Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Implement a real OOM-killer for too-long circuit queues. | Nick Mathewson | 2013-06-18 |
| | | | | | | | | | | | | This implements "algorithm 1" from my discussion of bug #9072: on OOM, find the circuits with the longest queues, and kill them. It's also a fix for #9063 -- without the side-effects of bug #9072. The memory bounds aren't perfect here, and you need to be sure to allow some slack for the rest of Tor's usage. This isn't a perfect fix; the rest of the solutions I describe on codeable. | ||
* | Clarify that hidden services are TCP only | Nick Mathewson | 2012-09-19 |
| | | | | | | Also remove some trailing whitespace. Patch from maker; fixes bug 6024. | ||
* | Fix man page typo | Robert Ransom | 2012-09-13 |
| | |||
* | Update the minimum bandwidth for a public relay | Roger Dingledine | 2012-09-05 |
| | | | | | The current cutoff is 30KB, but in reality a useful cutoff is probably more like 50KB or 100KB. | ||
* | Merge branch 'bug6732' into maint-0.2.3 | Nick Mathewson | 2012-08-31 |
|\ | |||
| * | Document consensus and microdesc files | Nick Mathewson | 2012-08-31 |
| | | | | | | | | Bugfix for #6732. | ||
* | | Disable extending to private/internal addresses by default | Nick Mathewson | 2012-08-27 |
|/ | | | | | | | | | | This is important, since otherwise an attacker can use timing info to probe the internal network. Also, add an option (ExtendAllowPrivateAddresses) so that TestingTorNetwork won't break. Fix for bug 6710; bugfix on all released versions of Tor. | ||
* | Fixes/beautification of RPM spec. Tiny improvements in RPM build docs. | Ondrej Mikle | 2012-07-31 |
| | |||
* | Workaround for building EL5 RPMs by specifying rpmbuild-md5. Updated old ↵ | Ondrej Mikle | 2012-07-31 |
| | | | | note about using static libevent when building RPMs. | ||
* | Dependencies for RPM building with mock should work now | Ondrej Mikle | 2012-07-31 |
| | |||
* | Fix some manpage typos | Nick Mathewson | 2012-07-31 |
| | | | | | | | | This is based on a pair of patches from A. Costa. I couldn't apply those directly, since they changed the generated *roff files, not the asciidoc source. Fixes Tor bug 6500 and Debian bug 683359. | ||
* | Clarify how to build asciidoc files using homebrew on Mac OS X | Steven Murdoch | 2012-07-20 |
| | |||
* | Improve Alternate*Authority docs. Bug 6387. | Nick Mathewson | 2012-07-16 |
| | |||
* | Document 0.2.3.x torrc/default-torrc/command line semantics changes | Nick Mathewson | 2012-06-18 |
| | | | | | | | | Bug 4748 squash! Document 0.2.3.x torrc/default-torrc/command line semantics changes Incorporates fixes suggested by rransom. | ||
* | fix typos, logic error, default in man page | Roger Dingledine | 2012-06-15 |
| | |||
* | Defend against entry node path bias attacks | Mike Perry | 2012-06-14 |
| | | | | | | | | | | | | | The defense counts the circuit failure rate for each guard for the past N circuits. Failure is defined as the ability to complete a first hop, but not finish completing the circuit all the way to the exit. If the failure rate exceeds a certain amount, a notice is emitted. If it exceeds a greater amount, a warn is emitted and the guard is disabled. These values are governed by consensus parameters which we intend to tune as we perform experiments and statistical simulations. | ||
* | Document --hush; fix documentation for --quiet. | Nick Mathewson | 2012-06-14 |
| | |||
* | Merge remote-tracking branch 'public/bug5598' | Nick Mathewson | 2012-06-11 |
|\ | | | | | | | | | | | | | Conflicts: doc/tor.1.txt Conflict was on a formatting issue in the manpage. | ||
| * | Change the default for DynamicDHGroups to 0 | Nick Mathewson | 2012-06-06 |
| | | | | | | | | | | | | | | | | | | | | | | | | This feature can make Tor relays less identifiable by their use of the mod_ssl DH group, but at the cost of some usability (#4721) and bridge tracing (#6087) regressions. We should try to turn this on by default again if we find that the mod_ssl group is uncommon and/or we move to a different DH group size (see #6088). Before we can do so, we need a fix for bugs #6087 and Resolves ticket #5598 for now. | ||
* | | List defaults consistently in manpage | Nick Mathewson | 2012-06-11 |
| | | | | | | | | | | | | | | Nearly everywhere, we end options with "(Default: foo)". But in a few places, we inserted an extra period after or before the close parenthesis, and in a few other places we said "(Defaults to foo)". Let's not do that. | ||
* | | Correct the defaults for the *Statistics options | Nick Mathewson | 2012-06-07 |
|/ | |||
* | clarify that LongLivedPorts is for hidden services too | Roger Dingledine | 2012-06-03 |
| | |||
* | Another dirport/orport correction; this one from "cypherpunks" | Nick Mathewson | 2012-05-16 |
| | |||
* | Document that the ORPort flags apply to DirPort too. (thanks, Roger.) | Nick Mathewson | 2012-05-16 |
| | |||
* | 5597: document new ORPort options | Nick Mathewson | 2012-05-16 |
| | |||
* | Clarify SessionGroup documentation. Bug 5437. | Nick Mathewson | 2012-05-16 |
| | |||
* | Merge remote-tracking branch 'public/bug3964' | Nick Mathewson | 2012-05-16 |
|\ | |||
| * | Improve our documentation for the NT Service command line options | Nick Mathewson | 2012-04-11 |
| | | | | | | | | | | | | We explain the --options option, document --nt-service as an internal-use-only thing (which it is), fix a URL, and generally improve the prose. | ||
* | | Merge remote-tracking branch 'origin/maint-0.2.2' | Nick Mathewson | 2012-05-15 |
|\ \ | |||
| * | | Clarify MaxCircuitDirtiness behavior with hidden services. Bug 5259. | Nick Mathewson | 2012-05-15 |
| | | | |||
* | | | Merge remote-tracking branch 'asn/bug5540' | Nick Mathewson | 2012-05-10 |
|\ \ \ | |||
| * | | | Explain TransportProxy within doc/state-contents.txt. | George Kadianakis | 2012-03-31 |
| | | | | |||
* | | | | Obsolete GiveGuardFlagTo_CVE_2011_2768_VulnerableRelays | Nick Mathewson | 2012-04-11 |
| |_|/ |/| | | | | | | | | Closes ticket 4572. | ||
* | | | Add a warning about settign a bridge in MyFamily | Daniel 'koolfy' Faucon | 2012-04-02 |
| | | | |||
* | | | Merge branch 'maint-0.2.2' | Roger Dingledine | 2012-04-01 |
|\ \ \ | |/ / |/| / | |/ | | | Conflicts: src/or/config.c | ||
| * | BridgePassword was never for debugging | Roger Dingledine | 2012-04-01 |
| | | | | | | | | It is for the not-yet-implemented bridge community design. | ||
* | | tab-man strikes back (fixup on a9c0e9fec2) | Roger Dingledine | 2012-03-28 |
| | | |||
* | | Write initial documentation for the contents of the state file | Nick Mathewson | 2012-03-28 |
| | | | | | | | | | | Fixes bug 2987. There is still some information to go, but now we have a place to put it. | ||
* | | Merge branch 'maint-0.2.2' | Roger Dingledine | 2012-02-02 |
|\| | |||
| * | Update "ClientOnly" man page entry | Roger Dingledine | 2012-02-02 |
| | | | | | | | | There isn't really any point to messing with it. Resolves ticket 5005. | ||
* | | Better documentation of transport-related torrc options. | George Kadianakis | 2012-01-21 |
| | | | | | | | | | | Document ServerTransportPlugin and the managed proxy version of ClientTransportPlugin. | ||
* | | Add missing documentation for some options introduced in 0.2.3.x | Nick Mathewson | 2012-01-18 |
| | | |||
* | | Merge remote-tracking branch 'origin/maint-0.2.2' | Nick Mathewson | 2012-01-18 |
|\| | |||
| * | Documentation for GiveGuardFlagTo... option | Nick Mathewson | 2012-01-18 |
| | | |||
* | | fix crash bug in original feature4207 branch | Roger Dingledine | 2012-01-16 |
| | | | | | | | | | | PLURAL() assumes that the plural is the canonical name for the option, so now it is. | ||
* | | Allow authorities to baddir/badexit/invalid/reject nodes by cc | Nick Mathewson | 2012-01-13 |
| | | | | | | | | Implements ticket #4207 | ||
* | | Disallow disabling DisableDebuggerAttachment on runnning Tor | Sebastian Hahn | 2012-01-04 |
| | | | | | | | | | | Also, have tor_disable_debugger_attach() return a tristate of success/failure/don't-know-how , and only log appropriately. | ||
* | | Add an option to close HS service-side rend circs on timeout | Robert Ransom | 2011-12-27 |
| | | |||
* | | Add an option to close 'almost-connected' HS client circs on timeout | Robert Ransom | 2011-12-27 |
| | | |||
* | | Move description of HidServAuth out of the FascistFirewall group | Robert Ransom | 2011-12-27 |
| | |