Skip to content

Changes

Page history
Update Default Bridges: add blackbox exporter authored by meskio's avatar meskio
Hide whitespace changes
Inline Side-by-side
Default-Bridges.md
View page @ b3460b3e
# Tor Browser's default bridges
Tor Browser ships with a number of default bridges. These bridges are hard-coded in the ​[Tor Browser](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/common/). The following table is meant to be an authoritative list of our default bridges plus the people who operate these bridges. Whenever we add, remove, or change any of our default bridges, make sure to commit this change to the following repositories:
Tor Browser ships with a number of default bridges. These bridges are hard-coded in the ​[Tor Browser](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/common/). The following table is meant to be an authoritative list of our default bridges plus the people who operate these bridges. Whenever we add, remove, or change any of our default bridges, make sure to commit this change to the following repositories:
* [​tor-browser-build](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js)
* [monit-configuration](https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration)
* [emma](https://gitlab.torproject.org/tpo/anti-censorship/emma)
* ​[OONI](https://github.com/ooni/sysadmin/blob/master/ansible/roles/probe-services/templates/tor_targets.json) (Default bridges are indexed by a value that's determined as follows: `echo -n ADDR:PORT || BRIDGE_FINGERPRINT | xxd -r -p | sha256sum`)
* [blackbox prometheus exporter](https://gitlab.torproject.org/tpo/tpa/prometheus-alerts/-/blob/main/targets.d/blackbox_bridges.yaml)
The following repositories (used to) use default bridges but don't require updates:
* ​[Onion Browser](https://github.com/OnionBrowser/OnionBrowser/blob/2.X/OnionBrowser/OnionManager.swift) (Onion Browser now fetches and parses bridge_prefs.js automatically.)
* [​Orbot](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw/bridges.txt)/[​Orbot fa](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw-fa/bridges.txt) (The Guardian Project ​[is considering using different bridges](https://github.com/guardianproject/orbot/issues/258))
| Type | IP:port | Fingerprint | Parameters | Contact | Origin | Status |
|------------|------------------------------|-------------------------------------------|-----------------------------------------------------------------------------------------|---------------------------------------------|----------------|-------------|
| obfs4 | 192.95.36.142:443 | CDF2E852BF539B82BD10E27E9115A31734E378C2 | cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1 | David Goulet <dgoulet@torproject.org> | tpo/applications/tor-browser#22429 | [​Metrics](https://metrics.torproject.org/rs.html#details/D9C805C955CB124D188C0D44F271E9BE57DE2109) |
| obfs4 | 37.218.245.14:38224 | D9A82D2F9C2F65A18407B1D2B764F130847F8B5D | cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0 | Mart van Santen <mart@greenhost.nl> | tpo/applications/tor-browser#22468 | ​[Metrics](https://metrics.torproject.org/rs.html#details/D9E712E593400635462172121B7DB90B07669F71) |
| obfs4 | 85.31.186.98:443 | 011F2599C0E9B27EE74B353155E244813763C3E5 | cert=ayq0XzCwhpdysn5o0EyDUbmSOx3X/oTEbzDMvczHOdBJKlvIdHHLJGkZARtT4dcBFArPPg iat-mode=0 | Felix <zwiebel@quantentunnel.de> | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/36B8122E1A6D17BEA26FE22D11B7B2A0AD379FD8) |
| obfs4 | 85.31.186.26:443 | 91A6354697E6B02A386312F68D82CF86824D3606 | cert=PBwr+S8JTVZo6MPdHnkTwXJPILWADLqfMGoVvhZClMq/Urndyd42BwX9YFJHZnBB3H0XCw iat-mode=0 | Felix <zwiebel@quantentunnel.de> | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/5F161D2E5713C93F16FEEDD63178E37208AA78DF) |
| obfs4 | 193.11.166.194:27015 | 2D82C2E354D531A68469ADF7F878FA6060C6BACA | cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/FD96EFC317B7B3C3DBA25743945C9FF9496F63A3) |
| obfs4 | 193.11.166.194:27020 | 86AC7B8D430DAC4117E9F42C9EAED18133863AAF | cert=0LDeJH4JzMDtkJJrFphJCiPqKx7loozKN7VNfuukMGfHO0Z8OGdzHVkhVAOfo1mUdv9cMg iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | ​[Metrics](https://metrics.torproject.org/rs.html#details/DE1A2949A2E0D66D63BF1B5193366166C5ED5881) |
| obfs4 | 193.11.166.194:27025 | 1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF | cert=ItvYZzW5tn6v3G4UnQa6Qz04Npro6e81AP70YujmK/KXwDFPTs3aHXcHp4n8Vt6w/bv8cA iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/53ABAB9A45134DD1D3B3DCF53BFA35BE4E856EC2) |
| obfs4 | 209.148.46.65:443 | 74FAD13168806246602538555B5521A0383A1875 | cert=ssH+9rP8dG2NLDN2XuFw63hIO/9MNNinLmxQDpVa+7kTOa9/m+tGWT1SmSYpQ9uTBGa6Hw iat-mode=0 | Micah Sherr <msherr@cs.georgetown.edu> | legacy/trac#32606 | [​Metrics](https://metrics.torproject.org/rs.html#details/7C95AED7256E1D10D134942532CC72AD73AC1BD8) |
| obfs4 | 146.57.248.225:22 | 10A6CD36A537FCE513A322361547444B393989F0 | cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 | James Holland <holla556@umn.edu> | legacy/trac#32547 | ​Unpublished |
| obfs4 | 45.145.95.6:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen <toke@toke.dk> | legacy/trac#32891 | ​[Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | [2a0c:4d80:42:702::1]:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen <toke@toke.dk> | legacy/trac#32891 | [​Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | 51.222.13.177:80 | 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 | cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 | Louis-Philippe Véronneau <pollo@debian.org> | tpo/applications/tor-browser#40212 | [Metrics](https://metrics.torproject.org/rs.html#details/B35B0E377EBB633C926FB93D81749DB01A030A44) |
| meek | 192.0.2.18:80 | BE776A53492E1E044A26F17306E1BC46A55A1625 | url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com | HackerNCoder <hackerncoder@encryptionin.space> | team#100 | [Metrics](https://metrics.torproject.org/rs.html#details/B1AA2EF6435720FB710B9F94872691A2DCD49E78) |
| snowflake | 0.0.3.0:1 | 2B280B23E1107BB62ABFC40DDCC8824814F80A72 | N/A | David Fifield <david@bamsoftware.com> | N/A | ​[Metrics](https://metrics.torproject.org/rs.html#details/5481936581E23D2D178105D44DB6915AB06BFB7F) |
| Type | IP:port | Fingerprint | Parameters | Contact | Origin | Status |
|------|---------|-------------|------------|---------|--------|--------|
| obfs4 | 192.95.36.142:443 | CDF2E852BF539B82BD10E27E9115A31734E378C2 | cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1 | David Goulet dgoulet@torproject.org | tpo/applications/tor-browser#22429 | [​Metrics](https://metrics.torproject.org/rs.html#details/D9C805C955CB124D188C0D44F271E9BE57DE2109) |
| obfs4 | 37.218.245.14:38224 | D9A82D2F9C2F65A18407B1D2B764F130847F8B5D | cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0 | Mart van Santen mart@greenhost.nl | tpo/applications/tor-browser#22468 | ​[Metrics](https://metrics.torproject.org/rs.html#details/D9E712E593400635462172121B7DB90B07669F71) |
| obfs4 | 85.31.186.98:443 | 011F2599C0E9B27EE74B353155E244813763C3E5 | cert=ayq0XzCwhpdysn5o0EyDUbmSOx3X/oTEbzDMvczHOdBJKlvIdHHLJGkZARtT4dcBFArPPg iat-mode=0 | Felix zwiebel@quantentunnel.de | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/36B8122E1A6D17BEA26FE22D11B7B2A0AD379FD8) |
| obfs4 | 85.31.186.26:443 | 91A6354697E6B02A386312F68D82CF86824D3606 | cert=PBwr+S8JTVZo6MPdHnkTwXJPILWADLqfMGoVvhZClMq/Urndyd42BwX9YFJHZnBB3H0XCw iat-mode=0 | Felix zwiebel@quantentunnel.de | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/5F161D2E5713C93F16FEEDD63178E37208AA78DF) |
| obfs4 | 193.11.166.194:27015 | 2D82C2E354D531A68469ADF7F878FA6060C6BACA | cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/FD96EFC317B7B3C3DBA25743945C9FF9496F63A3) |
| obfs4 | 193.11.166.194:27020 | 86AC7B8D430DAC4117E9F42C9EAED18133863AAF | cert=0LDeJH4JzMDtkJJrFphJCiPqKx7loozKN7VNfuukMGfHO0Z8OGdzHVkhVAOfo1mUdv9cMg iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | ​[Metrics](https://metrics.torproject.org/rs.html#details/DE1A2949A2E0D66D63BF1B5193366166C5ED5881) |
| obfs4 | 193.11.166.194:27025 | 1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF | cert=ItvYZzW5tn6v3G4UnQa6Qz04Npro6e81AP70YujmK/KXwDFPTs3aHXcHp4n8Vt6w/bv8cA iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/53ABAB9A45134DD1D3B3DCF53BFA35BE4E856EC2) |
| obfs4 | 209.148.46.65:443 | 74FAD13168806246602538555B5521A0383A1875 | cert=ssH+9rP8dG2NLDN2XuFw63hIO/9MNNinLmxQDpVa+7kTOa9/m+tGWT1SmSYpQ9uTBGa6Hw iat-mode=0 | Micah Sherr msherr@cs.georgetown.edu | legacy/trac#32606 | [​Metrics](https://metrics.torproject.org/rs.html#details/7C95AED7256E1D10D134942532CC72AD73AC1BD8) |
| obfs4 | 146.57.248.225:22 | 10A6CD36A537FCE513A322361547444B393989F0 | cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 | James Holland holla556@umn.edu | legacy/trac#32547 | ​Unpublished |
| obfs4 | 45.145.95.6:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen toke@toke.dk | legacy/trac#32891 | ​[Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | \[2a0c:4d80:42:702::1\]:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen toke@toke.dk | legacy/trac#32891 | [​Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | 51.222.13.177:80 | 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 | cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 | Louis-Philippe Véronneau pollo@debian.org | tpo/applications/tor-browser#40212 | [Metrics](https://metrics.torproject.org/rs.html#details/B35B0E377EBB633C926FB93D81749DB01A030A44) |
| meek | 192.0.2.18:80 | BE776A53492E1E044A26F17306E1BC46A55A1625 | url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com | HackerNCoder hackerncoder@encryptionin.space | team#100 | [Metrics](https://metrics.torproject.org/rs.html#details/B1AA2EF6435720FB710B9F94872691A2DCD49E78) |
| snowflake | 0.0.3.0:1 | 2B280B23E1107BB62ABFC40DDCC8824814F80A72 | N/A | David Fifield david@bamsoftware.com | N/A | ​[Metrics](https://metrics.torproject.org/rs.html#details/5481936581E23D2D178105D44DB6915AB06BFB7F) |
## Adding new default bridges
The following is an informal list of requirements that we have for default bridges:
* A reliable network link that can handle at least a sustained 100 Mbit/s of traffic.
* Any modern CPU can sustain at least 100 MBit/s. A CPU with the AES-NI extension is particularly helpful because it allows Tor to offload its AES operations to the CPU.
* We recommend 4 GB of RAM for 100 MBit/s.
* For more than 100 MBit/s, a second core may be necessary and more than 4 GB of RAM.
* For more than 100 MBit/s, a second core may be necessary and more than 4 GB of RAM.
* We would like to personally know you (or somebody who is involved in the bridge's operation).
* You should also have a sustainable plan for running the bridge, so it doesn't get abandoned.
* You should also have a sustainable plan for running the bridge, so it doesn't get abandoned.
* It's useful (but not necessary) for the bridge to have a dedicated IP address because this IP address will get blocked by China and other places.
* If you don't have a dedicated IP address, don't host any services on the bridge that you don't want to see blocked in some countries or networks.
* If you don't have a dedicated IP address, don't host any services on the bridge that you don't want to see blocked in some countries or networks.
* You shouldn't also be running an exit relay.
* You should give us at least a one month notice before you shut down your bridge.
......@@ -46,6 +50,7 @@ When we add a new default bridge, we should ask the operator if they want to rec
### torrc configuration
In order to get metrics on our default bridges use, we need to publish the bridge descriptors. However, we do not want this bridge to be distributed over BridgeDB. To achieve this, ensure the following torrc options are set:
```
PublishServerDescriptor 1
BridgeDistribution none
......