[tor-talk] New Identity button for multiple TorPorts? - was: Review request: TorVM implementation in Qubes OS: Vidalia

[adrelanos <adrelanos@xxxxxxxxxx>]

Abel Luck:
> Moreover, wrt the New Identity button. With several client VMs, multiple
> apps using different SOCKSPorts, the behavior of New Identity is confusing.
> 	Does pushing it tear down and construct new circuits for
> 	everything? Only the TransPort? Only X?

Maybe the Tor developers could elaborate on that?

From my observations...

The whole stream isolation and switch identity works very well.

You can open "100" SocksPorts (or TranPorts etc.). When you look into
arm, no matter if you have "100" or "1" SocksPort, Tor will not create
any more circuits.

One SocksPort with two different socks auths is actually (internally)
two TorPorts (circuits).

Or one TransPort with three different client addresses is actually three
different TorPorts.

Only if you have "100" SocksPorts and "100" client applications actually
using them at the same time, Tor will open "100" circuits.

All (dirty?) circuits are changed every 10 minutes.

I think Tor has some logic to remember, which circuits were recently
used and are now dirty. From testing: if you issue new identity, this
will switch circuits for all internal TorPorts, which are considered
dirty. Maybe also the idle one (clean) circuits get switched.

The ones, which were not actively needed recently ("100" SocksPorts) are
neither created nor switched.
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk