docs/en/bridges.wml
2a9aaa80
 ## translation metadata
40e07e2e
 # Revision: $Revision$
2a9aaa80
 # Translation-Priority: 1-high
 
 #include "head.wmi" TITLE="Tor Project: Bridges" CHARSET="UTF-8"
6736df4e
 
 <!-- TODO: update screenshots -->
 <!-- TODO: rewrite "running a bridge" section -->
 <!-- TODO: add obfs4 how-tos -->
 
2a9aaa80
 <div id="content" class="clearfix">
   <div id="breadcrumbs">
b289ef06
     <a href="<page index>">Home &raquo; </a>
2a9aaa80
     <a href="<page docs/documentation>">Documentation &raquo; </a>
     <a href="<page docs/bridges>">Bridges</a>
   </div>
fdcf771c
   <div id="maincol">
2a9aaa80
     <a id="BridgeIntroduction"></a>
     <h2><a class="anchor" href="#BridgeIntroduction">Tor: Bridges</a></h2>
ed5ac546
     <hr>
a36eadd8
 
     <p>
     <img width="7%" height="7%" style="float: left;" src="$(IMGROOT)/icon-Obfsproxy.jpg">
     <b>Tip:</b>
fdcf771c
     Having trouble connecting to Tor? You may need to use a different <b>pluggable
     transport</b>. <a class="anchor" href="#PluggableTransports">Click here for
     more information</a>.
a36eadd8
     </p>
fdcf771c
 
2a9aaa80
     <p>
     Bridge relays (or "bridges" for short) are Tor relays that aren't listed in
     the main Tor directory. Since there is no complete public list of them, even if
     your ISP is filtering connections to all the known Tor relays, they probably
     won't be able to block all the bridges. If you suspect your access to the
fdcf771c
     Tor network is being blocked, you may want to use bridges.
2a9aaa80
     </p>
fdcf771c
 
2a9aaa80
     <p>
     The addition of bridges to Tor is a step forward in the blocking
     resistance race. It is perfectly possible that even if your ISP filters
e077e9df
     the Internet, you do not require a bridge to use Tor. So you should try
2a9aaa80
     to use Tor without bridges first, since it might work.
     </p>
fdcf771c
 
2a9aaa80
     <p>
     Note that it's also possible that Tor is non-functional for other
fdcf771c
     reasons. The latest version of <a href="<page projects/torbrowser>">
     Tor Browser</a> tries to give you better hints about why Tor is having
     problems connecting. You should also read <a href="<page docs/faq>#DoesntWork">the
2a9aaa80
     FAQ about problems with running Tor properly</a> when you have issues.
fdcf771c
     If you feel that the issue is clearly related to Tor being blocked, or
     you'd simply like to try because you're unsure or feeling adventurous,
     please read on. Ensure that you're using the <a href="<page download/download>#Dev">latest
     Tor Browser for your platform</a>.
2a9aaa80
     </p>
fdcf771c
 
2a9aaa80
     <p>
fdcf771c
     To use a bridge, you have two options. Tor Browser now provides some
     bridges by default. You can enable these easily. Unfortunately, because
     these bridges are publically distributed, it is easy for censors to block
     some of them, so some of them may not work. In this case, you'll need to
     locate different bridges. Furthermore, you'll need to configure Tor Browser
     with whichever bridge address you intend to use. If your Internet connection
     requires the use of a proxy, you'll probably need to configure Tor Browser
     to use it first. If you don't think you need to configure a proxy for your
     Internet connection, you probably don't. Give it a try and if you have
     issues, <a href="<page about/contact>#support">ask us for help</a>.
2a9aaa80
     </p>
fdcf771c
 
2a9aaa80
     <p>
fdcf771c
     <ul>
     <li><a href="#PluggableTransports">Obfuscated Bridges and Pluggable Transports</a></li>
     <li><a href="#Understanding">Understanding Bridge Configuration Lines</a></li>
     <li><a href="#AddTorNotWorks">Adding bridges in Tor Browser when Tor doesn't work</a></li>
     <li><a href="#AddTorWorks">Adding bridges in Tor Browser when Tor does work</a></li>
     <li><a href="#FindingMore">Finding more bridges for Tor</a></li>
     </ul>
2a9aaa80
     </p>
fdcf771c
 
a36eadd8
     <a id="PluggableTransports"></a>
fdcf771c
     <h2><a class="anchor" href="#PluggableTransports">Pluggable Transports</a></h2>
ed5ac546
     <hr>
fdcf771c
 
     <p>Over the last few years, censors have found ways to block Tor even when
     clients are using bridges. They usually do this by installing special
     boxes at ISPs that peek into network traffic and detect Tor; when Tor
     is detected they block the traffic flow.
a36eadd8
     </p>
 
0d6de55d
     <p>To circumvent such sophisticated censorship Tor introduced
fdcf771c
     <a href="<page docs/pluggable-transports>"><i>pluggable transports</i></a>.
     These transports manipulate all Tor traffic between the client and its
     first hop such that it is not identifiable as a Tor connection. If the
     censor can't decide if the connection is a Tor connection, then they are
     less likely to block it.</p>
a36eadd8
 
fdcf771c
     <p>Sadly, pluggable transports are not immune to detection, if a censor
     is given enough time. In the past, we promoted obfs and obfs2 as safe
848d5f2c
     transports. These are now deprecated and were replaced by obfs3,
fdcf771c
     scramblesuit, fte, and obfs4.</p>
 
     <p>Bridges which support pluggable transports can be used with Tor Browser
     easily. Tor Browser includes some pre-configured bridges and you can get
     more from <a href="#FindingMore">BridgeDB</a>, if those don't work.</p>
a36eadd8
 
     <a id="Understanding"></a>
fdcf771c
     <h2><a class="anchor" href="#Understanding">Understanding A Bridge Configuration Line</a></h2>
     <hr>
2a9aaa80
     <p>
fdcf771c
     As an example, when you obtain a bridge from https://bridges.torproject.org,
     you'll get a bridge entry that looks like the following:
2a9aaa80
     </p>
     <pre><samp>
fdcf771c
     141.201.27.48:443 4352e58420e68f5e40bf7c74faddccd9d1349413
2a9aaa80
     </samp>
     </pre>
fdcf771c
 
2a9aaa80
     <p>
     Understanding the components of a bridge line isn't strictly required
ed5ac546
     but may prove useful. You can skip this section if you'd like.<br>
fdcf771c
     The first element is the IP address of the bridge: <tt>'141.201.27.48'</tt><br>
     The second element is the port number: <tt>'443'</tt><br>
     The third element, the fingerprint (unique identifier of the
     bridge), is optional:
ed5ac546
     <tt>'4352e58420e68f5e40bf7c74faddccd9d1349413'</tt><br>
a36eadd8
 
     <p>
     <img width="7%" height="7%" style="vertical-align:middle" src="$(IMGROOT)/icon-Obfsproxy.jpg">
          <span><b>Pluggable transports tip:</b></span>
2a9aaa80
     </p>
a36eadd8
     <p>
     If your bridge line looks like this:
     <pre><samp>
6f9e8abe
     obfs4 141.201.27.48:420 4352e58420e68f5e40bf7c74faddccd9d1349413
a36eadd8
     </samp>
     </pre>
 
fdcf771c
     The first element is the name of the pluggable transport
a36eadd8
     technology used by the bridge. For example, in the case above, the
6f9e8abe
     bridge is using the <i>obfs4</i> pluggable transport.
a36eadd8
     </p>
 
2a9aaa80
     <a id="UsingBridges"></a>
fdcf771c
     <h2><a class="anchor" href="#UsingBridges">Using bridges with Tor
     Browser</a></h2>
ed5ac546
     <hr>
fdcf771c
 
     <ul>
     <li><a href="#AddTorNotWorks">Adding bridges in Tor Browser when Tor doesn't work</a></li>
     <li><a href="#AddTorWorks">Adding bridges in Tor Browser when Tor does work</a></li>
     </ul>
 
     <a id="AddTorNotWorks"></a>
     <h3><a href="#AddTorNotWorks">Adding bridges in Tor Browser when Tor <em>does not</em> work:</a></h3>
     <hr>
 
     <p>First, you should read <a href="<page docs/faq>#DoesntWork">the
     FAQ about problems with running Tor properly</a> when you have issues.
     Sometimes Tor does not work due to a silly mistake rather than your
     ISP interfering with your Internet connection.</p>
 
ed5ac546
     <br><br>
fdcf771c
     <h3>1) To add a bridge, follow the instructions on screen. Click the
         "Configure" button.
     </h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-startup.png" alt="Tor Browser's Initial Configuration page">
     <br><br><br>
     <h3>2) If you must configure a proxy then select "Yes" and enter the
         details on the following page.
         <br/>If you do not use a proxy then select "No" and click "Next".
         <br/>If you do not know if you must configure a proxy then you likely
         do not need to do it.
     </h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-no-proxy.png" alt="Tor Browser's Proxy page">
     <br><br><br>
     <h3>3) After you configure a proxy or skip over that configuration page,
         the following page asks "Does your Internet Service Provider (ISP)
         block or otherwise censor connections to the Tor Network?". Select
         "Yes" and then click "Next".</h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-isp-interference.png" alt="Tor Browser's Bridge page">
     <br><br><br>
     <h3>4) Now you have two configuration options. You can use bridges which are
         preconfigured and provided with Tor Browser, or you can specify your
         own bridge(s).</h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-bridges-options.png" alt="Tor Browser's Bridge Configuration page">
     <br><br><br>
     <h3>5a) If you want to use one of the provided bridges, then choose the
6f9e8abe
     transport type you want to use. obfs4 is currently the recommend
fdcf771c
     type, but depending on where you are located another type may work better
     for you. If you have any questions, please <a href="<page about/contact>#support">contact
     us.</a></h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-bridges-provided.png" alt="Tor Browser's Bridge Configuration page - provided bridges">
     <br><br><br>
     <h3>5b) Alternatively, if you want to use a <a href="#FindingMore">custom
     bridge</a>, then select "Enter custom bridges" and copy-and-paste the
     bridge information into the textbox.
     </h3>
     <br/>
     <img src="$(IMGROOT)/tb-tor-launcher-bridges-custom.png" alt="Tor Browser's Bridge Configuration page - provided bridges">
     <br><br><br>
     <h3>6) After you decide which bridges you want to use, click "Connect".
     Tor should now be able to load successfully and the browser window
     should appear.</h3>
     <br/>
     <img src="$(IMGROOT)/tb-frontpage.png" alt="Tor Browser's Front Page">
     <br><br><br><br>
 
     <a id="AddTorWorks"></a>
     <h3><a href="#AddTorWorks">Adding bridges in Tor Browser when Tor <em>does</em> work:</a></h3>
     <hr>
 
     <p>The following instructions assume Tor Browser successfully loads and
     you are able to surf the web. If you do not see the web browser when you
     run Tor Browser (like in step (1) below), you may need to follow the
     <a href="#AddTorNotWorks">instructions above</a>.
 
ed5ac546
     <br><br>
fdcf771c
     <h3>1) Start Tor Browser:</h3>
     <br>
     <img src="$(IMGROOT)/tb-frontpage.png" alt="Tor Browser's Front Page">
     <br><br><br>
     <h3>2) To begin using bridges, open Tor Browser's Network Settings:</h3>
     <br>
     <img src="$(IMGROOT)/tb-tor-button-menu.png" alt="Tor Browser's TorButton Menu">
     <br><br><br>
     <h3>3) Select "My Internet Service Provider (ISP) blocks connections to the Tor network":</h3>
     <br>
     <img src="$(IMGROOT)/tb-bridge-networksettings.png" alt="Tor Browser's Network Settings page">
     <br><br><br>
     <h3>4) Now you have two configuration options. You can use bridges which are
         preconfigured and provided with Tor Browser, or you can specify your
         own bridge(s).</h3>
     <br>
     <img src="$(IMGROOT)/tb-bridges-options-from-browser.png" alt="Tor Browser's TorButton Menu">
     <br><br><br>
     <h3>5a) If you want to use one of the provided bridges, then choose the
6f9e8abe
     transport type you want to use. obfs4 is currently the recommend
fdcf771c
     type, but depending on where you are located another type may work better
     for you. If you have any questions, please <a href="<page about/contact>#support">contact
     us.</a></h3>
     <br>
     <img src="$(IMGROOT)/tb-bridges-provided-from-browser.png" alt="My Internet Service Provider (ISP) blocks connections to the Tor network">
     <br><br><br>
     <h3>5b) Alternatively, if you want to use a <a href="#FindingMore">custom
     bridge</a>, then select "Enter custom bridges" and copy-and-paste the
     bridge information into the textbox.
     </h3>
     <br>
     <img src="$(IMGROOT)/tb-bridges-custom-from-browser.png" alt="Add bridges in the custom bridges textbox">
     <br><br><br>
a36eadd8
 
     <p>
fdcf771c
     Tor will only use one bridge at a time, but it is good to add more than one
     bridge so you can continue using Tor even if your first bridge becomes
     unavailable.
a36eadd8
     </p>
fdcf771c
     <br><br>
a36eadd8
 
 
2a9aaa80
     <a id="FindingMore"></a>
     <h2><a class="anchor" href="#FindingMore">Finding more bridges for Tor</a></h2>
ed5ac546
     <hr>
fdcf771c
 
2a9aaa80
     <p>
fdcf771c
     If you need to get bridges, you can get a bridge by visiting
     <a href="https://bridges.torproject.org/">https://bridges.torproject.org/</a>
     with your web browser.
     </p>
 
     <p>
     You can also get bridges by sending mail to bridges@bridges.torproject.org
     with the line "get bridges" by itself in the body of the mail. You'll need
     to send this request from a Gmail, Riseup!, or Yahoo! account, though
     &mdash; we only accept these providers because otherwise we make it too
     easy for an attacker to make a lot of email addresses and learn about all
     the bridges.  Almost instantly, you'll receive a reply that includes:
2a9aaa80
     </p>
     <pre>
68fc46d8
     Here are your bridges:
fdcf771c
 
      60.16.182.53:9001
      87.237.118.139:444
      60.63.97.221:443
47ad2535
 
fdcf771c
     </pre>
     <p>
     Similarly, if you need bridges with a specific pluggable transport, the
     process is just as easy. First, decide which type you want. Currently we
6f9e8abe
     provide obfs2, obfs3, obfs4, scramblesuit, and fte. If you don't know which one
     you should choose, then obfs4 is usually a good choice. Send an email to
     bridges@bridges.torproject.org with "get transport obfs4" by itself in
     the body of the email (replace "obfs4" with whichever pluggable transport
fdcf771c
     you want to use). You should receive an email like this:
     </p>
     <pre>
     Here are your bridges:
47ad2535
 
6f9e8abe
       obfs4 60.16.182.53:9001 cc8ca10a63aae8176a52ca5129ce816d011523f5
       obfs4 87.237.118.139:444 0ed110497858f784dfd32d448dc8c0b93fee20ca
       obfs4 60.63.97.221:443 daa5e435819275f88d695cb7fce73ed986878cf3
2a9aaa80
     </pre>
     <p>
fdcf771c
     Once you've received the email with bridge information, you can
     continue the configuration steps outlined <a href="#UsingBridges">above</a>.
2a9aaa80
     </p>
fdcf771c
 
2a9aaa80
     <a id="RunningABridge"></a>
     <h2><a class="anchor" href="#RunningABridge">Running a Tor Bridge</a></h2>
ed5ac546
     <hr>
fdcf771c
 
2a9aaa80
     <p>
da63731b
     If you want to help out, you should <a href="<page
     docs/faq>#RelayOrBridge">decide whether you want to run a normal Tor
     relay or a bridge relay</a>. You can configure your bridge either
     manually or graphically:
2a9aaa80
     <ul>
da63731b
     <li>manually <a href="<page docs/faq>#torrc">edit
ed5ac546
     your torrc file</a> to be just these four lines:<br>
2a9aaa80
     <pre><code>
     SocksPort 0
68fc46d8
     ORPort auto
2a9aaa80
     BridgeRelay 1
     Exitpolicy reject *:*
     </code></pre></li>
     </ul>
     </p>
fdcf771c
 
2a9aaa80
     <p>
     When configured as a bridge, your server will <b>not</b> appear in the public
     Tor network.
     </p>
fdcf771c
 
2a9aaa80
     <p>
     Your bridge relay will automatically publish its address to the bridge
c261c7ec
     authority, which will give it out via https or email as above.
     You can construct the bridge address
2a9aaa80
     using the <a href="#Understanding">format above</a> (you can find the
     fingerprint in your Tor log files or in <tt>/var/lib/tor/fingerprint</tt>
     depending on your platform).
     </p>
fdcf771c
 
2a9aaa80
     <p>
     If you would like to learn more about our bridge
     design from a technical standpoint, please read the <a
7848c5da
     href="<specblob>attic/bridges-spec.txt">Tor bridges
2a9aaa80
     specification</a>. If you're interested in running an unpublished bridge
     or other non-standard uses, please do read the specification.
     </p>
   </div>
   <!-- END MAINCOL -->
   <div id = "sidecol">
 #include "side.wmi"
 #include "info.wmi"
   </div>
   <!-- END SIDECOL -->
 </div>
 <!-- END CONTENT -->
fdcf771c
 #include <foot.wmi>
e077e9df