Set up default bridge at the University of Minnesota

A research group at the University of Minnesota generously agreed to running a default bridge for us. Let's use this ticket to coordinate the process of adding it to Tor Browser.

added TorBrowserTeam201912R component::applications/tor browser owner::phw points::1 priority::medium resolution::fixed severity::normal sponsor::30 status::closed tbb-bridges type::task labels

Hi,

I'll be managing the bridge at U of Minnesota

Bridgeline:

Bridge obfs4 146.57.248.225:9000 10A6CD36A537FCE513A322361547444B393989F0 cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0

Here's the relevant stuff from torrc

ORPort 443 

BridgeRelay 1

ExtORPort auto

ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy

ServerTransportListenAddr obfs4 0.0.0.0:9000

ContactInfo singh882+torbridge@umn.edu

Nickname hopperlab

BridgeDistribution None

Thanks for setting up this bridge! I'm able to connect to your bridge's OR port but its obfs4 port seems unresponsive. Is your firewall allowing port 9000?

Other than that, your config looks good.

Trac:
Cc: cohosh to cohosh, singh882@umn.edu

We keep having problem with firewall every once in a while. Is it fine if I change obfs4 port to 22 ? That would not be harmful to the clients in any way, right?

Trac:
Sponsor: N/A to Sponsor30

Replying to jvsg:

We keep having problem with firewall every once in a while. Is it fine if I change obfs4 port to 22 ? That would not be harmful to the clients in any way, right?

Yes, feel free to use port 22 instead. The most important thing is that the port will be consistently available.

This should work

Bridgeline:

Bridge obfs4 146.57.248.225:22 10A6CD36A537FCE513A322361547444B393989F0 cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0

Here's the relevant stuff from torrc

ORPort 443 

BridgeRelay 1

ExtORPort auto

ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy

ServerTransportListenAddr obfs4 0.0.0.0:22

ContactInfo singh882+torbridge@umn.edu

Nickname hopperlab

BridgeDistribution None

Replying to jvsg:

{{{ Bridge obfs4 146.57.248.225:22 10A6CD36A537FCE513A322361547444B393989F0 cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 }}}

Thanks jvsg, this bridge line works for me.

BridgeDistribution None

This should be none instead of None because tor's config options are case sensitive.

Thanks for pointing that out. I've Corrected the config for the Bridge.

Replying to jvsg:

Thanks for pointing that out. I've Corrected the config for the Bridge.

Thanks! For what it's worth, this was a usability issue and Roger filed #32753 (moved) to get it fixed. Everything's looking good now, so let's add your bridge to Tor Browser.

Tor Browser Team:

• My task/32547 branch ​has a patch for tor-browser-build.
• My task/32547 branch ​has a patch for tor-android-service.

For the record, I also updated our list of default bridges and added our new bridge to our sysmon config.

Trac:
Status: assigned to needs_review

Thanks. Looks good. I merged your commits to tor-android-service's master (commit 4a81e5806f36e7d0bf9492437d824599ecf4ff43) and tor-browser-build's master (commit 00f4ea3a18f1cbce16f256ca2b7c1c90ad3b1daf) and bumped the tor-android-service commit there to pick up the changes for mobile, too (commit 8f76d71e2a0923d3ca317f82ab5eeec124706e22).

I backported the latter two to maint-9.0 (commit 095dfed8762cd1756b3fc50ed4aa6e8f2d0dc849 and d6bd267e1747a14d2a326a36099bf8e79bbc6a91) to have the bridge available in the next stable release as well.

Trac:
Status: needs_review to closed
Resolution: N/A to fixed
Keywords: N/A deleted, TorBrowserTeam201912R added

closed

changed time estimate to 8h

mentioned in issue #32753 (moved)

mentioned in issue tpo/core/tor#32753 (closed)

moved to tpo/applications/tor-browser#32547 (closed)