Roger Dingledine [Sun, 23 Jan 2005 10:04:03 +0000 (10:04 +0000)]
if we're going to ship with our own privoxy, we might as well
lock it down a bit more.
(does this break anything?)
thanks to Brett Carrington for pointing this out.
Roger Dingledine [Fri, 21 Jan 2005 00:45:18 +0000 (00:45 +0000)]
if we get an incredibly skewed timestamp from a dirserver mirror that
isn't a verified OR, don't complain very loudly -- it's probably him
that's wrong.
Nick Mathewson [Thu, 20 Jan 2005 20:18:32 +0000 (20:18 +0000)]
Have reason string for serverdesc post requests contain actual serverdesc status. Also fix return values of dirserv_add_descriptor to work as advertised.
Roger Dingledine [Thu, 20 Jan 2005 07:02:24 +0000 (07:02 +0000)]
The crowning hidden-service patch: prefer non-internal circuits
for normal connections, so we don't spend our internal circs on
other stuff and not have them when we need them.
Roger Dingledine [Wed, 19 Jan 2005 23:15:59 +0000 (23:15 +0000)]
Handle unavailable hidden services better. We try each intro point
until none are left, then we try to refetch the descriptor. If it's
the same one we had before, then close streams right then. Whenever
a new stream arrives, even if it's right after, optimistically try
refetching the descriptor, just in case.
Nick Mathewson [Wed, 19 Jan 2005 22:40:33 +0000 (22:40 +0000)]
Workaround for webservers that lie about Content-Encoding: Tor now tries to autodetect compressed directories and compression itself. (resolves bug 65)
Roger Dingledine [Wed, 19 Jan 2005 17:13:11 +0000 (17:13 +0000)]
bugfix for cvs: we were needing a rendezvous circ, so we cannibalized
a general circ, and called rend_client_rendcirc_has_opened(), which
called connection_ap_attach_pending(), which was needing a rendezvous
circ, so it cannibalized a general circuit, and called ...
Roger Dingledine [Mon, 17 Jan 2005 18:13:09 +0000 (18:13 +0000)]
Introduce a notion of 'internal' circs, which are chosen without regard
to the exit policy of the last hop. Intro and rendezvous circs must
be internal circs, to avoid leaking information. Resolve and connect
streams can use internal circs if they want.
New circuit pooling algorithm: make sure to have enough circs around
to satisfy any predicted ports, and also make sure to have 2 internal
circs around if we've required internal circs lately (with high uptime
if we've seen that lately).
Split NewCircuitPeriod config option into NewCircuitPeriod (30 secs),
which describes how often we retry making new circuits if current ones
are dirty, and MaxCircuitDirtiness (10 mins), which describes how long
we're willing to make use of an already-dirty circuit.
Once rendezvous circuits are established, keep using the same circuit as
long as you attach a new stream to it at least every 10 minutes. (So web
browsing doesn't require you to build new rend circs every 30 seconds.)
Cannibalize GENERAL circs to be C_REND, C_INTRO, S_INTRO, and S_REND
circ as necessary, if there are any completed ones lying around when
we try to launch one.
Re-instate the ifdef's to use version-0 style introduce cells, since
there was yet another bug in handling version-1 style. We'll try switching
over again after 0.0.9 is obsolete.
Bugfix: when choosing an exit node for a new non-internal circ, don't take
into account whether it'll be useful for any pending x.onion addresses --
it won't.
Bugfix: we weren't actually publishing the hidden service descriptor when
it became dirty. So we only published it every 20 minutes or so, which
means when you first start your Tor, the hidden service will seem broken.
Roger Dingledine [Sun, 16 Jan 2005 02:49:58 +0000 (02:49 +0000)]
Sometime post 0.0.9, we should integrate an http proxy into Tor (maybe
as a third class of worker process), so we can stop shipping with the
beast that is Privoxy.
Nick Mathewson [Wed, 12 Jan 2005 06:42:32 +0000 (06:42 +0000)]
Make Tor use Niels Provos's libevent instead of it's current
poll-but-sometimes-select mess. This will let us use faster async cores
(like epoll, kpoll, and /dev/poll), and hopefully work better on Windows
too.
There are some fairly nasty changes to main.c here; this will almost
certainly break something. But hey, that's what alphas are for.
Roger Dingledine [Mon, 10 Jan 2005 17:39:41 +0000 (17:39 +0000)]
if you're a server and the auth dirservers are down, go to any other
server. only give up hope on network reachability when no other servers
are reachable either.
Roger Dingledine [Mon, 10 Jan 2005 05:10:22 +0000 (05:10 +0000)]
separate time_of_process_start from stats_n_seconds_uptime:
now we reset uptime when a dir fetch entirely fails. this
hopefully has something to do with stability of being on the
network.
when we haven't fetched a directory yet, or the last time we
tried they were all unreachable, assume we are not connected to
the network.
when an application request comes in during this state, be
optimistic and assume we just reconnected. fetch a new directory
and if it works, begin making circuits.
projects / thirdparty / tor.git / log
