Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-01-03 | Merge branch 'ntor-resquashed' | Nick Mathewson | |
Conflicts: src/or/cpuworker.c src/or/or.h src/test/bench.c | |||
2013-01-03 | Document UseNTorHandshake | Nick Mathewson | |
2012-12-25 | Merge remote-tracking branch 'mikeperry/209-path-bias-changes' | Nick Mathewson | |
2012-12-25 | Add documentation for directory guard options | Nick Mathewson | |
2012-12-25 | Make ECDHE group configurable: 224 for public, 256 for bridges (default) | Nick Mathewson | |
2012-12-17 | Document PreferIPv6Automap in the manpage | Nick Mathewson | |
2012-12-17 | Build and test most of the machinery needed for IPv6 virtualaddrmaps | Nick Mathewson | |
With an IPv6 virtual address map, we can basically hand out a new IPv6 address for _every_ address we connect to. That'll be cool, and will let us maybe get around prop205 issues. This uses some fancy logic to try to make the code paths in the ipv4 and the ipv6 case as close as possible, and moves to randomly generated addresses so we don't need to maintain those stupid counters that will collide if Tor restarts but apps don't. Also has some XXXX items to fix to make this useful. More design needed. | |||
2012-12-17 | Turn off by-default use of client-side DNS cacheing. | Nick Mathewson | |
2012-12-17 | Add documentation for the client-side DNS cache options | Nick Mathewson | |
2012-12-13 | Merge branch 'fallback_dirsource_v3' | Nick Mathewson | |
2012-12-10 | Update manpage. | Mike Perry | |
2012-12-07 | Update manpage for new PathBias torrc options. | Mike Perry | |
2012-12-07 | Expand the manpage to say: watch out for nonlocal socks | Nick Mathewson | |
This clears up the remaining issue stopping me from closing bug 6297. | |||
2012-12-06 | Drop FallbackNetworkstatusFile; it never worked. | Nick Mathewson | |
2012-12-06 | Add an option to weight down authorities when choosing a fallback | Nick Mathewson | |
2012-12-06 | Add a way to configure selection weights for dir_server_t | Nick Mathewson | |
2012-12-06 | New FallbackDir option to add extra directories for bootstraping | Nick Mathewson | |
This replaces the old FallbackConsensus notion, and should provide a way -- assuming we pick reasonable nodes! -- to give clients suggestions of placs to go to get their first consensus. | |||
2012-12-06 | Rename DirServer to DirAuthority | Nick Mathewson | |
2012-11-27 | Merge branch 'bug7013_take2_squashed' | Nick Mathewson | |
2012-11-27 | Add a torrc option to specify the bind address of managed proxies. | George Kadianakis | |
2012-11-14 | Add manual page entries for new IPv6-exits options | Nick Mathewson | |
2012-10-17 | Minor tweaks and comments to nils' geoip v6 code. | Karsten Loesing | |
2012-10-17 | Add GeoIP database for IPv6 addresses | nils | |
2012-09-20 | Make option OutboundBindAddress accept IPv6 addresses too. | Linus Nordberg | |
Implements ticket 6786. | |||
2012-09-19 | Merge remote-tracking branch 'origin/maint-0.2.3' | Nick Mathewson | |
2012-09-19 | Clarify that hidden services are TCP only | Nick Mathewson | |
Also remove some trailing whitespace. Patch from maker; fixes bug 6024. | |||
2012-09-14 | Merge branch 'maint-0.2.3' | Roger Dingledine | |
2012-09-13 | Fix man page typo | Robert Ransom | |
2012-09-10 | raise bandwidthrate/bandwidthburst to a new "infinite" | Roger Dingledine | |
addresses bug 6605. | |||
2012-09-05 | Merge branch 'maint-0.2.3' | Roger Dingledine | |
2012-09-05 | Update the minimum bandwidth for a public relay | Roger Dingledine | |
The current cutoff is 30KB, but in reality a useful cutoff is probably more like 50KB or 100KB. | |||
2012-09-05 | Merge remote-tracking branch 'linus/bug6770_3' | Nick Mathewson | |
Conflicts: doc/tor.1.txt src/or/config.c | |||
2012-09-05 | Remove AuthDirPublishIPv6 and let AuthDirHasIPv6Connectivity fill its function. | Linus Nordberg | |
See #4771 for rationale. Note that this patch does not take suggested changes in #4470 into account and keeps treating AuthDirHasIPv6Connectivity as an AUTOBOOL. Thus, bug fixes for that are included here as well. This is a fix on master, unreleased as of now. | |||
2012-09-05 | Make AuthDirHasIPv6Connectivity a BOOL. | Linus Nordberg | |
This is a fix of unreleased tor. It solves ticket #6770. | |||
2012-09-05 | minor typos i found while constructing the changelog | Roger Dingledine | |
2012-09-04 | Clients connect to public relays over IPv6. | Linus Nordberg | |
Add ClientUseIPv6 and ClientPreferIPv6ORPort configuration options. Use "preferred OR port" for all entry nodes, not only for bridges. Mark bridges with "prefer IPv6 OR port" if an IPv6 address is configured in Bridge line and ClientPreferIPv6ORPort is set. Mark relays with "prefer IPv6 OR port" if an IPv6 address is found in descriptor and ClientPreferIPv6ORPort is set. Filter "preferred OR port" through the ClientUseIPv6 config option. We might want to move this test to where actual connection is being set up once we have a fall back mechanism in place. Have only non-servers pick an IPv6 address for the first hop: We don't want relays to connect over IPv6 yet. (IPv6 has never been used for second or third hops.) Implements ticket 5535. | |||
2012-08-31 | Merge remote-tracking branch 'origin/maint-0.2.3' | Nick Mathewson | |
2012-08-31 | Merge branch 'bug6732' into maint-0.2.3 | Nick Mathewson | |
2012-08-31 | Document consensus and microdesc files | Nick Mathewson | |
Bugfix for #6732. | |||
2012-08-27 | Merge remote-tracking branch 'origin/maint-0.2.3' | Nick Mathewson | |
2012-08-27 | Disable extending to private/internal addresses by default | Nick Mathewson | |
This is important, since otherwise an attacker can use timing info to probe the internal network. Also, add an option (ExtendAllowPrivateAddresses) so that TestingTorNetwork won't break. Fix for bug 6710; bugfix on all released versions of Tor. | |||
2012-08-23 | Add some attributes to make a2x quieter | Nick Mathewson | |
2012-07-31 | Merge remote-tracking branch 'origin/maint-0.2.3' | Nick Mathewson | |
2012-07-31 | Fix some manpage typos | Nick Mathewson | |
This is based on a pair of patches from A. Costa. I couldn't apply those directly, since they changed the generated *roff files, not the asciidoc source. Fixes Tor bug 6500 and Debian bug 683359. | |||
2012-07-19 | Add config option AuthDirPublishIPv6. | Linus Nordberg | |
Test for config option AuthDirPublishIPv6 == 1 rather than for running as a bridge authority when deciding whether to care or not about IPv6 OR ports in descriptors. Implements enhancement #6406. | |||
2012-07-19 | Add configure option AuthDirHasIPv6Connectivity. | Linus Nordberg | |
Implements enhancement 5974. | |||
2012-07-16 | Improve Alternate*Authority docs. Bug 6387. | Nick Mathewson | |
2012-06-18 | Document 0.2.3.x torrc/default-torrc/command line semantics changes | Nick Mathewson | |
Bug 4748 squash! Document 0.2.3.x torrc/default-torrc/command line semantics changes Incorporates fixes suggested by rransom. | |||
2012-06-15 | fix typos, logic error, default in man page | Roger Dingledine | |
2012-06-14 | Defend against entry node path bias attacks | Mike Perry | |
The defense counts the circuit failure rate for each guard for the past N circuits. Failure is defined as the ability to complete a first hop, but not finish completing the circuit all the way to the exit. If the failure rate exceeds a certain amount, a notice is emitted. If it exceeds a greater amount, a warn is emitted and the guard is disabled. These values are governed by consensus parameters which we intend to tune as we perform experiments and statistical simulations. |