aboutsummaryrefslogtreecommitdiff
path: root/src/or/circuituse.c
Commit message (Collapse)AuthorAge
...
* when building testing circuits, always use middle hopsRoger Dingledine2005-04-01
| | | | | | | running at least 0.0.9.7 svn:r3966
* when the or-connect succeeded and the tls handshake succeededRoger Dingledine2005-04-01
| | | | | | | | | but we didn't like the result, we were closing the connection without sending any destroys back for the pending circuits. now send those destroys anyway; i hope this doesn't break too much. svn:r3951
* still publish your descriptor if orport is reachable but dirport isn'tRoger Dingledine2005-03-31
| | | | | | | | | when building testing circs for orport testing, require high-bandwidth nodes, so fewer circs fail. complain about unreachable orport separately from unreachable dirport. svn:r3935
* cleanup so connection_ap_handshake_attach_chosen_circuit() alwaysRoger Dingledine2005-03-24
| | | | | | | gets open circs. svn:r3856
* Bulletproof connection_ap_handshake_attach_chosen_circuitNick Mathewson2005-03-24
| | | | svn:r3855
* clean up and refactor some moreRoger Dingledine2005-03-22
| | | | svn:r3798
* Implement controller's "extendcircuit" directive.Roger Dingledine2005-03-22
| | | | | | | | Also refactor circuit building so we plan the whole path ahead of time. svn:r3797
* Turn addr_policy_compare from a tristate to a quadstate; this should help ↵Nick Mathewson2005-03-19
| | | | | | address our "Ah, you allow 1.2.3.4:80. You are a good choice for google.com" problem. svn:r3786
* make hidden services more likely to work from the server-sideRoger Dingledine2005-03-19
| | | | svn:r3781
* Commit fixes for several pending tor core tasks: document all DOCDOCed ↵Nick Mathewson2005-03-17
| | | | | | functions; time out uncontrolled unattached streams; feed reasons to SOCKS5 (refactoring connection_ap_handshake_socks_reply in the process); change DirFetchPeriod/StatusFetchPeriod to have a special "Be smart" value. svn:r3769
* re-enable reachability testing stuff.Roger Dingledine2005-03-15
| | | | | | | | also, consider your ORPort reachable after you've processed a create cell from any non-local address. svn:r3763
* Renormalize whitespaceNick Mathewson2005-03-14
| | | | svn:r3757
* Implement the common case of ATTACHSTREAM.Nick Mathewson2005-03-12
| | | | svn:r3751
* Checkpoint in-progress fixes:Roger Dingledine2005-02-27
| | | | | | | | | | | | | Add 'testing' circuit purpose, for reachability testing. Notice when our IP changes, and reset stats. Try to pull down a directory via Tor to see if our DirPort is working. Try to extend a circuit back to us to see if our ORPort is working. Only publish a descriptor if they're both reachable. These mostly work, and I'd better get them in before I cause conflicts. svn:r3703
* Add a new AddressMap directive to rewrite incoming socks addresses.Roger Dingledine2005-02-22
| | | | | | | | | | Add a new TrackHostExits directive to trigger addressmaps for certain incoming socks addresses, for sites that break when your exit keeps changing. Redo the client-side dns cache so it's just an addressmap too. svn:r3641
* bugfix: tor-resolve requests were ignoring .exit if there wasRoger Dingledine2005-02-02
| | | | | | | a working circuit they could use instead. svn:r3502
* define TOR_FRAGILE if you want tor to give you a core whenRoger Dingledine2005-02-01
| | | | | | | | something goes wrong. this should only be used by people actively tracking bugs. svn:r3487
* The crowning hidden-service patch: prefer non-internal circuitsRoger Dingledine2005-01-20
| | | | | | | | for normal connections, so we don't spend our internal circs on other stuff and not have them when we need them. svn:r3380
* Handle unavailable hidden services better. We try each intro pointRoger Dingledine2005-01-19
| | | | | | | | | | until none are left, then we try to refetch the descriptor. If it's the same one we had before, then close streams right then. Whenever a new stream arrives, even if it's right after, optimistically try refetching the descriptor, just in case. svn:r3379
* bugfix for cvs: we were needing a rendezvous circ, so we cannibalizedRoger Dingledine2005-01-19
| | | | | | | | | a general circ, and called rend_client_rendcirc_has_opened(), which called connection_ap_attach_pending(), which was needing a rendezvous circ, so it cannibalized a general circuit, and called ... svn:r3370
* remove some extra-verbose logsRoger Dingledine2005-01-17
| | | | svn:r3361
* Introduce a notion of 'internal' circs, which are chosen without regardRoger Dingledine2005-01-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | to the exit policy of the last hop. Intro and rendezvous circs must be internal circs, to avoid leaking information. Resolve and connect streams can use internal circs if they want. New circuit pooling algorithm: make sure to have enough circs around to satisfy any predicted ports, and also make sure to have 2 internal circs around if we've required internal circs lately (with high uptime if we've seen that lately). Split NewCircuitPeriod config option into NewCircuitPeriod (30 secs), which describes how often we retry making new circuits if current ones are dirty, and MaxCircuitDirtiness (10 mins), which describes how long we're willing to make use of an already-dirty circuit. Once rendezvous circuits are established, keep using the same circuit as long as you attach a new stream to it at least every 10 minutes. (So web browsing doesn't require you to build new rend circs every 30 seconds.) Cannibalize GENERAL circs to be C_REND, C_INTRO, S_INTRO, and S_REND circ as necessary, if there are any completed ones lying around when we try to launch one. Re-instate the ifdef's to use version-0 style introduce cells, since there was yet another bug in handling version-1 style. We'll try switching over again after 0.0.9 is obsolete. Bugfix: when choosing an exit node for a new non-internal circ, don't take into account whether it'll be useful for any pending x.onion addresses -- it won't. Bugfix: we weren't actually publishing the hidden service descriptor when it became dirty. So we only published it every 20 minutes or so, which means when you first start your Tor, the hidden service will seem broken. svn:r3360
* get rid of 0.0.8 backwards compatibilityRoger Dingledine2005-01-13
| | | | svn:r3353
* when deciding if a port is handled and the port demands uptime, don'tRoger Dingledine2005-01-13
| | | | | | | consider it handled if there's a circ that fits but isn't high-uptime. svn:r3349
* Annotate circuits w/ whether they aim to contain high uptime nodes and/orRoger Dingledine2005-01-12
| | | | | | | | | | | | | | | | | high capacity nodes. When building circuits, choose appropriate nodes. New config option LongLivedPorts to indicate application streams that will want high uptime circuits. When attaching a stream to a circuit, pay attention to its requirements. This means that every single node in an intro rend circuit, not just the last one, will have a minimum uptime. Boost the min uptime from an hour to 24 hours. svn:r3339
* when we haven't fetched a directory yet, or the last time weRoger Dingledine2005-01-07
| | | | | | | | | | | | tried they were all unreachable, assume we are not connected to the network. when an application request comes in during this state, be optimistic and assume we just reconnected. fetch a new directory and if it works, begin making circuits. svn:r3327
* clean up logging,Roger Dingledine2004-12-13
| | | | | | | | | make it clearer which warns are bugs, make the control log event match its specification, point out a bug in how we deal with failure when renewing the tls context. svn:r3138
* I'm a bad person.Roger Dingledine2004-12-07
| | | | | | | | | Stop treating the uint16_t's as null-terminated strings, and stop looking at the byte after them to see if it's null, because sometimes you're not allowed to look there. svn:r3108
* Renormalize whitespaceNick Mathewson2004-12-07
| | | | svn:r3095
* New circuit building strategy: keep a list of ports that we've used in ↵Roger Dingledine2004-12-05
| | | | | | | | | | | | | | | | | | | | | | | | | the past 6 hours, and always try to have 2 circuits open or on the way that will handle each such port. (We can extend this to include addresses if exit policies shift to require that.) Seed us with port 80 so web browsers won't complain that Tor is "slow to start up". This was necessary because our old circuit building strategy just involved counting circuits, and as time went by we would build up a big pile of circuits that had peculiar exit policies (e.g. only exit to 9001-9100) which would take up space in the circuit pile but never get used. Fix router_compare_addr_to_addr_policy: it was not treating a port of * as always matching, so we were picking reject *:* nodes as exit nodes too. If you haven't used a clean circuit in an hour, throw it away, just to be on the safe side. This means after 6 hours a totally unused Tor client will have no circuits open. svn:r3078
* React to eof immediately on non-open edge connections.Roger Dingledine2004-12-04
| | | | | | | | | | | Stop keeping track of num_retries for apconns, since they expire after 60 seconds anyway. When warning about retrying or giving up, print the address, so the user knows which one it's talking about. svn:r3073
* bugfix: When we were checking to see if an ap_conn should time outRoger Dingledine2004-12-04
| | | | | | | | | | | | | waiting for its connected cell, we were calculating time from when the ap_conn was created. So if it waited say 20 seconds before being attached, then we would immediately decide that the circuit had timed out. Also, make circuit_dump_by_conn() display actual circuit progress, including circuits that haven't been attached to the conn yet but hope to when it finishes connecting. svn:r3072
* Spell-check strings and commentsNick Mathewson2004-12-01
| | | | svn:r3052
* Let resolve conns retry/expire also, rather than sticking around forever.Roger Dingledine2004-11-30
| | | | | | | | | | | Put the check-if-requested-exitrouter-will-reject-us code in the circuit_attach loop, so it gets checked periodically and not just once at the beginning. This is useful in case the routerlist changes, but also in case the address gets resolved into something that we learn we'll reject. svn:r3039
* Enforce coding style.Nick Mathewson2004-11-30
| | | | svn:r3025
* Suggestion from weasel: Make tor --version --version dump the cvs Id of ↵Nick Mathewson2004-11-29
| | | | | | every file. svn:r3019
* put in initial support for ".nickname.exit" addresses, to let aliceRoger Dingledine2004-11-29
| | | | | | | | | | decide what exit node to use; based on a patch by geoff goodell. needs more work: e.g. it goes bananas building new circuits when the chosen exit node's exit policy rejects the connection. svn:r3015
* wrong is ok, and right is fine, but in between is apparentlyRoger Dingledine2004-11-28
| | | | | | | totally unacceptable to me. svn:r3005
* Normalize space: add one between every control keyword and control clause.Nick Mathewson2004-11-28
| | | | svn:r3003
* remove emacs droppings, since nick says he doesn't need them anymoreRoger Dingledine2004-11-26
| | | | svn:r2989
* minor fixesRoger Dingledine2004-11-16
| | | | svn:r2901
* Resolve FIXME items: make the kill-unattached-AP timeout symbolicNick Mathewson2004-11-10
| | | | svn:r2793
* Clean up copyrights.Roger Dingledine2004-11-07
| | | | | | | | Break connection_consider_empty_buckets() out of connection_read_bucket_decrement(). svn:r2698
* Make options no longer a global variable.Roger Dingledine2004-11-06
| | | | | | | | | Now we can try setting an option but back out if it fails to parse, or if it's disallowed (e.g. changing RunAsDaemon from 1 to 0). Use parse_line_from_str rather than parse_line_from_file. svn:r2692
* - Implement all of control interface except authentication, setconfig,Nick Mathewson2004-11-03
| | | | | | | | | and actually making the sockets. - Make sure that identity-based nicknames start with $. - Use new string_join interface. svn:r2661
* Use strlcpy, not strcpy.Nick Mathewson2004-10-27
| | | | svn:r2610
* start the process of making 0.0.7* obsoleteRoger Dingledine2004-10-17
| | | | svn:r2565
* don't assert multiple things in the same tor_assert()Roger Dingledine2004-10-16
| | | | svn:r2544
* fix paul gardner's assert bug.Roger Dingledine2004-10-11
| | | | | | | | | sometimes circuit_get_open_circ_or_launch() can return 0 but not return a circuit, e.g. because too many circuits have failed recently so the new one didn't launch. we need to tolerate that. svn:r2438
* fix the stale pointer assert bug reported by joe magicRoger Dingledine2004-10-11
| | | | svn:r2436