security/snowflake-tor 2.5.1_16 DragonFly

Pluggable Transport using WebRTC inspired by Flashproxy

System: DragonFly
Repository: DPorts
Maintainer: [email protected] (as in FreeBSD)
License: BSD3CLAUSE
Categories: net, security
Package size: 12053.7 KiB, 40065.3 KiB installed

Description

Snowflake is a system to defeat internet censorship. People who are censored can use Snowflake to access the internet. Their connection goes through Snowflake proxies, which are run by volunteers. For more detailed information about how Snowflake works see our documentation wiki.

In the other systems

System

Port

Version

DragonFly

security/snowflake-tor

2.5.1_16

FreeBSD

security/snowflake-tor

2.11.0_13

Install

Binary package:

pkg install snowflake-tor

From DPorts:

cd /usr/dports/security/snowflake-tor && make install clean

Dependencies

Run dependencies 2

Required by 3

Configuration

No options to configure.

Service scripts: none

Message after installing

To enable Snowflake's proxy daemon to start on boot:

  # sysrc snowflake_enable=YES

It will keep its same defaults, and allow the proxy service to run.

To start the service:

  # service snowflake start

Should you wish to change any of the parameters, please refer
to the snowflake-proxy(1) manpage. Use sysrc(8) to view or modify
values depending on your needs.

If you opt to use Snowflake's bridge features, adjust your 'torrc' accordingly:

  - Client

  UseBridges 1
  Bridge snowflake 192.0.2.3:1
  ClientTransportPlugin snowflake exec /usr/local/bin/snowflake-client \
    -front cdn.sstatic.net \
    -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ \
    -ice stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.dus.net:3478

Client's options can be checked using `/usr/local/bin/snowflake-client --help`.

  - Server

  BridgeRelay 1
  ExtORPort auto
  ServerTransportListenAddr snowflake 0.0.0.0:443
  ServerTransportPlugin snowflake exec /usr/local/bin/snowflake \
    --acme-email [email protected] \
    --acme-hostnames snowflake.example

Server's options can be checked using `/usr/local/bin/snowflake-client --help`.

As it uses TLS with ACME (Let's Encrypt) by default, an extra socket on port 80
will be started. In order to disable this behavior, use -disable-tls. The domain
names given to the --acme-hostnames option should resolve to the IP address of
the server. You can give more than one, separated by commas.