Changes

Page history
Update Default Bridges: add blackbox exporter authored by meskio's avatar meskio
Show whitespace changes
Inline Side-by-side
Default-Bridges.md
View page @ b3460b3e
# Tor Browser's default bridges # Tor Browser's default bridges
Tor Browser ships with a number of default bridges. These bridges are hard-coded in the ​[Tor Browser](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/common/). The following table is meant to be an authoritative list of our default bridges plus the people who operate these bridges. Whenever we add, remove, or change any of our default bridges, make sure to commit this change to the following repositories: Tor Browser ships with a number of default bridges. These bridges are hard-coded in the ​[Tor Browser](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/common/). The following table is meant to be an authoritative list of our default bridges plus the people who operate these bridges. Whenever we add, remove, or change any of our default bridges, make sure to commit this change to the following repositories:
* [​tor-browser-build](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js) * [​tor-browser-build](https://gitweb.torproject.org/builders/tor-browser-build.git/tree/projects/tor-browser/Bundle-Data/PTConfigs/bridge_prefs.js)
* [monit-configuration](https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration) * [monit-configuration](https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration)
* [emma](https://gitlab.torproject.org/tpo/anti-censorship/emma) * [emma](https://gitlab.torproject.org/tpo/anti-censorship/emma)
* ​[OONI](https://github.com/ooni/sysadmin/blob/master/ansible/roles/probe-services/templates/tor_targets.json) (Default bridges are indexed by a value that's determined as follows: `echo -n ADDR:PORT || BRIDGE_FINGERPRINT | xxd -r -p | sha256sum`) * ​[OONI](https://github.com/ooni/sysadmin/blob/master/ansible/roles/probe-services/templates/tor_targets.json) (Default bridges are indexed by a value that's determined as follows: `echo -n ADDR:PORT || BRIDGE_FINGERPRINT | xxd -r -p | sha256sum`)
* [blackbox prometheus exporter](https://gitlab.torproject.org/tpo/tpa/prometheus-alerts/-/blob/main/targets.d/blackbox_bridges.yaml)
The following repositories (used to) use default bridges but don't require updates: The following repositories (used to) use default bridges but don't require updates:
* ​[Onion Browser](https://github.com/OnionBrowser/OnionBrowser/blob/2.X/OnionBrowser/OnionManager.swift) (Onion Browser now fetches and parses bridge_prefs.js automatically.) * ​[Onion Browser](https://github.com/OnionBrowser/OnionBrowser/blob/2.X/OnionBrowser/OnionManager.swift) (Onion Browser now fetches and parses bridge_prefs.js automatically.)
* [​Orbot](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw/bridges.txt)/[​Orbot fa](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw-fa/bridges.txt) (The Guardian Project ​[is considering using different bridges](https://github.com/guardianproject/orbot/issues/258)) * [​Orbot](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw/bridges.txt)/[​Orbot fa](https://github.com/guardianproject/orbot/blob/master/orbotservice/src/main/res/raw-fa/bridges.txt) (The Guardian Project ​[is considering using different bridges](https://github.com/guardianproject/orbot/issues/258))
| Type | IP:port | Fingerprint | Parameters | Contact | Origin | Status | | Type | IP:port | Fingerprint | Parameters | Contact | Origin | Status |
|------------|------------------------------|-------------------------------------------|-----------------------------------------------------------------------------------------|---------------------------------------------|----------------|-------------| |------|---------|-------------|------------|---------|--------|--------|
| obfs4 | 192.95.36.142:443 | CDF2E852BF539B82BD10E27E9115A31734E378C2 | cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1 | David Goulet <dgoulet@torproject.org> | tpo/applications/tor-browser#22429 | [​Metrics](https://metrics.torproject.org/rs.html#details/D9C805C955CB124D188C0D44F271E9BE57DE2109) | | obfs4 | 192.95.36.142:443 | CDF2E852BF539B82BD10E27E9115A31734E378C2 | cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1 | David Goulet dgoulet@torproject.org | tpo/applications/tor-browser#22429 | [​Metrics](https://metrics.torproject.org/rs.html#details/D9C805C955CB124D188C0D44F271E9BE57DE2109) |
| obfs4 | 37.218.245.14:38224 | D9A82D2F9C2F65A18407B1D2B764F130847F8B5D | cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0 | Mart van Santen <mart@greenhost.nl> | tpo/applications/tor-browser#22468 | ​[Metrics](https://metrics.torproject.org/rs.html#details/D9E712E593400635462172121B7DB90B07669F71) | | obfs4 | 37.218.245.14:38224 | D9A82D2F9C2F65A18407B1D2B764F130847F8B5D | cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0 | Mart van Santen mart@greenhost.nl | tpo/applications/tor-browser#22468 | ​[Metrics](https://metrics.torproject.org/rs.html#details/D9E712E593400635462172121B7DB90B07669F71) |
| obfs4 | 85.31.186.98:443 | 011F2599C0E9B27EE74B353155E244813763C3E5 | cert=ayq0XzCwhpdysn5o0EyDUbmSOx3X/oTEbzDMvczHOdBJKlvIdHHLJGkZARtT4dcBFArPPg iat-mode=0 | Felix <zwiebel@quantentunnel.de> | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/36B8122E1A6D17BEA26FE22D11B7B2A0AD379FD8) | | obfs4 | 85.31.186.98:443 | 011F2599C0E9B27EE74B353155E244813763C3E5 | cert=ayq0XzCwhpdysn5o0EyDUbmSOx3X/oTEbzDMvczHOdBJKlvIdHHLJGkZARtT4dcBFArPPg iat-mode=0 | Felix zwiebel@quantentunnel.de | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/36B8122E1A6D17BEA26FE22D11B7B2A0AD379FD8) |
| obfs4 | 85.31.186.26:443 | 91A6354697E6B02A386312F68D82CF86824D3606 | cert=PBwr+S8JTVZo6MPdHnkTwXJPILWADLqfMGoVvhZClMq/Urndyd42BwX9YFJHZnBB3H0XCw iat-mode=0 | Felix <zwiebel@quantentunnel.de> | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/5F161D2E5713C93F16FEEDD63178E37208AA78DF) | | obfs4 | 85.31.186.26:443 | 91A6354697E6B02A386312F68D82CF86824D3606 | cert=PBwr+S8JTVZo6MPdHnkTwXJPILWADLqfMGoVvhZClMq/Urndyd42BwX9YFJHZnBB3H0XCw iat-mode=0 | Felix zwiebel@quantentunnel.de | tpo/applications/tor-browser#23166 | ​[Metrics](https://metrics.torproject.org/rs.html#details/5F161D2E5713C93F16FEEDD63178E37208AA78DF) |
| obfs4 | 193.11.166.194:27015 | 2D82C2E354D531A68469ADF7F878FA6060C6BACA | cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/FD96EFC317B7B3C3DBA25743945C9FF9496F63A3) | | obfs4 | 193.11.166.194:27015 | 2D82C2E354D531A68469ADF7F878FA6060C6BACA | cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/FD96EFC317B7B3C3DBA25743945C9FF9496F63A3) |
| obfs4 | 193.11.166.194:27020 | 86AC7B8D430DAC4117E9F42C9EAED18133863AAF | cert=0LDeJH4JzMDtkJJrFphJCiPqKx7loozKN7VNfuukMGfHO0Z8OGdzHVkhVAOfo1mUdv9cMg iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | ​[Metrics](https://metrics.torproject.org/rs.html#details/DE1A2949A2E0D66D63BF1B5193366166C5ED5881) | | obfs4 | 193.11.166.194:27020 | 86AC7B8D430DAC4117E9F42C9EAED18133863AAF | cert=0LDeJH4JzMDtkJJrFphJCiPqKx7loozKN7VNfuukMGfHO0Z8OGdzHVkhVAOfo1mUdv9cMg iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | ​[Metrics](https://metrics.torproject.org/rs.html#details/DE1A2949A2E0D66D63BF1B5193366166C5ED5881) |
| obfs4 | 193.11.166.194:27025 | 1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF | cert=ItvYZzW5tn6v3G4UnQa6Qz04Npro6e81AP70YujmK/KXwDFPTs3aHXcHp4n8Vt6w/bv8cA iat-mode=0 | Tobias Pulls <tobias.pulls@kau.se> | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/53ABAB9A45134DD1D3B3DCF53BFA35BE4E856EC2) | | obfs4 | 193.11.166.194:27025 | 1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF | cert=ItvYZzW5tn6v3G4UnQa6Qz04Npro6e81AP70YujmK/KXwDFPTs3aHXcHp4n8Vt6w/bv8cA iat-mode=0 | Tobias Pulls tobias.pulls@kau.se | tpo/applications/tor-browser#31164 | [​Metrics](https://metrics.torproject.org/rs.html#details/53ABAB9A45134DD1D3B3DCF53BFA35BE4E856EC2) |
| obfs4 | 209.148.46.65:443 | 74FAD13168806246602538555B5521A0383A1875 | cert=ssH+9rP8dG2NLDN2XuFw63hIO/9MNNinLmxQDpVa+7kTOa9/m+tGWT1SmSYpQ9uTBGa6Hw iat-mode=0 | Micah Sherr <msherr@cs.georgetown.edu> | legacy/trac#32606 | [​Metrics](https://metrics.torproject.org/rs.html#details/7C95AED7256E1D10D134942532CC72AD73AC1BD8) | | obfs4 | 209.148.46.65:443 | 74FAD13168806246602538555B5521A0383A1875 | cert=ssH+9rP8dG2NLDN2XuFw63hIO/9MNNinLmxQDpVa+7kTOa9/m+tGWT1SmSYpQ9uTBGa6Hw iat-mode=0 | Micah Sherr msherr@cs.georgetown.edu | legacy/trac#32606 | [​Metrics](https://metrics.torproject.org/rs.html#details/7C95AED7256E1D10D134942532CC72AD73AC1BD8) |
| obfs4 | 146.57.248.225:22 | 10A6CD36A537FCE513A322361547444B393989F0 | cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 | James Holland <holla556@umn.edu> | legacy/trac#32547 | ​Unpublished | | obfs4 | 146.57.248.225:22 | 10A6CD36A537FCE513A322361547444B393989F0 | cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 | James Holland holla556@umn.edu | legacy/trac#32547 | ​Unpublished |
| obfs4 | 45.145.95.6:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen <toke@toke.dk> | legacy/trac#32891 | ​[Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) | | obfs4 | 45.145.95.6:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen toke@toke.dk | legacy/trac#32891 | ​[Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | [2a0c:4d80:42:702::1]:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen <toke@toke.dk> | legacy/trac#32891 | [​Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) | | obfs4 | \[2a0c:4d80:42:702::1\]:27015 | C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C | cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 | Toke Høiland-Jørgensen toke@toke.dk | legacy/trac#32891 | [​Metrics](https://metrics.torproject.org/rs.html#details/997B6FEB5A02B1F08A36CECCE9B5B3997C0A4680) |
| obfs4 | 51.222.13.177:80 | 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 | cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 | Louis-Philippe Véronneau <pollo@debian.org> | tpo/applications/tor-browser#40212 | [Metrics](https://metrics.torproject.org/rs.html#details/B35B0E377EBB633C926FB93D81749DB01A030A44) | | obfs4 | 51.222.13.177:80 | 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 | cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 | Louis-Philippe Véronneau pollo@debian.org | tpo/applications/tor-browser#40212 | [Metrics](https://metrics.torproject.org/rs.html#details/B35B0E377EBB633C926FB93D81749DB01A030A44) |
| meek | 192.0.2.18:80 | BE776A53492E1E044A26F17306E1BC46A55A1625 | url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com | HackerNCoder <hackerncoder@encryptionin.space> | team#100 | [Metrics](https://metrics.torproject.org/rs.html#details/B1AA2EF6435720FB710B9F94872691A2DCD49E78) | | meek | 192.0.2.18:80 | BE776A53492E1E044A26F17306E1BC46A55A1625 | url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com | HackerNCoder hackerncoder@encryptionin.space | team#100 | [Metrics](https://metrics.torproject.org/rs.html#details/B1AA2EF6435720FB710B9F94872691A2DCD49E78) |
| snowflake | 0.0.3.0:1 | 2B280B23E1107BB62ABFC40DDCC8824814F80A72 | N/A | David Fifield <david@bamsoftware.com> | N/A | ​[Metrics](https://metrics.torproject.org/rs.html#details/5481936581E23D2D178105D44DB6915AB06BFB7F) | | snowflake | 0.0.3.0:1 | 2B280B23E1107BB62ABFC40DDCC8824814F80A72 | N/A | David Fifield david@bamsoftware.com | N/A | ​[Metrics](https://metrics.torproject.org/rs.html#details/5481936581E23D2D178105D44DB6915AB06BFB7F) |
## Adding new default bridges ## Adding new default bridges
The following is an informal list of requirements that we have for default bridges: The following is an informal list of requirements that we have for default bridges:
* A reliable network link that can handle at least a sustained 100 Mbit/s of traffic. * A reliable network link that can handle at least a sustained 100 Mbit/s of traffic.
* Any modern CPU can sustain at least 100 MBit/s. A CPU with the AES-NI extension is particularly helpful because it allows Tor to offload its AES operations to the CPU. * Any modern CPU can sustain at least 100 MBit/s. A CPU with the AES-NI extension is particularly helpful because it allows Tor to offload its AES operations to the CPU.
* We recommend 4 GB of RAM for 100 MBit/s. * We recommend 4 GB of RAM for 100 MBit/s.
...@@ -46,6 +50,7 @@ When we add a new default bridge, we should ask the operator if they want to rec ...@@ -46,6 +50,7 @@ When we add a new default bridge, we should ask the operator if they want to rec
### torrc configuration ### torrc configuration
In order to get metrics on our default bridges use, we need to publish the bridge descriptors. However, we do not want this bridge to be distributed over BridgeDB. To achieve this, ensure the following torrc options are set: In order to get metrics on our default bridges use, we need to publish the bridge descriptors. However, we do not want this bridge to be distributed over BridgeDB. To achieve this, ensure the following torrc options are set:
``` ```
PublishServerDescriptor 1 PublishServerDescriptor 1
BridgeDistribution none BridgeDistribution none
... ...
......