Skip to content
Snippets Groups Projects
New look: Off

Add Conjure to logcollector to test censorship resistance

    • Open Issue created by Cecylia Bocovich @cohosh

    We're getting reports that conjure doesn't work in some places https://forum.torproject.net/t/call-for-testers-help-the-tor-project-to-test-conjure-on-tor-browser-alpha/7815/14

    Let's run some tests from vantage points to figure out why so we can prioritize improvements.

    Designs

      Child items ...

      2. Activity

      • Cecylia Bocovich assigned to @cohosh

        assigned to @cohosh

      • meskio added Backlog label

        added Backlog label

      • shelikhoo mentioned in issue tpo/anti-censorship/connectivity-measurement/logcollector#5

        mentioned in issue tpo/anti-censorship/connectivity-measurement/logcollector#5

      • Gaba added Q3 label

        added Q3 label

      • G
        Gedsh @Gedsh ·

        I have interesting logs from one user from Iran. It seems that Сonjure connects successfully, but then drops the connection. It repeats over and over.

        Logs from my conjure fork https://gitlab.torproject.org/Gedsh/conjure/-/tree/prod?ref_type=heads

        [12:20:39] Redirecting log to file
2023/07/27 12:20:39 Started SOCKS listener at [scrubbed]
2023/07/27 12:20:44 SOCKS accepted: {[scrubbed] url=https://registration.refraction.network.global.prod.fastly.net/api;front=cdn.sstatic.net  map[front:[cdn.sstatic.net] url:[https://registration.refraction.network.global.prod.fastly.net/api]]}
2023/07/27 12:20:44 Attempting to connect to bridge at [scrubbed]
2023/07/27 12:20:44 Using 1 connection(s) to register with the station
2023/07/27 12:20:44 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:44 Buffering 517 bytes to send later
[12:20:44] [0-21d577] Shared Secret  - 21d5770325940a7ad0177b1a0c7c2886052dfa26633799dce79d4eb913f37904
[12:20:44] [0-21d577] covert [scrubbed]
[12:20:44] [0-21d577] Representative - 5be9124689f7765788a24d0fa95c101da70a040a1eb6a05fbfbba89efb97228a
2023/07/27 12:20:44 Performing a Conjure registration with domain fronting...
2023/07/27 12:20:44 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:44 Domain front:  cdn.sstatic.net
[12:20:47] [0-21d577] Attempting to Connect ...
[12:20:47] [0-21d577] Connected to phantom [scrubbed] using transport min
2023/07/27 12:20:47 Successfully connected to phantom proxy!
2023/07/27 12:20:47 Connected to bridge at [scrubbed]
2023/07/27 12:20:47 Flushed 517 bytes from buffer
2023/07/27 12:20:50 Error receiving from phantom read tcp [scrubbed]->[scrubbed]: read: connection reset by peer
2023/07/27 12:20:50 Received 0 bytes from phantom
2023/07/27 12:20:50 Error copying phantom to SOCKS read tcp [scrubbed]->[scrubbed]: use of closed network connection
2023/07/27 12:20:50 Closed connection to phantom proxy
2023/07/27 12:20:50 SOCKS accepted: {[scrubbed] url=https://registration.refraction.network.global.prod.fastly.net/api;front=cdn.sstatic.net  map[front:[cdn.sstatic.net] url:[https://registration.refraction.network.global.prod.fastly.net/api]]}
2023/07/27 12:20:50 Attempting to connect to bridge at [scrubbed]
2023/07/27 12:20:50 Using 1 connection(s) to register with the station
2023/07/27 12:20:50 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:50 Buffering 517 bytes to send later
[12:20:50] [1-7addc4] Shared Secret  - 7addc428019ed59e0164e78f6c8707b76443b8fd64b30b51c1ebdc2e4a07ad1b
[12:20:50] [1-7addc4] covert [scrubbed]
[12:20:50] [1-7addc4] Representative - 04a697ffa0be4d52a538c92e9062b8e237aa535d2cb5043e8142a5f3b7bfffe0
2023/07/27 12:20:50 Performing a Conjure registration with domain fronting...
2023/07/27 12:20:50 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:50 Domain front:  cdn.sstatic.net
[12:20:53] [1-7addc4] Attempting to Connect ...
[12:20:53] [1-7addc4] Connected to phantom [scrubbed] using transport min
2023/07/27 12:20:53 Successfully connected to phantom proxy!
2023/07/27 12:20:53 Connected to bridge at [scrubbed]
2023/07/27 12:20:53 Flushed 517 bytes from buffer
2023/07/27 12:20:56 Error receiving from phantom read tcp [scrubbed]->[scrubbed]: read: connection reset by peer
2023/07/27 12:20:56 Received 0 bytes from phantom
2023/07/27 12:20:56 Error copying phantom to SOCKS read tcp [scrubbed]->[scrubbed]: use of closed network connection
2023/07/27 12:20:56 Closed connection to phantom proxy
2023/07/27 12:20:57 SOCKS accepted: {[scrubbed] url=https://registration.refraction.network.global.prod.fastly.net/api;front=cdn.sstatic.net  map[front:[cdn.sstatic.net] url:[https://registration.refraction.network.global.prod.fastly.net/api]]}
2023/07/27 12:20:57 Attempting to connect to bridge at [scrubbed]
2023/07/27 12:20:57 Using 1 connection(s) to register with the station
2023/07/27 12:20:57 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:57 Buffering 517 bytes to send later
[12:20:57] [2-46db02] Shared Secret  - 46db0221020afacba0f07a06c773ed8b82a61db79a9b7a2732b6853d2a3f7c01
[12:20:57] [2-46db02] covert [scrubbed]
[12:20:57] [2-46db02] Representative - 265a672cff7eaaf5a0ae602af9d55fb23a5a4aa719e12d141ca52739808da1a1
2023/07/27 12:20:57 Performing a Conjure registration with domain fronting...
2023/07/27 12:20:57 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/27 12:20:57 Domain front:  cdn.sstatic.net
[12:21:00] [2-46db02] Attempting to Connect ...
[12:21:00] [2-46db02] Connected to phantom [scrubbed] using transport min
2023/07/27 12:21:00 Successfully connected to phantom proxy!
2023/07/27 12:21:00 Connected to bridge at [scrubbed]
2023/07/27 12:21:00 Flushed 517 bytes from buffer
2023/07/27 12:21:03 Error receiving from phantom read tcp [scrubbed]->[scrubbed]: read: connection reset by peer
2023/07/27 12:21:03 Received 0 bytes from phantom
2023/07/27 12:21:03 Error copying phantom to SOCKS read tcp [scrubbed]->[scrubbed]: use of closed network connection
2023/07/27 12:21:03 Closed connection to phantom proxy

        These logs are different from Turkmenistan, where they also try to block Conjure. But in many cases, Conjure can still connect and work well in Turkmenistan. Logs from Turkmenistan for comparison. At the end, the connection was successful.

        2023/07/26 09:10:23 SOCKS accepted: {[scrubbed] url=https://registration.refraction.network.global.prod.fastly.net/api;front=cdn.sstatic.net  map[front:[cdn.sstatic.net] url:[https://registration.refraction.network.global.prod.fastly.net/api]]}
2023/07/26 09:10:23 Attempting to connect to bridge at [scrubbed]
2023/07/26 09:10:23 Using 1 connection(s) to register with the station
2023/07/26 09:10:23 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:10:23 Buffering 517 bytes to send later
[09:10:23] [28-322e29] Shared Secret  - 322e29a91d9de46c08cc91b97dde9c26cf0fb697c1f859f66c52581eb1041617
[09:10:23] [28-322e29] covert [scrubbed]
[09:10:23] [28-322e29] Representative - 4e8dc59f81ae2ba3761987ce90756150bd782a11cbf2fd75b2bfcd3e50b1f4ea
2023/07/26 09:10:23 Performing a Conjure registration with domain fronting...
2023/07/26 09:10:23 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:10:23 Domain front:  cdn.sstatic.net
[09:10:24] [27-6adc56] Attempting to Connect ...
[09:10:24] [27-6adc56] failed to dial phantom [scrubbed]: dial tcp [scrubbed]: connect: connection refused
2023/07/26 09:10:33 Using 2 connection(s) to register with the station
2023/07/26 09:10:33 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
[09:10:33] [29-391344] Shared Secret  - 391344ed34d9f5af71a797a53f7648d3ced4a8db8453d4d14314de875b210557
[09:10:33] [29-391344] covert [scrubbed]
[09:10:33] [29-391344] Representative - 3baee9cf011abaf5125c62272a323b2a13a9d7c4fbfb5d8a1168035b73abc915
2023/07/26 09:10:33 Performing a Conjure registration with domain fronting...
2023/07/26 09:10:33 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:10:33 Domain front:  cdn.sstatic.net
[09:10:35] [28-322e29] Attempting to Connect ...
[09:10:35] [28-322e29] failed to dial phantom [scrubbed]: dial tcp [scrubbed]: connect: connection refused
2023/07/26 09:10:43 Using 3 connection(s) to register with the station
2023/07/26 09:10:43 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
[09:10:43] [30-cbfdb6] Shared Secret  - cbfdb6be96226121c519ec74f73c7f8b68b2561f8aa8dcf86515115945f7f611
[09:10:43] [30-cbfdb6] covert [scrubbed]
[09:10:43] [30-cbfdb6] Representative - d5a4e745d4978693b9b23780fbfc3bd88088c7f97116498d8dfbe761339e2dfa
2023/07/26 09:10:43 Performing a Conjure registration with domain fronting...
2023/07/26 09:10:43 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:10:43 Domain front:  cdn.sstatic.net
[09:10:45] [30-cbfdb6] Attempting to Connect ...
[09:10:45] [29-391344] Attempting to Connect ...
[09:10:45] [30-cbfdb6] failed to dial phantom [scrubbed]: dial tcp [scrubbed]: connect: connection refused
[09:10:45] [29-391344] failed to dial phantom [scrubbed]: dial tcp [scrubbed]: connect: connection refused
2023/07/26 09:10:53 Error copying phantom to SOCKS read tcp [scrubbed]->[scrubbed]: use of closed network connection
2023/07/26 09:10:53 Closed connection to phantom proxy
2023/07/26 09:11:00 SOCKS accepted: {[scrubbed] url=https://registration.refraction.network.global.prod.fastly.net/api;front=cdn.sstatic.net  map[front:[cdn.sstatic.net] url:[https://registration.refraction.network.global.prod.fastly.net/api]]}
2023/07/26 09:11:00 Attempting to connect to bridge at [scrubbed]
2023/07/26 09:11:00 Using 1 connection(s) to register with the station
2023/07/26 09:11:00 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
[09:11:00] [31-37b49b] Shared Secret  - 37b49b5bf51917db0764238db07faea465423a1791b381f627ab8b90a9efb71d
[09:11:00] [31-37b49b] covert [scrubbed]
[09:11:00] [31-37b49b] Representative - 068619643007eab623aa8f3d0ca7916c708bac2a396d8834fd4b1b18006567e2
2023/07/26 09:11:00 Performing a Conjure registration with domain fronting...
2023/07/26 09:11:00 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:11:00 Domain front:  cdn.sstatic.net
2023/07/26 09:11:00 Buffering 517 bytes to send later
2023/07/26 09:11:10 Using 2 connection(s) to register with the station
2023/07/26 09:11:10 Using the registration API at https://registration.refraction.network.global.prod.fastly.net/api
[09:11:10] [32-4a83d2] Shared Secret  - 4a83d2014d5251223138911029fa0e7b6f1ad524e77ce44aee0051a9a595ba68
[09:11:10] [32-4a83d2] covert [scrubbed]
[09:11:10] [32-4a83d2] Representative - 2085cd424826ba7e00844c657e4bcc3a5f094227344fb6c897e694ec41870e3e
2023/07/26 09:11:10 Performing a Conjure registration with domain fronting...
2023/07/26 09:11:10 Conjure station URL:  https://registration.refraction.network.global.prod.fastly.net/api
2023/07/26 09:11:10 Domain front:  cdn.sstatic.net
[09:11:12] [32-4a83d2] Attempting to Connect ...
[09:11:12] [31-37b49b] Attempting to Connect ...
[09:11:12] [31-37b49b] failed to dial phantom [scrubbed]: dial tcp [scrubbed]: connect: connection refused
[09:11:12] [32-4a83d2] Connected to phantom [scrubbed] using transport min
2023/07/26 09:11:12 Successfully connected to phantom proxy!
2023/07/26 09:11:12 Connected to bridge at [scrubbed]
2023/07/26 09:11:12 Flushed 517 bytes from buffer

        It's worth mentioning that I have reports that Conjure works well in Iran with some ISPs.

        Edited by Gedsh
      • Cecylia Bocovich unassigned @cohosh

        unassigned @cohosh

      Please register or sign in to reply