Skip to content

Move bridge to a permanent faster server

Background: [tor-project] More resources required for Snowflake bridge

I expect to be able to move the snowflake bridge to a more permanent home on a faster server after 2022-03-21.

#40110 (closed) is to use a different faster server in the meantime, until the permanent one is prepared.

  • get access to new server hardware
  • install new bridge (installation guide)
  • copy user accounts #40091 (comment 2768855)
  • copy identity and onion keys from existing bridge
    • double check onion keys
      # md5sum /var/lib/tor-instances/*/keys/secret_onion_key{,_ntor}
      f57a05262f65beea15ec05bbeefe404c  /var/lib/tor-instances/snowflake1/keys/secret_onion_key
      a16c5403d18509c79fa7b863eb66892a  /var/lib/tor-instances/snowflake1/keys/secret_onion_key_ntor
  • copy HTTPS TLS keys and certificates from existing bridge
  • test tor bootstrap on new bridge using local broker and proxy, and /etc/hosts domain name record #40095 (comment 2773365)
  • test rebooting the server to make sure everything comes back up
  • start the tor@snowflake* services
  • make DNS for snowflake.torproject.net point to the new bridge tpo/tpa/team#40716 (closed)
  • monitor for a day, be ready to switch DNS back if connections fail
  • after a week or so, shut down temporary bridge

Cc @linus

Edited by David Fifield