[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #33666 [Circumvention/Snowflake]: Investigate Snowflake proxy failures

#33666: Investigate Snowflake proxy failures
-------------------------------------+------------------------------
 Reporter:  cohosh                   |          Owner:  (none)
     Type:  defect                   |         Status:  needs_review
 Priority:  High                     |      Milestone:
Component:  Circumvention/Snowflake  |        Version:
 Severity:  Normal                   |     Resolution:
 Keywords:                           |  Actual Points:
Parent ID:  #19001                   |         Points:
 Reviewer:                           |        Sponsor:
-------------------------------------+------------------------------

Comment (by dcf):

 I attached some results of testing proxy failures at home and on a Linode
 VPS. Only 24.79% of ICE answers turned into a working proxy at home,
 versus 83.62% on the VPS.

 Starting at commit 237fed11, apply attachment:snowflake-client-
 proxytest.patch. Run `./client -url https://snowflake-
 broker.azureedge.net/ -front ajax.aspnetcdn.com -ice
 stun:stun.l.google.com:19302 -max 1` (no tor needed). Run `Rscript
 proxytest.R proxytest.csv`. The outputs are in attachment:proxytest-
 home.csv.gz and attachment:proxytest-vps.csv.gz and attachment:proxytest.R
 does some basic analysis. The data are in "long" CSV format with one row
 per feature, but the script reshapes them into "wide" format with one row
 per proxy attempt and one column per feature. The `id` and `attempt`
 columns together define one broker interaction and proxy connection
 attempt. Attempts where the broker returned an answer have
 `is.na(broker_err)`. Attempts that succeeded in opening a DataChannel have
 `!is.na(ts_open)`. Locally I have the full offer/answer SDP strings but I
 didn't get a pcap.

 The test falsifies a few hypotheses I had.
  * Hypothesis: I can only use proxies that have an IPv6 address. No, 9/29
 successful attempts did not have an IPv6 address.
  * Hypothesis: I can only use proxies that send a nonzero address in the
 `c=` line. No, 16/29 successful attempts had `0.0.0.0` in the `c=` line.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33666#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs