Bug 41775: Update STUN Server List for Snowflake Default Bridge Line

shelikhoorequested to merge
shelikhoo/tor-browser-build-2:update-snowflake-bridgeline-stun-server-list-7lm07apmk6qc1zbvdsb1wswmq22ipi7qjup1 into main

Merge Info

Issues

Resolves

Related

Merging

Target Branches

  • main: rapid release, 16.0
  • maint-15.0: esr140-15.0

Backporting

Timeline

  • No Backport (preferred): patchset for the next major stable
  • Immediate: patchset needed as soon as possible
  • Next Minor Stable Release: patchset that needs to be verified in nightly before backport
  • Eventually: patchset that needs to be verified in alpha before backport

(Optional) Justification

  • Emergency security update: patchset fixes CVEs, 0-days, etc
  • Censorship event: patchset enables censorship circumvention
  • Critical bug-fix: patchset fixes a bug in core-functionality
  • Consistency: patchset which would make development easier if it were in both the alpha and release branches; developer tools, build system changes, etc
  • Sponsor required: patchset required for sponsor
  • Other: please explain

Issue Tracking

Uplifting

  • Patchset is a candidate for uplift to upstream projects (e.g. mingw, clang, etc)

Review

Request Reviewer

  • Request review from an applications developer depending on modified system:
    • NOTE: if the MR modifies multiple areas, please /request_review all the relevant reviewers
    • accessibility : henry
    • android : clairehurst, dan
    • build system : boklm
    • extensions : ma1
    • firefox internals (XUL/JS/XPCOM) : jwilde, ma1
    • fonts : pierov
    • frontend (implementation) : henry
    • frontend (review) : donuts, morgan
    • localization : henry, pierov
    • macOS : clairehurst, dan
    • nightly builds : boklm
    • rebases/release-prep : boklm, dan, ma1, morgan, pierov
    • security : jwilde, ma1
    • signing : boklm, morgan
    • updater : pierov
    • windows : jwilde, morgan
    • misc/other : morgan, pierov

Change Description

This change set update the list of STUN server that snowflake client is using in the default bridge line for nat type(interactively connectivity type test).

The server that is being added:

  • stun.telnyx.com:3478
  • stun.hot-chilli.net:3478
  • stun.fitauto.ru:3478
  • stun.m-online.net:3478

The server that is being removed:

  • stun.nextcloud.com:3478
  • stun.bethesda.net:3478
  • stun.nextcloud.com:443

How Tested

  • The server removed from the list has been verified with ./v2ray engineering stun-nat-type-discovery -server $SERVER to verify that they are incorrectly configured.
  • The server add from the list has been verified with ./v2ray engineering stun-nat-type-discovery -server $SERVER to verify that they are working at the time of evaluation, and tested again on vantage points in CN, RU to verify they are reachable in these 2 regions.
  • The server change has been applied via circumvention setting for the past 3 week, with no known incidents.

Merge request reports