Switch to containing all communication between the proxy and the broker in the HTTP response body. This will make things easier if we ever use something other than HTTP communicate between different actors in the snowflake system. Other changes to the protocol are as follows: - requests are accompanied by a version number so the broker can be backwards compatable if desired in the future - all responses are 200 OK unless the request was badly formatted |
||
---|---|---|
.. | ||
spec | ||
static | ||
translation@bbf11bb0c9 | ||
webext | ||
.eslintignore | ||
.eslintrc.json | ||
broker.js | ||
config.js | ||
init-badge.js | ||
init-node.js | ||
init-testing.js | ||
init-webext.js | ||
make.js | ||
package.json | ||
proxypair.js | ||
README.md | ||
shims.js | ||
snowflake.js | ||
ui.js | ||
util.js | ||
websocket.js |
This is the browser proxy component of Snowflake.
Embedding
See https://snowflake.torproject.org/ for more info:
<iframe src="https://snowflake.torproject.org/embed.html" width="88" height="16" frameborder="0" scrolling="no"></iframe>
Building
npm run build
Testing
Unit testing with Jasmine are available with:
npm install
npm test
To run locally, start an http server in build/
and navigate to /embed.html
.
Preparing to deploy
Background information:
- https://bugs.torproject.org/23947#comment:8
- https://help.torproject.org/tsa/doc/static-sites/
- https://help.torproject.org/tsa/doc/ssh-jump-host/
You need to be in LDAP group "snowflake" and have set up an SSH key with your LDAP account. In your ~/.ssh/config file, you should have something like:
Host staticiforme
HostName staticiforme.torproject.org
User <your user name>
ProxyJump people.torproject.org
IdentityFile ~/.ssh/tor
Deploying
npm run build
Do a "dry run" rsync with -n
to check that only expected files are being changed. If you don't understand why a file would be updated, you can add the -i
option to see the reason.
rsync -n --chown=:snowflake --chmod ug=rw,D+x --perms --delete -crv build/ staticiforme:/srv/snowflake.torproject.org/htdocs/
If it looks good, then repeat the rsync without -n
.
rsync --chown=:snowflake --chmod ug=rw,D+x --perms --delete -crv build/ staticiforme:/srv/snowflake.torproject.org/htdocs/
You can ignore errors of the form rsync: failed to set permissions on "<dirname>/": Operation not permitted (1)
.
Then run the command to copy the new files to the live web servers:
ssh staticiforme 'static-update-component snowflake.torproject.org'
Parameters
With no parameters,
snowflake uses the default relay snowflake.freehaven.net:443
and
uses automatic signaling with the default broker at
https://snowflake-broker.freehaven.net/
.