Changes between Version 2 and Version 3 of doc/TorBOX/BareMetalHints


Ignore:
Timestamp:
Feb 27, 2012, 8:56:07 PM (7 years ago)
Author:
cypherpunks
Comment:

minor fixes to my last edit

Legend:

Unmodified
Added
Removed
Modified
  • doc/TorBOX/BareMetalHints

    v2 v3  
    1 [[TOC]]
     1[[TOC(noheading, depth=0)]]
    22
    33https://trac.torproject.org/projects/tor/wiki/doc/TorBOX
     
    55= Introduction =
    66
    7 When setting up TorBOX in the form of two VMs running on the same host exploits targeting the VM implementation or the host can still break out of the torified Client VM and expose the IP of a user and malware running on the host has full control over all VMs. To prevent against such attacks we need to a different approach. In this context we call it "bare metal" because the gateway system is directly installed on the hardware ("metal") and not in a VM. This drastically reduces the [https://en.wikipedia.org/wiki/Trusted_computing_base TCB] by more than the half.
    8 
    9 
    10 For the set up you can either follow the [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/HowToInstall Easy Configuration] or the [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/ManualConfiguration Manual Configuration]. Only very few changes are necessary.
     7When setting up TorBOX in the form of two VMs running on the same host, exploits targeting the VM implementation or the host can still break out of the torified Client VM and expose the IP of a user. Malware running on the host has full control over all VMs. To prevent against such attacks we need a different approach: In this context we call it "bare metal" because the gateway system is directly installed on the hardware ("metal") and not in a VM. This drastically reduces the [https://en.wikipedia.org/wiki/Trusted_computing_base TCB] by more than the half.
    118
    129= Prerequisites =
     
    1411* A client computer connected via ethernet to the gateway. This will be the torified client system or Tor-Workstation.
    1512
    16 = What is different from the VM based TorBOX configuration? =
     13= How To Install =
     14For the set up you can either follow the [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/HowToInstall Easy Configuration] or the [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/ManualConfiguration Manual Configuration]. Only very few changes are necessary.
    1715 * Step 1: you need to apply the time syncing related commands on both the gateway and the client.
    1816    * https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/HowToInstall#Step1HostConfiguration