Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+---
 Reporter:  teor  |  Owner:  (none)
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:  anti-censorship-roadmap-2019  |  Actual Points:
Parent ID:  #24264| Points:  3
 Reviewer:|Sponsor:  Sponsor19
--+---
Changes (by gaba):

 * keywords:   => anti-censorship-roadmap-2019


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+---
 Reporter:  teor  |  Owner:  (none)
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:  3
 Reviewer:|Sponsor:  Sponsor19
--+---

Comment (by teor):

 Replying to [comment:7 gman999]:
 > Ok.  So we can assume the issue is on bridges. and not the bridge dir
 auth at this point.
 >
 > I consistently see ~50 IPv6 connections to what I assume are IPv6
 bridges on Serge at any moment.

 Relays don't extend via IPv6, so any outbound IPv6 connections you see on
 an authority are reachability tests.
 (We'll need better reporting of IPv6 once we do IPv6 extends, I added
 #29113 so we remember to add them to the heartbeat.)

 Any inbound IPv6 connections you see are from clients using your authority
 as an entry. (Which should be rare.)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+---
 Reporter:  teor  |  Owner:  (none)
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:  3
 Reviewer:|Sponsor:  Sponsor19
--+---
Changes (by gaba):

 * status:  new => assigned
 * owner:  isis => (none)
 * points:   => 3
 * sponsor:   => Sponsor19
 * priority:  Medium => High


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gman999):

 Ok.  So we can assume the issue is on bridges. and not the bridge dir auth
 at this point.

 I consistently see ~50 IPv6 connections to what I assume are IPv6 bridges
 on Serge at any moment.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:
 Reviewer:|Sponsor:
--+--

Comment (by teor):

 Serge has enabled IPv6 reachability testing (#24264) and IPv6 bridge
 addresses appear in metrics (#2).

 But bridges.torproject.org still does not give out IPv6 bridges.

 Is the IPv6 GeoIP missing?
 Should we wait a few more days?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:
 Reviewer:|Sponsor:
--+--

Comment (by sysrqb):

 {{{
 INFO  L81:request.withIPversion()  HTTPS request for bridges with IPv6
 addresses.
 INFO L146:request.withPluggableT() HTTPS request for transport type:
 'obfs4'
 DEBUG L78:geo.getCountryCode() Looked up country code: CH
 INFO L125:request.withoutBlockIn() HTTPS client's bridges also
 shouldn't be blocked in their GeoIP country code: CH
 INFO L244:bridgerequest.generate() Adding a filter to
 HTTPSBridgeRequest for ${exit_node_address} for IPv6 obfs4 bridges not
 blocked in ch...
 INFO L300:distributor.getBridges() Attempting to get bridges for
 ${exit_node_address}...
 DEBUGL159:distributor.getSubnet()  Client IP was within area:
 ${exit_node_ip_netblock}
 DEBUG L44:filters.bySubring()  Creating a filter for assigning
 bridges to subhashring 1-of-3...
 DEBUGL325:distributor.getBridges() Client request within time
 interval: 1545318000
 DEBUGL326:distributor.getBridges() Assigned client to subhashring 1/3
 DEBUGL327:distributor.getBridges() Assigned client to subhashring
 position: ${hash}
 DEBUGL328:distributor.getBridges() Total bridges: 1000
 DEBUGL329:distributor.getBridges() Bridge filters: bySubring1of3
 byTransportNotBlockedIn(obfs4,ch,6)
 DEBUGL333:distributor.getBridges() Cache hit frozenset([, ])
 DEBUGL269:distribute.bridgesPerR() Returning 1 bridges from ring of
 len: 0
 DEBUGL276:Bridges.filterDistinct() Got 0 possible bridges to filter
 }}}

 Where BridgeDB thinks the source address of the request was in CH.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:
 Reviewer:|Sponsor:
--+--
Changes (by darkspirit):

 * cc: jan@… (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #24264| Points:
 Reviewer:|Sponsor:
--+--
Changes (by teor):

 * parent:  #2 => #24264


Comment:

 We should check this ticket when Serge sets AuthDirHasIPv6Connectivity 1.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by teor):

 As of 19 December 2018, there are still no IPv6 bridges on
 bridges.torproject.org with PT none or obfs4.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:  #2| Points:
 Reviewer:|Sponsor:
--+--
Changes (by teor):

 * parent:   => #2


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26542 [Obfuscation/BridgeDB]: Distribute IPv6 bridges though bridges.torproject.org

[Tor Bug Tracker & Wiki]

#26542: Distribute IPv6 bridges though bridges.torproject.org
--+--
 Reporter:  teor  |  Owner:  isis
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Obfuscation/BridgeDB  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 A relay operator can't find any IPv6 bridges on bridges.torproject.org:
 https://lists.torproject.org/pipermail/tor-relays/2018-June/015512.html

 Perhaps this is a bridge authority or BridgeDB issue.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs