| Commit message (Expand) | Author | Age |
* | Change end-of-file NLNL convention. It turns out arma I and I agree.•••svn:r4382
| Nick Mathewson | 2005-06-09 |
* | clean up some log entries•••svn:r4228
| Roger Dingledine | 2005-05-15 |
* | first iteration of scrubbing sensitive strings from logs.•••also generally clean up log messages.
svn:r4174
| Roger Dingledine | 2005-05-03 |
* | clean up this TOR_FRAGILE business•••svn:r4116
| Roger Dingledine | 2005-04-26 |
* | Improve conn_*_to_string; add circuit_state_to_string; make skewed-descriptor...•••svn:r4047
| Nick Mathewson | 2005-04-07 |
* | Rename circuit_get_by_stream to circuit_get_by_edge_conn, and actually start ...•••svn:r4026
| Nick Mathewson | 2005-04-06 |
* | Add a pointer from edge connections to their corresponding circuit (ulp!); ad...•••svn:r4024
| Nick Mathewson | 2005-04-06 |
* | Hopefully, this will make ORs much faster, and not break them: keep a big spl...•••svn:r4020
| Nick Mathewson | 2005-04-06 |
* | update copyright notices.•••svn:r3982
| Nick Mathewson | 2005-04-01 |
* | when building testing circuits, always use middle hops•••running at least 0.0.9.7
svn:r3966
| Roger Dingledine | 2005-04-01 |
* | when the or-connect succeeded and the tls handshake succeeded•••but we didn't like the result, we were closing the connection
without sending any destroys back for the pending circuits. now
send those destroys anyway; i hope this doesn't break too much.
svn:r3951
| Roger Dingledine | 2005-04-01 |
* | still publish your descriptor if orport is reachable but dirport isn't•••when building testing circs for orport testing, require high-bandwidth
nodes, so fewer circs fail. complain about unreachable orport separately
from unreachable dirport.
svn:r3935
| Roger Dingledine | 2005-03-31 |
* | cleanup so connection_ap_handshake_attach_chosen_circuit() always•••gets open circs.
svn:r3856
| Roger Dingledine | 2005-03-24 |
* | Bulletproof connection_ap_handshake_attach_chosen_circuit•••svn:r3855
| Nick Mathewson | 2005-03-24 |
* | clean up and refactor some more•••svn:r3798
| Roger Dingledine | 2005-03-22 |
* | Implement controller's "extendcircuit" directive.•••Also refactor circuit building so we plan the whole path ahead
of time.
svn:r3797
| Roger Dingledine | 2005-03-22 |
* | Turn addr_policy_compare from a tristate to a quadstate; this should help add...•••svn:r3786
| Nick Mathewson | 2005-03-19 |
* | make hidden services more likely to work from the server-side•••svn:r3781
| Roger Dingledine | 2005-03-19 |
* | Commit fixes for several pending tor core tasks: document all DOCDOCed functi...•••svn:r3769
| Nick Mathewson | 2005-03-17 |
* | re-enable reachability testing stuff.•••also, consider your ORPort reachable after you've processed a
create cell from any non-local address.
svn:r3763
| Roger Dingledine | 2005-03-15 |
* | Renormalize whitespace•••svn:r3757
| Nick Mathewson | 2005-03-14 |
* | Implement the common case of ATTACHSTREAM.•••svn:r3751
| Nick Mathewson | 2005-03-12 |
* | Checkpoint in-progress fixes:•••Add 'testing' circuit purpose, for reachability testing.
Notice when our IP changes, and reset stats.
Try to pull down a directory via Tor to see if our DirPort is working.
Try to extend a circuit back to us to see if our ORPort is working.
Only publish a descriptor if they're both reachable.
These mostly work, and I'd better get them in before I cause conflicts.
svn:r3703
| Roger Dingledine | 2005-02-27 |
* | Add a new AddressMap directive to rewrite incoming socks addresses.•••Add a new TrackHostExits directive to trigger addressmaps for
certain incoming socks addresses, for sites that break when your exit
keeps changing.
Redo the client-side dns cache so it's just an addressmap too.
svn:r3641
| Roger Dingledine | 2005-02-22 |
* | bugfix: tor-resolve requests were ignoring .exit if there was•••a working circuit they could use instead.
svn:r3502
| Roger Dingledine | 2005-02-02 |
* | define TOR_FRAGILE if you want tor to give you a core when•••something goes wrong. this should only be used by people actively
tracking bugs.
svn:r3487
| Roger Dingledine | 2005-02-01 |
* | The crowning hidden-service patch: prefer non-internal circuits•••for normal connections, so we don't spend our internal circs on
other stuff and not have them when we need them.
svn:r3380
| Roger Dingledine | 2005-01-20 |
* | Handle unavailable hidden services better. We try each intro point•••until none are left, then we try to refetch the descriptor. If it's
the same one we had before, then close streams right then. Whenever
a new stream arrives, even if it's right after, optimistically try
refetching the descriptor, just in case.
svn:r3379
| Roger Dingledine | 2005-01-19 |
* | bugfix for cvs: we were needing a rendezvous circ, so we cannibalized•••a general circ, and called rend_client_rendcirc_has_opened(), which
called connection_ap_attach_pending(), which was needing a rendezvous
circ, so it cannibalized a general circuit, and called ...
svn:r3370
| Roger Dingledine | 2005-01-19 |
* | remove some extra-verbose logs•••svn:r3361
| Roger Dingledine | 2005-01-17 |
* | Introduce a notion of 'internal' circs, which are chosen without regard•••to the exit policy of the last hop. Intro and rendezvous circs must
be internal circs, to avoid leaking information. Resolve and connect
streams can use internal circs if they want.
New circuit pooling algorithm: make sure to have enough circs around
to satisfy any predicted ports, and also make sure to have 2 internal
circs around if we've required internal circs lately (with high uptime
if we've seen that lately).
Split NewCircuitPeriod config option into NewCircuitPeriod (30 secs),
which describes how often we retry making new circuits if current ones
are dirty, and MaxCircuitDirtiness (10 mins), which describes how long
we're willing to make use of an already-dirty circuit.
Once rendezvous circuits are established, keep using the same circuit as
long as you attach a new stream to it at least every 10 minutes. (So web
browsing doesn't require you to build new rend circs every 30 seconds.)
Cannibalize GENERAL circs to be C_REND, C_INTRO, S_INTRO, and S_REND
circ as necessary, if there are any completed ones lying around when
we try to launch one.
Re-instate the ifdef's to use version-0 style introduce cells, since
there was yet another bug in handling version-1 style. We'll try switching
over again after 0.0.9 is obsolete.
Bugfix: when choosing an exit node for a new non-internal circ, don't take
into account whether it'll be useful for any pending x.onion addresses --
it won't.
Bugfix: we weren't actually publishing the hidden service descriptor when
it became dirty. So we only published it every 20 minutes or so, which
means when you first start your Tor, the hidden service will seem broken.
svn:r3360
| Roger Dingledine | 2005-01-17 |
* | get rid of 0.0.8 backwards compatibility•••svn:r3353
| Roger Dingledine | 2005-01-13 |
* | when deciding if a port is handled and the port demands uptime, don't•••consider it handled if there's a circ that fits but isn't high-uptime.
svn:r3349
| Roger Dingledine | 2005-01-13 |
* | Annotate circuits w/ whether they aim to contain high uptime nodes and/or•••high capacity nodes. When building circuits, choose appropriate nodes.
New config option LongLivedPorts to indicate application streams
that will want high uptime circuits.
When attaching a stream to a circuit, pay attention to its requirements.
This means that every single node in an intro rend circuit, not just
the last one, will have a minimum uptime.
Boost the min uptime from an hour to 24 hours.
svn:r3339
| Roger Dingledine | 2005-01-12 |
* | when we haven't fetched a directory yet, or the last time we•••tried they were all unreachable, assume we are not connected to
the network.
when an application request comes in during this state, be
optimistic and assume we just reconnected. fetch a new directory
and if it works, begin making circuits.
svn:r3327
| Roger Dingledine | 2005-01-07 |
* | clean up logging,•••make it clearer which warns are bugs,
make the control log event match its specification,
point out a bug in how we deal with failure when renewing the tls context.
svn:r3138
| Roger Dingledine | 2004-12-13 |
* | I'm a bad person.•••Stop treating the uint16_t's as null-terminated strings,
and stop looking at the byte after them to see if it's null,
because sometimes you're not allowed to look there.
svn:r3108
| Roger Dingledine | 2004-12-07 |
* | Renormalize whitespace•••svn:r3095
| Nick Mathewson | 2004-12-07 |
* | New circuit building strategy: keep a list of ports that we've used in ...•••that will handle each such port. (We can extend this to include addresses
if exit policies shift to require that.) Seed us with port 80 so web
browsers won't complain that Tor is "slow to start up".
This was necessary because our old circuit building strategy just involved
counting circuits, and as time went by we would build up a big pile of
circuits that had peculiar exit policies (e.g. only exit to 9001-9100)
which would take up space in the circuit pile but never get used.
Fix router_compare_addr_to_addr_policy: it was not treating a port of *
as always matching, so we were picking reject *:* nodes as exit nodes too.
If you haven't used a clean circuit in an hour, throw it away, just to
be on the safe side.
This means after 6 hours a totally unused Tor client will have no
circuits open.
svn:r3078
| Roger Dingledine | 2004-12-05 |
* | React to eof immediately on non-open edge connections.•••Stop keeping track of num_retries for apconns, since they expire
after 60 seconds anyway.
When warning about retrying or giving up, print the address, so
the user knows which one it's talking about.
svn:r3073
| Roger Dingledine | 2004-12-04 |
* | bugfix: When we were checking to see if an ap_conn should time out•••waiting for its connected cell, we were calculating time from when the
ap_conn was created. So if it waited say 20 seconds before being attached,
then we would immediately decide that the circuit had timed out.
Also, make circuit_dump_by_conn() display actual circuit progress,
including circuits that haven't been attached to the conn yet but
hope to when it finishes connecting.
svn:r3072
| Roger Dingledine | 2004-12-04 |
* | Spell-check strings and comments•••svn:r3052
| Nick Mathewson | 2004-12-01 |
* | Let resolve conns retry/expire also, rather than sticking around forever.•••Put the check-if-requested-exitrouter-will-reject-us code in the
circuit_attach loop, so it gets checked periodically and not just
once at the beginning. This is useful in case the routerlist changes,
but also in case the address gets resolved into something that we learn
we'll reject.
svn:r3039
| Roger Dingledine | 2004-11-30 |
* | Enforce coding style.•••svn:r3025
| Nick Mathewson | 2004-11-30 |
* | Suggestion from weasel: Make tor --version --version dump the cvs Id of every...•••svn:r3019
| Nick Mathewson | 2004-11-29 |
* | put in initial support for ".nickname.exit" addresses, to let alice•••decide what exit node to use; based on a patch by geoff goodell.
needs more work: e.g. it goes bananas building new circuits when the
chosen exit node's exit policy rejects the connection.
svn:r3015
| Roger Dingledine | 2004-11-29 |
* | wrong is ok, and right is fine, but in between is apparently•••totally unacceptable to me.
svn:r3005
| Roger Dingledine | 2004-11-28 |
* | Normalize space: add one between every control keyword and control clause.•••svn:r3003
| Nick Mathewson | 2004-11-28 |
* | remove emacs droppings, since nick says he doesn't need them anymore•••svn:r2989
| Roger Dingledine | 2004-11-26 |
* | minor fixes•••svn:r2901
| Roger Dingledine | 2004-11-16 |