This ticket asked for a way to have a relay that can't connect to other relays on some particular port. But that's just one case of relaxing Tor's clique assumption, which is also required for relays that don't have IPv4 addresses, and relays that can't reach a subset of other relays. Further, we'll need to remove the clique topology assumption in order to scale to a large number of relays without requiring the number of sockets used on each relay to grow proportionally to the size of the network.
We don't actually know how to do this safely right now; it will take a pretty big amount of design work. Naive solutions have the problem that they would make it easier for an adversary to force users into compromised paths by manipulating the network topology.
Trac: Sponsor: N/AtoN/A Severity: N/Ato Normal Reviewer: N/AtoN/A Summary: FascistFirewall for tor relays to META: Support non-clique topologies on the network