Opened 3 years ago

Last modified 5 months ago

#25595 new defect

Test suite for Snowflake on various NAT topologies

Reported by: arlolra Owned by:
Priority: Medium Milestone:
Component: Circumvention/Snowflake Version:
Severity: Normal Keywords:
Cc: dcf, arlolra, backkem, cohosh, phw Actual Points:
Parent ID: Points: 5
Reviewer: Sponsor: Sponsor28-can

Child Tickets

Change History (13)

comment:1 Changed 22 months ago by backkem

Cc: backkem added

comment:2 Changed 21 months ago by gaba

Sponsor: Sponsor19

comment:3 Changed 18 months ago by gaba

Keywords: anti-censorship-roadmap-2019 added

comment:4 Changed 17 months ago by phw

Sponsor: Sponsor19Sponsor28-can

Moving from Sponsor 19 to Sponsor 28.

comment:5 Changed 17 months ago by gaba

Keywords: anti-censorship-roadmap added; anti-censorship-roadmap-2019 removed

comment:6 Changed 16 months ago by Sean-Der

We recently added a tool to test NATs called vnet, https://github.com/pion/transport/tree/master/vnet might be helpful!

comment:7 Changed 15 months ago by gaba

Keywords: anti-censorship-roadmap-september added; anti-censorship-roadmap removed

comment:8 Changed 9 months ago by cohosh

Points: 5

comment:9 Changed 9 months ago by gaba

Keywords: anti-censorship-roadmap-2020Q1 added; anti-censorship-roadmap-september removed

comment:10 Changed 6 months ago by cohosh

I talked to the pion webrtc folks about this and they pointed me towards this project:

https://github.com/pion/transport/tree/master/vnet

We might be able to use this to test different NAT topologies but it needs some work. The current NAT implementation offers a few variations but not something like a symmetric or port restricted cone NAT, which is what we're running into issues with in #33666.

Still it provides a good starting point. This ticket is going to take a lot of work.

comment:11 Changed 6 months ago by viatsk

The vnet NAT implementation appears to have the options necessary to configure the type of NAT, which they make use of in their tests. I think the next step here is to spin up two NATs and try to get them to send binding requests to each other.

comment:12 Changed 6 months ago by gaba

Keywords: anti-censorship-roadmap-2020Q1 removed

No more Q1 in 2020.

comment:13 Changed 5 months ago by cohosh

Cc: cohosh phw added
Note: See TracTickets for help on using tickets.