This guide will help you run an obfs4 bridge to help censored users connect to the Tor network.
If you're a censored user and need a bridge to connect, please see [wiki/doc/PluggableTransports#HowtousePluggableTransports How to use a PT bridge].
Note: This guide is intended for Debian based machines. If you're running other *nix systems, you should probably compile obfs4 from source.
- Install Tor:
Get the latest version of Tor. If you're on debian stablesudo apt-get install tor
should give you the latest stable version of Tor.
Note: Ubuntu users need to get it from Tor repository. Please see "Download instructions for Ubuntu".
- Install obfs4proxy:
obfs4proxy
package is available onsid
,stretch
andjessie
. If you're running any of them,sudo apt-get install obfs4proxy
should work.
If not, you can either adddeb http://deb.torproject.org/torproject.org obfs4proxy main
to yoursources.list
or build it from source.
- Edit your Tor config file, usually located at
/etc/tor/torrc
and add the following lines:
#Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ExtORPort auto #Set your bridge nickname and contact info ContactInfo <your-contact-info> Nickname <pick-a-nickname>
Don't forget to change contact info and nickname values.
- Restart tor:
service tor restart
.
- Monitor your logs (usually located at /var/log/tor/log), to confirm your bridge is running with no issues.
sudo tail -F /var/log/tor/log
You should see something like this:
[notice] Registered server transport 'obfs4' at '[::]:46396' [notice] Tor has successfully opened a circuit. Looks like client functionality is working. [notice] Bootstrapped 100%: Done [notice] Now checking whether ORPort <redacted>:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
Remember the random port associated to your bridge needs to be open for incoming connections. You can find it from the logs: it's 46396 in this example.
Congrats! If you get to this point, it means that your obfs4 bridge is setup and is being distributed by BridgeDB to censored users.
If you run into any issues while setting up your bridge, please join #tor channel on OFTC IRC network and hopefully someone can help you.