mirror repository of the tor core protocol in case of issues
Go to file
Mike Perry b0e92634d8 Netflow record collapsing defense.
This defense will cause Cisco, Juniper, Fortinet, and other routers operating
in the default configuration to collapse netflow records that would normally
be split due to the 15 second flow idle timeout.

Collapsing these records should greatly reduce the utility of default netflow
data for correlation attacks, since all client-side records should become 30
minute chunks of total bytes sent/received, rather than creating multiple
separate records for every webpage load/ssh command interaction/XMPP chat/whatever
else happens to be inactive for more than 15 seconds.

The defense adds consensus parameters to govern the range of timeout values
for sending padding packets, as well as for keeping connections open.

The defense only sends padding when connections are otherwise inactive, and it
does not pad connections used solely for directory traffic at all. By default
it also doesn't pad inter-relay connections.

Statistics on the total padding in the last 24 hours are exported to the
extra-info descriptors.
2017-05-08 13:49:21 -04:00
changes Netflow record collapsing defense. 2017-05-08 13:49:21 -04:00
contrib Bump master to 0.3.1.0-alpha-dev 2017-02-15 14:36:56 -05:00
doc Netflow record collapsing defense. 2017-05-08 13:49:21 -04:00
m4 Replace obsolete macros with modern equivalents 2016-12-23 10:34:11 -05:00
scripts Merge branches 'server_ciphers' and 'ciphers.inc' 2017-01-27 16:45:18 -05:00
src Netflow record collapsing defense. 2017-05-08 13:49:21 -04:00
.gitignore Merge branch 'combined-fuzzing-v4' 2017-01-30 08:40:46 -05:00
acinclude.m4 Add a cross-compile action to AC_RUN_IFELSE 2016-12-23 10:34:15 -05:00
autogen.sh Report errors when updating configuration files 2016-12-23 10:35:26 -05:00
ChangeLog Bump to 0.3.0.3-alpha-dev 2017-02-03 13:58:50 -05:00
configure.ac Bump master to 0.3.1.0-alpha-dev 2017-02-15 14:36:56 -05:00
Doxyfile.in doxygen says these options are obsolete 2016-10-24 10:31:05 -04:00
INSTALL Small fixes for the 2702 implementation 2011-04-02 12:15:08 +02:00
LICENSE Add __mulodi4 source to src/ext 2016-05-18 09:44:01 -04:00
Makefile.am libfuzzer tweaks per recommendations 2017-01-30 08:37:25 -05:00
Makefile.nmake Clean up the MVSC nmake files so they work again. 2014-09-09 10:27:05 -04:00
README Move hacking documentation into a new subdirectory. 2015-10-09 10:40:53 -04:00
ReleaseNotes forward-port the 0.2.9.9 changelog stanza 2017-01-23 09:42:02 -05:00

Tor protects your privacy on the internet by hiding the connection
between your Internet address and the services you use. We believe Tor
is reasonably secure, but please ensure you read the instructions and
configure it properly.

To build Tor from source:
        ./configure && make && make install

To build Tor from a just-cloned git repository:
        sh autogen.sh && ./configure && make && make install

Home page:
        https://www.torproject.org/

Download new versions:
        https://www.torproject.org/download/download.html

Documentation, including links to installation and setup instructions:
        https://www.torproject.org/docs/documentation.html

Making applications work with Tor:
        https://wiki.torproject.org/projects/tor/wiki/doc/TorifyHOWTO

Frequently Asked Questions:
        https://www.torproject.org/docs/faq.html


To get started working on Tor development:
        See the doc/HACKING directory.