aboutsummaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)Author
2013-06-18Implement a real OOM-killer for too-long circuit queues.Nick Mathewson
This implements "algorithm 1" from my discussion of bug #9072: on OOM, find the circuits with the longest queues, and kill them. It's also a fix for #9063 -- without the side-effects of bug #9072. The memory bounds aren't perfect here, and you need to be sure to allow some slack for the rest of Tor's usage. This isn't a perfect fix; the rest of the solutions I describe on codeable.
2012-09-19Clarify that hidden services are TCP onlyNick Mathewson
Also remove some trailing whitespace. Patch from maker; fixes bug 6024.
2012-09-13Fix man page typoRobert Ransom
2012-09-05Update the minimum bandwidth for a public relayRoger Dingledine
The current cutoff is 30KB, but in reality a useful cutoff is probably more like 50KB or 100KB.
2012-08-31Merge branch 'bug6732' into maint-0.2.3Nick Mathewson
2012-08-31Document consensus and microdesc filesNick Mathewson
Bugfix for #6732.
2012-08-27Disable extending to private/internal addresses by defaultNick Mathewson
This is important, since otherwise an attacker can use timing info to probe the internal network. Also, add an option (ExtendAllowPrivateAddresses) so that TestingTorNetwork won't break. Fix for bug 6710; bugfix on all released versions of Tor.
2012-07-31Fixes/beautification of RPM spec. Tiny improvements in RPM build docs.Ondrej Mikle
2012-07-31Workaround for building EL5 RPMs by specifying rpmbuild-md5. Updated old ↵Ondrej Mikle
note about using static libevent when building RPMs.
2012-07-31Dependencies for RPM building with mock should work nowOndrej Mikle
2012-07-31Fix some manpage typosNick Mathewson
This is based on a pair of patches from A. Costa. I couldn't apply those directly, since they changed the generated *roff files, not the asciidoc source. Fixes Tor bug 6500 and Debian bug 683359.
2012-07-20Clarify how to build asciidoc files using homebrew on Mac OS XSteven Murdoch
2012-07-16Improve Alternate*Authority docs. Bug 6387.Nick Mathewson
2012-06-18Document 0.2.3.x torrc/default-torrc/command line semantics changesNick Mathewson
Bug 4748 squash! Document 0.2.3.x torrc/default-torrc/command line semantics changes Incorporates fixes suggested by rransom.
2012-06-15fix typos, logic error, default in man pageRoger Dingledine
2012-06-14Defend against entry node path bias attacksMike Perry
The defense counts the circuit failure rate for each guard for the past N circuits. Failure is defined as the ability to complete a first hop, but not finish completing the circuit all the way to the exit. If the failure rate exceeds a certain amount, a notice is emitted. If it exceeds a greater amount, a warn is emitted and the guard is disabled. These values are governed by consensus parameters which we intend to tune as we perform experiments and statistical simulations.
2012-06-14Document --hush; fix documentation for --quiet.Nick Mathewson
2012-06-11Merge remote-tracking branch 'public/bug5598'Nick Mathewson
Conflicts: doc/tor.1.txt Conflict was on a formatting issue in the manpage.
2012-06-11List defaults consistently in manpageNick Mathewson
Nearly everywhere, we end options with "(Default: foo)". But in a few places, we inserted an extra period after or before the close parenthesis, and in a few other places we said "(Defaults to foo)". Let's not do that.
2012-06-07Correct the defaults for the *Statistics optionsNick Mathewson
2012-06-06Change the default for DynamicDHGroups to 0Nick Mathewson
This feature can make Tor relays less identifiable by their use of the mod_ssl DH group, but at the cost of some usability (#4721) and bridge tracing (#6087) regressions. We should try to turn this on by default again if we find that the mod_ssl group is uncommon and/or we move to a different DH group size (see #6088). Before we can do so, we need a fix for bugs #6087 and Resolves ticket #5598 for now.
2012-06-03clarify that LongLivedPorts is for hidden services tooRoger Dingledine
2012-05-16Another dirport/orport correction; this one from "cypherpunks"Nick Mathewson
2012-05-16Document that the ORPort flags apply to DirPort too. (thanks, Roger.)Nick Mathewson
2012-05-165597: document new ORPort optionsNick Mathewson
2012-05-16Clarify SessionGroup documentation. Bug 5437.Nick Mathewson
2012-05-16Merge remote-tracking branch 'public/bug3964'Nick Mathewson
2012-05-15Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-05-15Clarify MaxCircuitDirtiness behavior with hidden services. Bug 5259.Nick Mathewson
2012-05-10Merge remote-tracking branch 'asn/bug5540'Nick Mathewson
2012-04-11Improve our documentation for the NT Service command line optionsNick Mathewson
We explain the --options option, document --nt-service as an internal-use-only thing (which it is), fix a URL, and generally improve the prose.
2012-04-11Obsolete GiveGuardFlagTo_CVE_2011_2768_VulnerableRelaysNick Mathewson
Closes ticket 4572.
2012-04-02Add a warning about settign a bridge in MyFamilyDaniel 'koolfy' Faucon
2012-04-01Merge branch 'maint-0.2.2'Roger Dingledine
Conflicts: src/or/config.c
2012-04-01BridgePassword was never for debuggingRoger Dingledine
It is for the not-yet-implemented bridge community design.
2012-03-31Explain TransportProxy within doc/state-contents.txt.George Kadianakis
2012-03-28tab-man strikes back (fixup on a9c0e9fec2)Roger Dingledine
2012-03-28Write initial documentation for the contents of the state fileNick Mathewson
Fixes bug 2987. There is still some information to go, but now we have a place to put it.
2012-02-02Merge branch 'maint-0.2.2'Roger Dingledine
2012-02-02Update "ClientOnly" man page entryRoger Dingledine
There isn't really any point to messing with it. Resolves ticket 5005.
2012-01-21Better documentation of transport-related torrc options.George Kadianakis
Document ServerTransportPlugin and the managed proxy version of ClientTransportPlugin.
2012-01-18Add missing documentation for some options introduced in 0.2.3.xNick Mathewson
2012-01-18Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-18Documentation for GiveGuardFlagTo... optionNick Mathewson
2012-01-16fix crash bug in original feature4207 branchRoger Dingledine
PLURAL() assumes that the plural is the canonical name for the option, so now it is.
2012-01-13Allow authorities to baddir/badexit/invalid/reject nodes by ccNick Mathewson
Implements ticket #4207
2012-01-04Disallow disabling DisableDebuggerAttachment on runnning TorSebastian Hahn
Also, have tor_disable_debugger_attach() return a tristate of success/failure/don't-know-how , and only log appropriately.
2011-12-27Add an option to close HS service-side rend circs on timeoutRobert Ransom
2011-12-27Add an option to close 'almost-connected' HS client circs on timeoutRobert Ransom
2011-12-27Move description of HidServAuth out of the FascistFirewall groupRobert Ransom
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion