Snowflake is a system to defeat internet censorship. People who are censored
can use Snowflake to access the internet. Their connection goes through
Snowflake proxies, which are run by volunteers. For more detailed information
about how Snowflake works see our documentation wiki.
security/snowflake-tor: Fix build port
While here make small optimizations.
PR: 291387
Tested by: leres
Approved by: egypcio (maintainer, timeout)
NFH: 2026Q1
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
security/snowflake-tor: fix build on riscv64
Bump dependencies to version new enough to support riscv64-freebsd:
golang.org/x/{mod,net,text,tools,sys}
github.com/templexxx/cpu
While we are at it, only strip if requested.
Sponsored by: Berliner Linux User Group e.V.
Approved by: portmgr (build fix blanket)
security/snowflake-tor: update 2.3.0 to 2.4.1
Changes in version v2.4.1 - 2022-12-01
- Issue 40224: Bug fix in utls roundtripper
Changes in version v2.4.0 - 2022-11-29
- Fix proxy command line help output
- Issue 40123: Reduce multicast DNS candidates
- Add ICE ephemeral ports range setting
- Reformat using Go 1.19
- Update CI tests to include latest and minimum Go versions
- Issue 40184: Use fixed unit for bandwidth logging
- Update gorilla/websocket to v1.5.0
- Issue 40175: Server performance improvements
- Issue 40183: Change snowflake proxy log verbosity
- Issue 40117: Display proxy NAT type in logs
- Issue 40198: Add a `orport-srcaddr` server transport option
- Add gofmt output to CI test
- Change bandwidth type from int to int64 to prevent overflow
- Add version output support to snowflake
- Change regexes for ipv6 addresses to catch url-encoded addresses
- Issue 40220: Close stale connections in standalone proxy
Sponsored by: TorBSD Diversity Project, TDP
Sponsored by: The Tor Project
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/snowflake-tor: update 2.1.0 to 2.3.0
* while here,
- add 'broker' support;
- add 'tor' as RUN_DEPENDS, as broker uses its geoip databases;
- add rc script to start a local broker without TLS support.
Changes in version v2.3.0
- Issue 40146: Avoid performing two NAT probe tests at startup
- Issue 40134: Log messages from client NAT check failures are confuse
- Issue 34075: Implement metrics to measure snowflake churn
- Issue 28651: Prepare all pieces of the pipeline for a second bridge
- Issue 40129: Distributed Snowflake Server Support
Changes in version v2.2.0
(Only the first 15 lines of the commit message are shown above )
security/snowflake-tor: update 2.0.1 to 2.1.0
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/v2.1.0/ChangeLog
- Remove support for legacy one shot mode;
- Make connection summary at proxy privacy preserving;
- Add snowflake event API for notifications of connection events;
- Increase capacity of client address map at the server;
- Further clean up snowflake server logs;
- Validate proxy and client supplied strings at broker;
- Update version of DTLS library to include fingerprinting fixes;
- Support recurring NAT type check in standalone proxy.
While here,
* update goptlib from 1.1.0 to 1.2.0;
*
https://github.com/torbsd/goptlib/commit/0018750f0851d5b427828bfbdfc7968ae3c398c3
Sponsored by: TorBSD Diversity Project (TDP)
Sponsored by: The Tor Project
[NEW] security/snowflake-tor: Pluggable Transport using WebRTC inspired by
Flashproxy
Snowflake is a system to defeat internet censorship. People who are censored
can use Snowflake to access the internet. Their connection goes through
Snowflake proxies, which are run by volunteers. For more detailed information
about how Snowflake works see our documentation wiki.
WWW: https://snowflake.torproject.org/
Sponsored by: TorBSD Diversity Project (TDP)
Sponsored by: The Tor Project