[tor-relays] Setting a bridge to automatically change IP adresses

Hello, so my bridge relay at https://metrics.torproject.org/rs.html#details/4D6E3CA2110FC36D3106C86940A1D4C8C91923AB

Says it is blocked in Russia. I take this as a good sign that the bridge is being used, as it is being picked up. But I am wondering is there a way to set the bridge to automatically change Ips every few days or so to make it harder to detect? Maybe this would be an interesting thing to implement.

Thanks.

–Keifer

Quoting Keifer Bly (2022-07-22 18:42:57)

   Says it is blocked in Russia. I take this as a good sign that the bridge
   is being used, as it is being picked up. But I am wondering is there a way
   to set the bridge to automatically change Ips every few days or so to make
   it harder to detect? Maybe this would be an interesting thing to
   implement.

tl;rd: no, please don't rotate the IP address of your bridges.

There is a complicated valance here.

Many users will keep their bridges for long time if they are working fine, it
might not be easy in some places to get new bridges. Tor Browser and many other
software based on tor is designed around that, and bridges are kept long time
(there are also other benefits for privacy keeping them stable as they end up as
guards).

At the same time once bridges are blocked it could be nice to rotate IP
addresses, to keep them being useful. But rotating the IP address might affect
users on other locations for which the bridge is still working fine.

For now we are asking people to keep their IP address stable and don't rotate
it. As we find more valuable stable bridges and that is what users expect. We
have some ideas for the future to allow rotation and let users rediscover them,
but that is not going to happen soon.

So for now don't host a bridge if you can't have a stable IP address for a long
period of time. Is not the end of the world if you rotate the IP address once
per year or something like that, but don't do it on daily basics.

···

--
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.

Thanks. But it just seems that would make it easier to have “new” bridges, as all of the in use ones will eventually be blocked? Have you seen my homemade tool for Windows tor relays at https://www.youtube.com/watch?v=Vpk6yvUWQqU? Thanks.

···

–Keifer

So either you have dozens of unused IP's on your server then do as I do, let the bridges run, _now_
https://nusenu.github.io/OrNetStats/for-privacy.net.html
and set different BridgeDistribution methods.
# Recognized methods are: "https", "email", "moat", "settings", "telegram", "reserved".

Or you haven't ordered any IP's for a looong time.
https://docs.hetzner.com/general/others/ipv4-pricing/
The setup fee + monthly costs = one bar metal server/month¹ or one KVM for a whole year (both incl. 1IP & IPv6/48 sub)

¹ unmetered unlimited traffic (1000 Mbit), see my OT post.

···

On Mittwoch, 10. August 2022 02:02:36 CEST Keifer Bly wrote:

Thanks. But it just seems that would make it easier to have "new" bridges,
as all of the in use ones will eventually be blocked?

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

1 Like