Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Arti Arti
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 228
    • Issues 228
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 16
    • Merge requests 16
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Core
  • ArtiArti
  • Issues
  • #185
Closed
Open
Issue created Oct 13, 2021 by Nick Mathewson@nickm🌻Owner

Investigate "path bias lite" for guards that fail too many circuits?

Our guard/circuit code can currently report 3 statuses for an attempt to build a circuit through a guard:

  • Success. (This happens whenever the circuit is completely built.)
  • Failure. (This happens when the circuit fails or times out before its first hop is done.)
  • Indeterminate. (This happens when the circuit fails or times out at some point after its first hop.)

Note that an "Indeterminate" circuit could be the guard's fault (e.g., if it kills the circuit after seeing who the second guard is), or it could be not the guard's fault (e.g., if the second or third hop is down).

So, maybe we should do something in response to a guard that has too many indeterminate circuit failures? That "something" might not have to be a full implementation of path bias detection (that's #65), but it might help our security to have some kind of logic to detect these cases.

cc @mikeperry

Assignee
Assign to
Time tracking