13
votes
Accepted
How does Tor obfs4 protocol and PTs work?
The Tor Project Wiki has a good article covering this: A Childs Garden Of Pluggable Transports.
The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of ...
- 10.9k
3
votes
TOR and Obfsproxy packet size
TOR cell size is 512 bytes but most TOR packets have size of 586
bytes. My question is that why there is such difference in size (74 bytes difference)?
The 586-byte packet being referenced in the ...
- 3,135
2
votes
Accepted
Feedback on this torrc-defaults file
All of the valid config options are detailed in the Tor config manual.
It'd probably be quicker for you to read that than for us to enumerate each of the options included in your question.
What if ...
- 3,135
2
votes
Accepted
How to set up the Wfpad pluggable transport
it looks a version mismatch/conflict. It happens when you have an old version of package from your OS package manager and a new one installed otherwise in another location
- 5,900
2
votes
Accepted
ENVError while starting obfsproxy
obfsproxy should be setup inside of torrc if you wish to use it with tor, it shouldn't be executed seperately. The managed flag indicates that the opening process will be "managing" it, in this case ...
- 10.9k
2
votes
Where can I find meek servers?
The meek servers are distributed with Tor Browser.
The point of meek is to be difficult to censor not because the bridges are hard to find but because they're hard to distinguish from other traffic.
...
- 10.9k
2
votes
Why can't obfs4 , scramblesuit and fte be used in China now?
Probably has something to do with the GFW admins deploying something like this fairly recently described classifier. All the current obfuscators seem to fall to entropy distribution, header length, ...
- 71
2
votes
Accepted
Optimal configuration for an obfs4 bridge
What numbers to choose for OR and obfs4proxy ports?
For an obfs4 bridge I'd recommend:
Picking a low numbered port that's used by a common service for obfs4 (it takes a few extra steps to allow ...
- 10.9k
1
vote
Can my university network IT see that I am using Tor when I am using Tor Browser with an obfs4 pluggable transport?
The Tor Project put out a basic obfs4 Transport Evaluation. The pertinent quote is:
The (obfs4) design improves on the vulnerability to censorship based
on active attackers identifying suspect ...
- 2,264
1
vote
Tor (with bridges) keeps giving "connections have failed" in command line (while working ok through Tor Browser)?
The problem is due to missing Pluggable-Transports configuration.
The Pluggable-Transports configuration exists within the torrc-defaults file.
You can include it using --defaults-torrc like this:
"...
- 111
1
vote
Accepted
how pluggable transport is managed against BridgeAuthority?
Yes, the bridge authority or bridgedb knows all of the published bridges.
It couldn't really be used to "compromise" pluggable transports, but if a censor was able to recover the full list, it could ...
- 10.9k
1
vote
Accepted
(dis)advantages of using bridges & transports where not strictly needed?
Well, an advantage can be the lesser detectability of your connection/session. Disadvantage is that you must encomplicate the relay descriptor to flag the relay "as the one using obfuscation" and ...
- 5,900
1
vote
Can one use pluggable transports to host hidden services?
Yes, bridge and pluggable transport users are able to provide onion services over them.
Bridge users are just taking some extra steps to pick their guard (the bridge), use their guard as their ...
- 10.9k
1
vote
OBSF4 and scramblesuit
My little trick to connect to more obfs4 bridges in TAILS:
First collect some working bridges via bridge DB (e.g. obfs3) or connect to regular tor.
When connected cut the connection in the on/off ...
- 11
1
vote
Starting Tor Relay?
Your Tor log will report that it has successfully been able to perform a self-connectivity test, then you will also be able to find it in the next consensus assuming it was voted into it. You can also ...
- 10.9k
1
vote
How do I run a bridge with obfs3 pluggable transport?
Bridges aren't published, they won't be used as exits but the reject policy won't cause any harm.
The config looks good and it should work.
I might be worth a few small changes though, they may not ...
- 10.9k
1
vote
Is there a obfs4 package for ARMv5?
You should be able to build it natively, as per the README here or you can try to cross-compile from another architecture to armv5 using the method here.
For example
export GOARCH=arm
export ...
- 10.9k
1
vote
Accepted
Is it possible to use obfsproxy bridges and Meek bridges together?
You can! Tor's source code patch required - as I did it at first, but there is an easier way to do so, I've figured it out and it is literally zero-patch one! You'll need three Tor instances running ...
- 5,900
1
vote
Feedback on this torrc-defaults file
If you have IPv6 network access - yes, it looks OK. Some additions to these ones are the question of taste.
- 5,900
1
vote
How to install tor meek TP on openwrt flashed router?
Meek is written in Go. It has pretty reasonable cross-platform compilation options (compared to some languages).
First, you don't only cross-compile based on the operating system, you cross-compile ...
- 10.9k
1
vote
How to install tor meek TP on openwrt flashed router?
You can't cross-compile using OS, you need a cross-compiling environment and you're also required to cross-compile Go language from source. Also take a close look at special Go fork for OpenWRT
After ...
- 5,900
1
vote
What does the log line "not enough directory information to build a circuit" mean?
It is just normal. It means Tor client did not finish fetching consensus, and as soon as it finishes, it starts to build circuits.
- 725
Only top scored, non community-wiki answers of a minimum length are eligible