> Does this offer a bridge behind a usual customer NAT device with zero > configuration? Yes (if I understand you correctly), flash proxies invert the bridge model.
Rather than a client connecting directly to a bridge, it registers with a facilitator through one of a few rendezvous methods. When a flash proxy comes online, (traditionally by visiting a website with an embedded badge, but now also by running the above standalone code) it contacts the facilitator to see if any clients are waiting to connect. If the facilitator returns an IP, the flash proxy makes two WebSocket connections, (one to the client and one to a specific Tor relay, configured with a pluggable transport) "bridging" their connections. Here's a better explanation of how it works: https://crypto.stanford.edu/flashproxy/#how-it-works In this model, the client is the one receiving the inbound connections. There's a patch in #9033 to use the tor-fw-helper to help traverse their NAT. https://trac.torproject.org/projects/tor/ticket/9033 Unfortunately, the tor-fw-helper is not yet included in the TBB. Arlo _______________________________________________ tor-talk mailing list [email protected] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
