ago

Fixes #40371. Partially reverts !141.

WofWca authored 6 months ago and shelikhoo committed 6 months ago

Since the proxy component is the most dedicated for public use,
more comprehensive docs are good.

David Fifield authored 7 months ago and Cecylia Bocovich committed 7 months ago

https://go.dev/blog/go1.13-errors#wrapping-errors-with-w

https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-snowflake-udp-rebase-extradata
commit 59b76dc6

* Related: #40354

We switched to a CDN77, a cloud provider that supports domain fronting.

Andrew Wang authored 1 year ago and Cecylia Bocovich committed 1 year ago

Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>

anthony-chang authored 1 year ago and Cecylia Bocovich committed 1 year ago

Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>

anthony-chang authored 1 year ago and Cecylia Bocovich committed 1 year ago

Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>

mpu authored 1 year ago and Cecylia Bocovich committed 1 year ago

This features adds an additional rendezvous method to send client offers
and receive proxy answers through the use of Amazon SQS queues.

tpo/anti-censorship/pluggable-transports/snowflake#26151

shelikhoo/dev-udp-performance-rebased branch
https://gitlab.torproject.org/shelikhoo/snowflake/-/commits/9dce28cfc2093490473432ffecd9abaab7ebdbdb

Arlo Breault authored 1 year ago and Arlo Breault committed 1 year ago

For #40294

tpo/anti-censorship/pluggable-transports/snowflake!154 (comment 2919109)

Still ignoring the io.ErrShortBuffer at the callers, which retains
current behavior.

Instead of unconditionally allocating its own.

This fixes a regression introduced in 9fdfb3d1, where the list of front
domains always contained an empty string if none were supplied via the
commandline options, causing rendezvous failures for both amp cache and
domain fronting. This fix checks to see whether the commandline option
was supplied.

Introduce a new commandline and SOCKS argument for comma-separated
domain fronts rather than repurposing the old one so that we can
maintain backwards compatability with users running old versions of the
client. A new bridge line shared on circumvention settings could have
both the front= and fronts= options set.

This commmit changes the command-line and Bridge line arguments to take
a comma-separated list of front domains. The change is backwards
compatible with old Bridge and ClientTransportPlugin lines. At
rendezvous time, a front domain will be randomly chosen from the list.

Cecylia Bocovich authored 1 year ago and shelikhoo committed 1 year ago

For details, see https://github.com/shadow/shadow/issues/2980

This is a workaround for older versions of android that do not trust
the Let's Encrypt root certificate.
#40087

Related: tpo/anti-censorship/team#86