Turbo Tunnel, a good way to design censorship circumvention protocols
summary
Advocates inserting an interior session/reliability layer between application streams and the obfuscation transport so a single logical session survives transport disruptions, TCP resets, and proxy churn. Practical prototypes appear in obfs4, meek, Snowflake (mainline merge in Tor Browser), and a DNS over HTTPS tunnel, using existing libraries like kcpgo and quickgo to provide sequence numbers and acknowledgements and retransmission; session migration across temporary Snowflake proxies and resumable transfers after TCP termination are demonstrated.
AI-written summary · about
chapters (5)
related talks
37mAdvancing human rights with Tor
44mAdvancing Human Rights With Tor
20mSocksTrace: A Proxy Leak Detector for Anonymity-Focused Network Applications
01h 16mAnonymity loves Diversity: The Case of Tor
25mOver view of linux tunnels
37mWhat's a Zero-Trust Tunnel? Exploring Security and Simpler Operations w...
36mSecuring Every Bit
30mApplication network security and observability in an encrypted future