Skip to content

bridgedb testing setup

For tpo/anti-censorship/rdsys#12 (closed) I'm planning to set up a testing installation of bridgedb in polyanthum. The idea is to test it with real bridges and a similar setup than the one that will be when we deploy it in production.

For that I will need a couple of things:

email setup

  • I will need another email address to be able to request bridges. How about bridges2@torproject.org? or bridges-test@torproject.org? This email account will need a similar configuration of the existing bridges@torproject.org:
  • be able to send emails from it using the localhost:25 email transport without authentication. I guess this is already working and doesn't need any changes.
  • receive email directly over smtp into the new bridgedb. bridgedb does receive emails to bridges@torproject.org in localhost:6725. I'll need the same setup for the new email address but for another port, 6925? I don't mind one or another.
  • I will configure bridgedb to only accept emails coming from *@torproject.org.

http setup

  • Will need a domain name pointing to polyanthum's apache server, ideally with valid https but might be ok without. bridges2.torproject.org? bridges-test.torproject.org? something.torproject.net?
  • allow only connections from people.tpo

Bridgedb does listen to two ports:

  • https distributor. the website that we see in bridges.tpo, configured in bridgedb on port 3880. It should be where we the traffic is redirected by default. 3980?
  • moat distributor. Where any request coming to /moat/ should be directed. Bridgedb uses 3881. Should we use 3981 for the test setup?

All the other redirections configured in bridgedb.tpo are not really needed here, but will not break anything if you prefer just to copypaste the config.

setup folder

I will need a place to install it. I guess I don't need another user for it, I can do it in the existing bridgedb user. I could create a folder inside the $HOME. But might it make more sense to do it in /srv/<domain-name> like the other services are currently set up?

  • Create /tmp//srv/bridges-test.torproject.org folder with permitions for bridgedb user

permissions on bridge descriptors

  • [ ] make serge's bridge descriptors available for rdsys user
Edited by anarcat