[tor-relays] Re: Snowflake throughput (was Re: Re: Snowflake setup fail)

[John Thompson via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>]

On 8/25/26 10:35, Mike Dylan Poppelaars via tor-relays wrote:
> For Snowflake to report unrestricted, inbound UDP must be able to reach 
> the proxy. One approach is to give Snowflake a defined UDP range with - 
> ephemeral-ports-range and then allow/forward that same range through 
> both the host firewall and the router.
>
> It is recommended either forwarding an appropriate UDP port range to the 
> proxy or placing the host outside NAT. Roger gives -ephemeral-ports- 
> range 40000:45000 with the same UDP range allowed as a working setup:

Thanks. It isn't clear to me which tor-snowflake config file needs to be 
modified. I added "-ephemeral-ports-range 40000:45000" to the 
"ExecStart" line in 
/etc/systemd/system/snap.tor-snowflake.snowflake.service, ran "systemctl 
reload-daemon", ran "sudo snap restart tor-snowflake", opened ports 
40000-45000 in the firewall, restarted firewalld, opened ports 
40000-45000 UDP on the router to be forwarded to the snowflake machine, 
but it hasn't made a difference. NAT is still reported as "restricted."

--

-John (JohnDThompson@xxxxxxxxx)
 Appleton, WI USA
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx