Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread Gareth Llewellyn
On 15 Oct 2016 13:29, "Christian de Larrinaga"  wrote:

> Interesting.  What would it take to add in Tor nodes to help scale Tor
> as a byproduct?
>

BrassHornComms is running ~19 relays at the moment;
https://globe.torproject.org/#/search/query=BrassHorn

The general idea is as customer traffic flows increase I'd deploy
additional relay capacity to ensuring we're adding at least as much
capacity to the network as we use.
-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss

Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread Christian de Larrinaga
Interesting.  What would it take to add in Tor nodes to help scale Tor
as a byproduct?

C

Adrian Kennard wrote:
> Just to add, and in support of an idea like this, all standard A&A
> broadband connections can be set to L2TP to a remote endpoint so that it
> is really simple for someone to set up a private Internet service like
> this using our broadband service. The costs are the same as normal.
>
> Obviously that service needs to do the Tor exit nodes and so on to
> provide the degree of privacy, but you don't need to set up a whole ISP
> to do this, just a box that does Tor and L2TP somewhere in "the cloud".
>
> Are there any consumer broadband routers that handle being a tor client?
>

-- 
Christian de Larrinaga  FBCS, CITP,
-
@ FirstHand
-
+44 7989 386778
c...@firsthand.net
-


-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss

Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread James Harrison
On 15/10/2016 12:30, Adrian Kennard wrote:
> 
> Are there any consumer broadband routers that handle being a tor client?

Not really, no.

Probably the closest you'd get to a mainstream router that could
probably handle it would be something like the Turris Omnia. Most home
routers/CPEs are of very small brain, typically using a Linux stack on a
small ARM chip with dedicated in-hardware networking cores/procs and
some custom userspace/kernel magic to drive them to implement things
like NAT/port forwarding etc. This all helps keep the cost down, and
since most ISPs will be buying CPEs in significant bulk that's a major
factor.

Cost/Tor client performance requirements are also a function of line
speed and expectations. The ISP I work for provides all our lines at
1Gbps, for instance (though products are from 50M up to 1G). If you
wanted to offer _equivalence of service_ in terms of throughput
performance at even 100M I suspect you'd hit issues with the Tor network
before you hit issues with hardware, but the hardware would have to be
fairly chunky. Then again I suppose that the latency incurred by routing
via Tor probably gives you a bandwidth delay product that limits
throughput in any case. If you're only targeting 10Mbps throughput then
it might be doable on a mid-to-low-end chip as found in most CPEs..

I'd say for mass market you're more likely to want segmentation of
services. In some scandinavia countries it's quite common to get your
phone/TV service delivered over IP via the same network as your internet
but logically segmented (different VLANs, different Ethernet port on the
CPE if it's exposed there, different handover/NNI/provider on the far
side of the access network, etc). If my CPE had a port limited to 10
megs but which ensured everything went via Tor, then I can dump my smart
TV and so on onto the fast network and connect to the Tor port if I want
privacy. Could also be exposed as another WiFi ESSID.

-- 
Cheers,
James Harrison

-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss

Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread Gareth Llewellyn
On Sat, Oct 15, 2016 at 12:30 PM, Adrian Kennard  wrote:

> Just to add, and in support of an idea like this, all standard A&A
> broadband connections can be set to L2TP to a remote endpoint so that it
> is really simple for someone to set up a private Internet service like
> this using our broadband service. The costs are the same as normal.
>

Good point, I could setup an entry point for AAISP DSL/3G customers to
point their existing connections to (with a guide) if they wanted to try it
out
or for new customers leave the DSL to the experts and I'd just have to
handle the
L2TP / LNS / Tor side of things. Would it still need to be a Firebrick or
would
OpenBSDs npppd be sufficient in this case?


>
> Are there any consumer broadband routers that handle being a tor client?
>
>
I believe PORTAL (https://github.com/grugq/portal)  was using the same
little box that RIPE probes use ( TP-LINK WR703N) and anything that can run
OpenWRT can be configured as a tunneling Tor client.
-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss

Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread William Waites
Cool. We’ve discussed similar things in the past and I’d be happy to help. I 
would
suggest to have the L2TP/PPPoE concentrator outwith the UK though even if it
might not be strictly necessary due to Tor’s design. For those who are willing 
to
sacrifice stronger anonymity properties for performance, simply landing the
PPPoE session overseas and doing (stateless) encryption would be enough to
make ICRs useless or irrelevant. Obviously that wouldn’t stand up against 
greater
intrusive efforts but would mean that locally collecting detailed flow 
statistics as a
matter of course wouldn’t work. Also agree that onions work better in the press.

As with Adrian, were we (members of HUBS) are facilities-based (we don’t really
do resale of Ma Bell^H^H^H^HBT) happy to arrange for access circuits to be
sent wherever convenient.

Cheers,
-w

P.S. Amusing that the french-canadian idiom “occupe toi de tes onions” roughly
translates as “mind your own business”. But I doubt if Dingledine et al knew 
that.



-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss

Re: [ORG-discuss] IPBill / Kickstarting OnionDSL to generate media interest?

2016-10-15 Thread Adrian Kennard
Just to add, and in support of an idea like this, all standard A&A
broadband connections can be set to L2TP to a remote endpoint so that it
is really simple for someone to set up a private Internet service like
this using our broadband service. The costs are the same as normal.

Obviously that service needs to do the Tor exit nodes and so on to
provide the degree of privacy, but you don't need to set up a whole ISP
to do this, just a box that does Tor and L2TP somewhere in "the cloud".

Are there any consumer broadband routers that handle being a tor client?

-- 
Please support ORG's work - join and help fund our future:
https://www.openrightsgroup.org/join

To unsubscribe, send a blank email to 
org-discuss-le...@lists.openrightsgroup.org
or use https://lists.openrightsgroup.org/listinfo/org-discuss