tor-webwml.git

1) ## translation metadata
2) # Revision: $Revision$
3) # Translation-Priority: 3-low
4) 
5) #include "head.wmi" TITLE="Tor Project: Pluggable Transports" CHARSET="UTF-8"
6) <div id="content" class="clearfix">
7)   <div id="breadcrumbs">
8)     <a href="<page index>">Home &raquo; </a>
9)     <a href="<page docs/documentation>">Documentation &raquo; </a>
10)     <a href="<page docs/pluggable-transports>">Pluggable Transports</a>
11)   </div>
12)   <div id="maincol">
13)     <h2>Tor: Pluggable Transports</h2>
14)     <hr>
15) 
16)     <p>
17)     An increasing number of censoring countries are using Deep Packet
18)     Inspection (DPI) to classify Internet traffic flows by protocol.
19)     While Tor uses <a href="<page docs/bridges>">bridge relays</a> to
20)     get around a censor that blocks by IP address, the censor can use
21)     DPI to recognize and filter Tor traffic flows even when they connect
22)     to unexpected IP addresses.
23)     </p>
24) 
25)     <p>
26)     Pluggable transports transform the Tor traffic flow between the client
27)     and the bridge. This way, censors who monitor traffic between the
28)     client and the bridge will see innocent-looking transformed traffic
29)     instead of the actual Tor traffic.
30)     External programs can talk to Tor clients and Tor bridges using the <a

31) href="https://gitweb.torproject.org/torspec.git/blob/HEAD:/pt-spec.txt">pluggable

32) transport API</a>, to make it easier to build interoperable programs.
33)     </p>
34) 
35)     <hr>
36) 
37)     <ul>

38) 

39)     <li><a href="<page projects/obfsproxy>"><b>Obfsproxy</b></a> is a Python framework for implementing new

40)     pluggable transports. It uses Twisted for its networking needs, and

41)     <a href="https://gitweb.torproject.org/pluggable-transports/pyptlib.git/blob/HEAD:/README.rst">pyptlib</a>
42)     for some pluggable transport-related features. It supports the

43)     <a href="https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/blob/HEAD:/doc/obfs2/obfs2-protocol-spec.txt">obfs2</a>

44)     and

45)     <a href="https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/blob/HEAD:/doc/obfs3/obfs3-protocol-spec.txt">obfs3</a>

46)     pluggable transports. Maintained by asn. <br>

47)     Status: <a href="#download">Deployed</a>

48)     </li>
49) 

50)     <li><a href="https://crypto.stanford.edu/flashproxy/"><b>Flashproxy</b></a> turns ordinary web browsers into bridges using

51)     websockets, and has a little python stub to hook Tor clients to the
52)     websocket connection. See its
53)     <a href="https://gitweb.torproject.org/flashproxy.git">git repository</a>,
54)     and

55)     <a href="https://crypto.stanford.edu/flashproxy/flashproxy.pdf">design paper</a>.

56)     Maintained by David Fifield.

57)     # <iframe src="//crypto.stanford.edu/flashproxy/embed.html" width="80" height="15" frameborder="0" scrolling="no"></iframe>

58)     <br>

59)     Status: <a href="#download">Deployed</a>

60)     </li>
61) 

62)     <li><a href="https://fteproxy.org/"><b>Format-Transforming
63)     Encryption</b></a> (FTE) transforms Tor traffic to arbitrary
64)     formats using their language descriptions. See the <a
65)     href="https://kpdyer.com/publications/ccs2013-fte.pdf">research
66)     paper</a>. <br> Status: <a href="#download">Deployed</a> </li>
67) 
68)     <li><a href="http://www.cs.kau.se/philwint/scramblesuit/"><b>ScrambleSuit</b></a>
69)     is a pluggable transport that protects

70)     against follow-up probing attacks and is also capable of changing
71)     its network fingerprint (packet length distribution,

72)     inter-arrival times, etc.). It's part of the Obfsproxy framework.

73)     Maintained by Philipp Winter. <br>

74)     Status: <em>To be deployed</em>
75)     </li>
76) 
77)     <li><b>Meek</b> is a transport that uses HTTP for carrying bytes
78)     and TLS for obfuscation. Traffic is relayed through a third-party
79)     server (​Google App Engine). It uses a trick to talk to the third
80)     party so that it looks like it is talking to an unblocked server.
81)     Maintained by David Fifield. <br>
82)     Status: <e>Coming soon</em>

83)     </li>
84) 

85)     <li><b>StegoTorus</b> is an Obfsproxy fork that extends it to a)
86)     split Tor streams across multiple connections to avoid packet size
87)     signatures, and b) embed the traffic flows in traces that look like
88)     html, javascript, or pdf. See its
89)     <a href="https://gitweb.torproject.org/stegotorus.git">git repository</a>.

90)     Maintained by Zack Weinberg. <br>
91)     Status: <em>Undeployed</em>

92)     </li>
93) 
94)     <li><b>SkypeMorph</b> transforms Tor traffic flows so they look like
95)     Skype Video. See its
96)     <a href="http://crysp.uwaterloo.ca/software/SkypeMorph-0.5.1.tar.gz">source code</a>
97)     and
98)     <a href="http://cacr.uwaterloo.ca/techreports/2012/cacr2012-08.pdf">design paper</a>.

99)     Maintained by Ian Goldberg. <br>
100)     Status: <em>Undeployed</em>

101)     </li>
102) 
103)     <li><b>Dust</b> aims to provide a packet-based (rather than
104)     connection-based) DPI-resistant protocol. See its
105)     <a href="https://github.com/blanu/Dust">git repository</a>.

106)     Maintained by Brandon Wiley. <br>
107)     Status: <em>Undeployed</em>

108)     </li>
109) 
110)     </ul>

111) 
112)     <p> Also see the <emph>unofficial</emph> pluggable transports <a
113)     href="https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports">wiki
114)     page</a> for more pluggable transport information.</p>
115) 

116)     <hr>
117) 
118)     <p>
119)     Our goal is to have a wide variety of pluggable transport designs.
120)     Many are at the research phase now, so it's a perfect time to play
121)     with them or suggest new designs. Please let us know if you find or
122)     start other projects that could be useful for making Tor's traffic
123)     flows more DPI-resistant!
124)     </p>

125) 

126)     <hr>

127)     <a id="download"></a>

128)     <h2><a href="<page download/download-easy>">Download the Pluggable Transports Tor Browser Bundle</a></h2>

129)     <p>

130)     As of Tor Browser 3.6-beta-1, pluggable transports are now included in the

131) <a href="<page download/download-easy>">official

132) Tor Browser packages</a>.

133)     </p>
134)