search

Jigsaw-Code / outline-server

Outline Server, developed by Jigsaw. The Outline Server is a proxy server that runs a Shadowsocks instance and provides a REST API for access key management.
https://getoutline.org/
Apache License 2.0
5.82k stars 786 forks source link

TOR config #149

Open cameronaaron opened 6 years ago

cameronaaron commented 6 years ago

There may be cases where people need to be anonymous using tor there should be a config in outline server that will allow a user to run traffic through a tor server

fortuna commented 6 years ago

Thanks for the suggestion. We need to investigate this further.

This could potentially happen in two different places: 1) On the Outline Server: the server would redirect all outgoing traffic via the Tor network. 2) On the client: a client could potentially connect to a Tor Guard via the connection to the Outline Server (proxy example). The advantage of this is that the client has control of what goes over Tor. But I'm not sure how to implement that on mobile or in a user-friendly way.

cameronaaron commented 6 years ago

Thank you for the consideration! I will keep brainstorming a good way to implement option 2 but for now i'm pretty stumped on a good way to implement this. Option 1 does not seem like it would take as much trouble though

MaXFalstein commented 6 years ago

👋🏼 @fortuna! I would love to be able to configure certain device sessions or key profiles to use Tor, not the whole server which would require a decent amount of modification of the TOR client. It would be interesting to daisy chain Outline servers and then go into TOR.

ghost commented 6 years ago

See https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#WARNING.

ghost commented 6 years ago

You would also need to warn the users about the risks such as attacks by malicious exit nodes and Tor user discrimination by various websites.

ghost commented 6 years ago

@fortuna 1 would expose the Outline server to plaintext Tor traffic, while we generally try to limit sensitive data that may be stored on the Outline servers.

MaXFalstein commented 6 years ago

@YegorIevlev Outline could have a dedicated TOR entry node which it would not need to expose the Outline server to plaintext to enter the TOR network.

ghost commented 6 years ago

@MaXFalstein Even simpler, do Tor proxying completely on client side.