Snowflake Broker Deployment 22-06-21

Code to be deployed: TBD, with Distributed and IP Change Rate merged.

Deployment Script

sv stop snowflake-broker
cp /usr/local/bin/broker ./snowflake-broker-22-06-17-backup-$(date +%N)
cp /etc/service/snowflake-broker/run ./snowflake-broker-run-22-06-17-backup-$(date +%N)


install --owner root ./snowflake-broker-22-06-17-candidcate /usr/local/bin/broker
install --owner root ./snowflake-broker-run-22-06-17-candidcate /etc/service/snowflake-broker/run
install --owner root ./snowflake-broker-bridgelist-22-06-17-candidcate /home/snowflake-broker/bridge_lists.json

sv start snowflake-broker

New Run Script

#!/bin/sh -e
setcap 'cap_net_bind_service=+ep' /usr/local/bin/broker
export GOMAXPROCS=1
exec chpst -u snowflake-broker -o 32768 /usr/local/bin/broker --metrics-log /home/snowflake-broker/metrics.log --acme-hostnames snowflake-broker.bamsoftware.com,snowflake-broker.freehaven.net,snowflake-broker.torproject.net --acme-email dcf@torproject.org --acme-cert-cache /home/snowflake-broker/acme-cert-cache --bridge-list-path /home/snowflake-broker/bridge_lists.json --default-relay-pattern ^snowflake.torproject.net$ --allowed-relay-pattern snowflake.torproject.net$ -ip-count-log /home/snowflake-broker/metrics-ip.jsonl -ip-count-interval 1h 2>&1

New Bridge List

{"displayName":"default", "webSocketAddress":"wss://snowflake.torproject.net/", "fingerprint":"2B280B23E1107BB62ABFC40DDCC8824814F80A72"}

Build

git clone https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git
git checkout 35e9ab8c0b3168b5eaa4f6538b8e9208eb38c508
GOARCH=amd64 GOOS=linux CGO_ENABLED=0 go build -ldflags="-s -w" -o snowflake-broker
#sha256sum snowflake-broker=ca85c33aeb8bdc04e31a772f24b610c5bb4ab68973a9ade6e64915bf7c1ee8d2

Deployment Pack

$sha256sum *
73ccdf7f3cc5da1e0808bec0c1593500c9b09c7f89c4b96d403cb5096286b1e1  deployment.sh
ca85c33aeb8bdc04e31a772f24b610c5bb4ab68973a9ade6e64915bf7c1ee8d2  snowflake-broker-22-06-17-candidcate
e9de53a5566216dfd511b229385edcf3f710684039cb76a27b737e8ed47b0a3f  snowflake-broker-bridgelist-22-06-17-candidcate
cc46657f8c186e2788da3d8bb58ec6a00af1e73493a01964171503569f74680a  snowflake-broker-run-22-06-17-candidcate

Note to myself

Check log:

tail -n 50 /var/log/snowflake-broker/current