301 commits

Author	SHA1	Message	Date
theodorsm	bb11646e73	Add CovertDTLSConfig	2024-12-19 00:08:52 +01:00
theodorsm	5912e2892a	Add CovertWebRTC API	2024-12-16 22:24:36 +01:00
theodorsm	8caebb484d	Use SRTP profiles exported from covert-dtls	2024-12-15 22:15:40 +01:00
theodorsm	541e124194	Add covert-dtls to proxy and client with flags	2024-12-01 23:14:28 +01:00
WofWca	ae5bd52821	improvement: use SetIPFilter for local addrs ... Closes https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40271. Supersedes https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/417. This simplifies the code and (probably) removes the need for `StripLocalAddresses`, although makes us more dependent on Pion. Signed-off-by: Cecylia Bocovich <cohosh@torproject.org>	2024-11-28 10:56:40 -05:00
Shelikhoo	239357509f	update snowflake to use pion webrtc v4	2024-11-13 14:58:53 +00:00
Renovate Bot	290be512e3	chore(deps): update module github.com/pion/webrtc/v3 to v4	2024-11-11 18:45:36 +00:00
Cecylia Bocovich	0d8bd159ec	Have SnowflakeConn.Close() return errors ... Return an error if the connection was already closed. On the first close, return an error if any of the calls inside Close() returned an error in this order: - smux.Stream.Close() - pconn.Close() - smux.Session.Close()	2024-10-29 14:58:01 -04:00
Cecylia Bocovich	a019fdaec9	Perform SnowflakeConn.Close() logic only once ... Use synchronization to avoid a panic if SnowflakeConn.Close is called more than once.	2024-10-29 14:58:01 -04:00
Neel Chauhan	8792771cdc	broker and proxy must not reject client offers with no ICE candidates ... Fixes #40371. Partially reverts !141.	2024-10-17 15:46:02 -04:00
WofWca	9b04728809	docs: improve proxy CLI param descriptions ... Since the proxy component is the most dedicated for public use, more comprehensive docs are good.	2024-09-25 16:50:18 +01:00
WofWca	78f4b9dbc5	test(client): add test for BrokerChannel	2024-09-08 14:50:08 +04:00
David Fifield	bb2126b7c6	Use %w, not %v, in fmt.Errorf, so errors can be unwrapped. ... https://go.dev/blog/go1.13-errors#wrapping-errors-with-w	2024-08-21 17:00:18 -04:00
meskio	6d2011ded7	Report a different implementation for client and server	2024-08-07 12:33:37 +02:00
David Fifield	ee5f815f60	Cosmetic changes from dev-snowflake-udp-rebase-extradata. ... https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-snowflake-udp-rebase-extradata commit 59b76dc68d2ee0383c2acd91cb0f44edc46af939	2024-08-01 22:12:56 +00:00
meskio	9e977fe6ca	Report the version of snowflake to the Tor process	2024-07-11 13:39:56 +02:00
meskio	a9df5dd71a	Use ptutil for safelog and prometheus rounded metrics ... * Related: #40354	2024-05-09 16:24:33 +02:00
Cecylia Bocovich	96422e0db3	Update torrc file to match Tor Browser builtins ... We switched to a CDN77, a cloud provider that supports domain fronting.	2024-03-24 12:41:23 -04:00
Michael Pu	9fe2ca58a0	Switch to sqscreds param for passing in SQS credentials	2024-03-09 13:35:16 -05:00
Michael Pu	1e1f827248	Update tests	2024-03-05 12:38:33 -05:00
Michael Pu	9cd362f42d	Move SQS client ID generation to Exchange	2024-03-05 12:38:33 -05:00
am3o	acce1f1fd9	refactor: change deprecated "io/ioutil" package to recommended "io" package	2024-02-17 12:47:22 +01:00
Andrew Wang	9b90b77d69	Add unit tests for SQS rendezvous in broker ... Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>	2024-01-22 13:11:03 -05:00
Anthony Chang	32e864b71d	Add unit tests for SQS rendezvous in client ... Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>	2024-01-22 13:11:03 -05:00
Anthony Chang	f3b062ddb2	Add mocks and interfaces for testing SQS rendezvous ... Co-authored-by: Michael Pu <michael.pu@uwaterloo.ca>	2024-01-22 13:10:56 -05:00
Michael Pu	8fb17de152	Implement SQS rendezvous in client and broker ... This features adds an additional rendezvous method to send client offers and receive proxy answers through the use of Amazon SQS queues. https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/26151	2024-01-22 13:06:42 -05:00
David Fifield	d0529141ac	Cosmetic fixes taken from !219. ... shelikhoo/dev-udp-performance-rebased branch https://gitlab.torproject.org/shelikhoo/snowflake/-/commits/9dce28cfc2093490473432ffecd9abaab7ebdbdb	2024-01-16 18:43:58 +00:00
Arlo Breault	98db63ad01	Update recommended torrc options in the client readme ... For #40294	2024-01-04 17:36:22 +00:00
David Fifield	aa06e7bef3	Merge branch 'encapsulation-readdata-buffer'	2023-11-21 03:46:46 +00:00
David Fifield	234d9cb11c	Link a section in the pion/webrtc@3.0.0 release notes.	2023-11-21 01:27:09 +00:00
David Fifield	d99f31d881	Have encapsulation.ReadData return an error when the buffer is short. ... https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/154#note_2919109 Still ignoring the io.ErrShortBuffer at the callers, which retains current behavior.	2023-11-07 05:51:35 +00:00
David Fifield	001f691b47	Have encapsulation.ReadData read into a provided buffer. ... Instead of unconditionally allocating its own.	2023-11-07 05:51:35 +00:00
Cecylia Bocovich	10fb9afaa7	Check if multiple front domains argument is empty ... This fixes a regression introduced in 9fdfb3d1, where the list of front domains always contained an empty string if none were supplied via the commandline options, causing rendezvous failures for both amp cache and domain fronting. This fix checks to see whether the commandline option was supplied.	2023-10-26 17:04:56 -04:00
Shelikhoo	5df7a06eee	Add outbound proxy configuration propagation	2023-10-24 17:47:25 +01:00
Cecylia Bocovich	d434549df8	Maintain backward compatability with old clients ... Introduce a new commandline and SOCKS argument for comma-separated domain fronts rather than repurposing the old one so that we can maintain backwards compatability with users running old versions of the client. A new bridge line shared on circumvention settings could have both the front= and fronts= options set.	2023-10-05 17:51:56 -04:00
Cecylia Bocovich	9fdfb3d1b5	Randomly select front domain from comma-separated list ... This commmit changes the command-line and Bridge line arguments to take a comma-separated list of front domains. The change is backwards compatible with old Bridge and ClientTransportPlugin lines. At rendezvous time, a front domain will be randomly chosen from the list.	2023-10-05 17:51:56 -04:00
Cecylia Bocovich	b632c7d49c	Workaround for shadow in lieu of AF_NETLINK support ... For details, see https://github.com/shadow/shadow/issues/2980	2023-08-24 16:33:22 +01:00
Cecylia Bocovich	f8eb86f24d	Append Let's Encrypt ISRG Root X1 to cert pool ... This is a workaround for older versions of android that do not trust the Let's Encrypt root certificate. https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40087	2023-06-14 18:12:29 -04:00
meskio	82cc0f38f7	Move the development to gitlab ... Related: tpo/anti-censorship/team#86	2023-05-31 10:01:47 +02:00
itchyonion	07b5f07452	Validate SDP offers and answers	2023-05-29 10:12:48 -07:00
meskio	297ca91b1d	Use goptlib from gitlab.torproject.org	2023-04-19 17:15:35 +02:00
itchyonion	990fcb4127	Filter out non stun: server addresses in ParseIceServers	2023-01-30 09:10:15 -08:00
itchyonion	66269c07d8	Update README to correctly reflec the type of ICE servers we currently support	2023-01-30 09:10:15 -08:00
itchyonion	a6a18c1a9b	Parse ICE servers with pion/ice library function	2023-01-30 09:10:15 -08:00
David Fifield	b443e99417	Bring client torrc up to date with Tor Browser fc89e8b1. ... https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commits/fc89e8b10c3ff30db2079b2fb327d05b2b5f3c80/projects/common/bridges_list.snowflake.txt * Use port 80 in placeholder IP addresses tpo/applications/tor-browser-build!516 * Enable uTLS tpo/applications/tor-browser-build!540 * Shorten bridge line (remove stun.voip.blackberry.com) tpo/applications/tor-browser-build!558 * Add snowflake-02 bridge tpo/applications/tor-browser-build!571	2023-01-19 11:37:23 -07:00
Cecylia Bocovich	7db2568448	Remove duplicate stun.sonetel.net entry	2023-01-03 10:32:03 -05:00
Cecylia Bocovich	8c775562c1	Remove two suggested STUN servers from client docs ... Removed stun.stunprotocol.org after a discussion with the operator, and stun.altar.com.pl after noticing it has gone offline. https://lists.torproject.org/pipermail/anti-censorship-team/2022-December/000272.html https://lists.torproject.org/pipermail/anti-censorship-team/2022-December/000276.html	2022-12-31 12:23:29 -05:00
Shelikhoo	4ebd85e5d1	add version output to log	2022-11-23 12:29:55 +00:00
Shelikhoo	33248f3dec	Add Version Output Support to Snowflake ... From now on, there will be a file at common/version/version.go that includes current version number.	2022-11-23 12:29:51 +00:00
luciole	2c599f8827	change bandwidth type from int to int64 to prevent overflow	2022-11-21 10:33:21 -05:00