shelikhoo authored 3 years ago and Cecylia Bocovich committed 3 years ago

This is an amendment of tpo/anti-censorship/pluggable-transports/snowflake!30

Malicious clients and proxies can provide potentially malicious strings
in the polls. This validates the NAT type and proxy type strings to
ensure that malformed strings are not displayed on a web page
or passed to any of our monitoring infrastructure.

If a client or proxy supplies an invalid NAT type, we return an error
message. If a proxy supplies an unknown proxy type, we set the proxy
type to unknown.

go mod edit -dropreplace=github.com/pion/dtls/v2
go get github.com/pion/dtls/v2@v2.0.12

This is an update to
tpo/anti-censorship/pluggable-transports/snowflake!66.

Debian packages Go 1.15 and 1.17, and we use 1.16 in Tor Browser.

Make sure we use a version of the DTLS library that contains the
following fingerprinting fixes:

Only send supported_groups extension in ClientHello
Do not include IP addresses as SNI values

These changes have been merged upstream into pion/dtls.

* https://github.com/golang/go/issues/33772

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2761566)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2761438)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2761382)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2761382)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2759815)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2759816)

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2760512)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2760514)

Adopted the change in according to the recommendation from

tpo/anti-censorship/pluggable-transports/snowflake!62 (comment 2759900)

It is important to include unit in flag name to prevent user from making mistake.

This is a mature implementation of periodic task that run a function at given interval. It allows task to be stopped, and deals with edge case like interval too short gracefully.

V2Ray/V2Fly is MIT licensed.

currentNATType will from now on be guarded by currentNATTypeAccess for any access.

NAT Type update rule is flattened into state transfer lookup table to assist reading.

idk authored 3 years ago and Cecylia Bocovich committed 3 years ago

Allow other go programs to easily import the snowflake proxy library and
start/stop a snowflake proxy.

Follow best practices for documenting the exported pieces of the
Snowflake client library.

Add exported functions to the snowflake client library to allow calling
programs to define and set their own custom broker rendezvous methods.