-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathcorp-relays.html.bak
78 lines (52 loc) · 6.32 KB
/
corp-relays.html.bak
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>The Tor BSD Diversity Project</title>
<link type="text/css" rel="stylesheet" href="torbsd.css"/>
<meta name="author" content="gman"/>
<meta name="editors" content=""/>
<meta name="date" content="2015-06-29"/>
<meta name="x-note" content="These lines at the top are multimarkdown metadata; leave them."/>
<meta name="sep" content="&#8916;"/>
</head>
<body>
<h1 id="thetorbsddiversityprojecttdp"><a href="index.html">The Tor BSD Diversity Project (TDP)</a></h1>
<p>&#8916; <a href="blog.html">Blog</a> &#8916; <a href="faq.html">FAQ</a> &#8916; <a href="resources.html">Resources</a> &#8916; <a href="https://github.com/torbsd/">GitHub</a> &#8916; <a href="contact.html">Contact</a> &#8916; <a href="http://bptfp7py2wclht26.onion/">TDP Onion</a> &#8916;</p>
<p><strong><a href="projects.html">The TDP Projects</a>:</strong><br/>
&#8916; <a href="https://github.com/torbsd/openbsd-ports/">Tor Browser for OpenBSD</a> &#8916; <a href="relay-guides.html">BSD Relay Guides</a> &#8916; <a href="corp-relays.html">Corporate Relays</a> &#8916; <a href="porting-pets.html">Ports for PETs</a> &#8916; <a href="oostats.html">Statistics</a> &#8916;</p>
<h2 id="tdptorrelaysfrombsd-usingfirms">TDP Tor Relays from BSD-Using Firms</h2>
<p><strong>The Tor BSD Diversity Project</strong> is encouraging and enabling BSD-using firms to operate Tor relays.</p>
<p>In 2015, Mozilla <a href="https://blog.mozilla.org/it/2015/01/28/deploying-tor-relays/">deployed</a> <a href="https://globe.torproject.org/#/search/query=mozilla">twelve Tor relays</a>. This is a significant step in increasing the bandwidth of the Tor network and extending the legitimacy of anonymous communications.</p>
<p>As of June 2015, BSD-running Tor relays account for under 5% of total network bandwidth. If firms that employed *BSD infrastructures contributed Tor relays, that number could change drastically.</p>
<p><strong>TDP</strong> is directly querying *BSD firms with adequate infrastructure and staff to replicate Mozilla’s commendable efforts. Configuring and maintaining a Tor relay is a small cost for any entity seeking to strengthen the global anonymity network. <strong>TDP</strong> is looking to not only encourage this step, but also to assist these firms on various levels.</p>
<p><strong>TDP</strong> could either administer the server or assist the relay administrator(s). The <a href="http://lists.nycbug.org/mailman/listinfo/tor-bsd/">Tor-BSD mailing list</a> could be of assistance, not to mention the <a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/">Tor relays list</a>.</p>
<p>It is not necessary to run an exit node. Rather, a high-bandwidth relay or bridge could have a significant impact for the purposes on operating system diversity and available bandwidth.</p>
<p>A simplified, well-commented torrc file is <a href="torrc.txt">here</a></p>
<p>Our implementation recommendations include:</p>
<ul>
<li><p>use an IP space separate from the production network</p></li>
<li><p>keep the relays <em>physically</em> separate from the production network</p></li>
<li><p>previously used hardware can be employed, but consider well-supported network interface cards and drivers for high-bandwidth relays</p></li>
<li><p>optimizing FreeBSD may not be necessary, while changes for other BSDs are quite simple</p></li>
<li><p>OpenBSD requires some /etc/login.conf changes, and the ports/packages only includes the stable version of Tor, but with a little effort, run and maintain Tor on a recent snapshot</p></li>
<li><p>ensure there is a regular routine of maintaining and updating the relays’ ports/packages and base operating system, especially the SSL implementation</p></li>
<li><p>particular attention should be made to keeping the Tor port/package updated, as anonymity is an “arms race” that can require critical changes to the code</p></li>
<li><p>consider using the alpha version of Tor as opposed to the stable version, as the former version gets more attention</p></li>
<li><p>in the case the entity is operating more than one relay, make sure the <a href="https://www.torproject.org/docs/tor-manual.html.en#MyFamily">MyFamily setting</a> is designated in the torrc file</p></li>
<li><p>for high-bandwidth relays, please consult these links for every insight</p></li>
</ul>
<p>For firms that use BSDs, there are multiple benefits in running Tor relays.</p>
<p>First, Tor relays can be a useful platform for assessing the BSDs’ networking stacks. It’s an opportunity to test portable BSD code such as LibreSSL and hardware encryption in a production scenario, as system changes are not detrimental to the business.</p>
<p>Second, providing a more prominent role to the BSDs encourages the overwhelmingly youthful crowd of Tor relay users and administrators to begin trying and using BSDs. Potentially, the pool of BSD-familiar administrators could grow, strengthening the entire BSD ecosystem.</p>
<p>Finally, more Tor relays run by competent BSD sysadmins can mean more upstream patches and changes beneficial to everyone.</p>
<p>More generally, the case for corporate use of anonymity and privacy technologies has grown. Most profoundly noticeable among journalists, these technologies will become fundamental aspects of corporate IT infrastructure. The safest means of ensuring the integrity of firms employing the Tor network is to contribute Tor relays themselves.</p>
<p>Every firm has an interest in anonymity and privacy technologies, particularly in a competitive global economy. Industrial espionage is the norm, not the exception. Firms’ activities cross borders as a norm, and the globe is saturated by surveillance and censorship by a variety of hostile parties. Tor is a critical tool in mitigating such threats.</p>
<p>Please contact us with any questions on deploying Tor relays on BSDs. We hope our efforts increase the number of BSD-running Tor relays, simultaneously strengthening the Tor network.</p>
<h3 id="currenttdpcorporatetorrelays">Current TDP Corporate Tor Relays</h3>
<p><em>verbal agreement for two relays on 100mbps pipes at a provider</em></p>
<p><hr></p>
<p><em>Copyright © 2018 by The Tor BSD Diversity Project (TDP). All Rights Reserved.</em></p>
<p><code>last updated: Wed Aug 9 18:31:15 2017 UTC</code></p>
</body>
</html>