文章
技术

如何评价 Tor Browser 稳定版即将推出的新网桥 Snowflake?

libgen 图书馆革命
libgen  ·  2021年6月18日 天堂应该是图书馆的模样。一个阅读诗歌的人要比不读诗歌的人更难被战胜。创造是一种拯救。创造拯救了创造者本身。

早前7站有人发过如何解决墙内Tor用户过少导致的隐匿性较低(特征太明显)问题? ,里面提到过 Snowflake。

我刚才顺手打开了 Tor Blog,看到6月8号的消息。

Snowflake moving to stable in Tor Browser 10.5

We're excited to announce that Snowflake will be shipped as one of the default bridge options with stable versions of Tor Browser later this month.

What is Snowflake?

Snowflake is a pluggable transport that uses a combination of domain fronting and peer-to-peer WebRTC connections between clients and volunteers to circumvent Internet censorship. Snowflake, which is the spiritual successor to flashproxy, aims to lower the barrier for running anti-censorship proxies, resulting in a large pool of proxies for users to connect to. Instead of requiring a server with consistent up-time, Snowflake proxies run as an addon or extension in your browser. These proxies can move locations as users connect to different networks, providing a moving target that is more difficult to block. We currently have about 8 thousand available Snowflake proxies each day. When a user connects to Snowflake in order to circumvent censorship, they are matched with a currently available proxy. If this proxy "melts," or disappears, the user will be seamlessly matched with a new proxy.

Snowflake currently uses domain fronting for the initial connection to match users with Snowflake proxies, and to allow each peer to exchange the connection information necessary for WebRTC. This channel is highly censorship resistant, and used only for the initial bootstrapping of the connection. As such, it requires much lower bandwidth and shorter connections than existing domain fronting pluggable transports like meek, making it a more scalable alternative.

For more technical details on how Snowflake is designed, see our documentation, the source code, and the Snowflake technical report.

文中还有 Snowflake 用户使用调查报告

Snowflake users by given country, including the number of additional participants who responded by region instead

243名确认的 Snowflake 用户自愿提供了他们的位置,其中最受欢迎的五个地点是美国(46)、俄罗斯(26)、印度(16)、德国(13)和中国大陆(9)。

243 confirmed Snowflake users volunteered their location, with the five most popular locations being the United States (46), Russia (26), India (16), Germany (13) and Mainland China (9). However, it must be noted that anglophone locations and those with fewer instances of censorship may be over-represented due to the nature of the study.

欢迎提供更多信息。

菜单
  1. NullPointer  

    如果我理解得不错,传统网桥是用服务器搭建的,而雪花是用家庭宽带搭建的,运行在浏览器中。

    雪花的系统中有一个中央的调度服务器,通过域前置技术隐藏自己,从而作为用户和雪花代理牵头的媒介。查询得知,这台调度服务器隐藏在 fastly 的 CDN 后面。

    优点是动态 IP,更难封锁。 缺点是带宽小,不稳定。

  2. solids   Ñøñë
    内容已隐藏
    内容已被作者本人或管理员隐藏。 如有疑问,请点击菜单按钮,查看管理日志以了解原因。
  3. solids   Ñøñë
  4. NullPointer  

    @solids #144096 墙内架设雪花还是比较危险的。雪花跟网桥一样是半公开的:不被公开列出,但当用户申请时,ip和端口会被提供给用户,与用户直接连接。

    雪花伪装的域名是cdn.sstatic.net

  5. solids   Ñøñë

    snowflake.freehaven.net:443 看起来下线了。

    已经恢复。

  6. jeffoz   墙外用户可以运行snowflake代理帮助墙内用户翻墙 https://snowflake.torproject.org/