I have recently set up an obfs4 bridge. It’s operational and indicates both
obfs4: functional and
Is it accurate that my bridge provides both obfs4 and vanilla, not exclusively obfs4?
I’ve configured a random high port as
ORPort and port 443 as
ServerTransportListenAddr obfs4, as clients will connect to my obfs4 port, correct? I’ve already used the bridge line with port 443 in my Tor browser, and it seemed to work well so far.
Since this is my first bridge relay, and I opted for FreeBSD, which I’m not as familiar with as Linux, I selected
BridgeDistribution none to observe it over some time.
It’s now listed in relay search with a 16-hour uptime, displaying the flags
ReachableIPv6, so I presume it’s functioning correctly.
If I wish to put it into “production” now, is it adequate to simply remove
BridgeDistribution none and reload the process? Do I need to restart it?
Who then decides which distribution method is used? The authorities? Should I actively choose a method?
Final question: My VPS has a static IP address, but since bridges are eventually blocked by censors, should I migrate the relay to a new VPS after some time? I’ve rented the VPS for 12 months now. Would it be a prudent idea to “replace” the VPS every year to bring up the relay with a new IP address, or should I just let it continue running?
I’m already running a guard relay for more then 10 years and two Snowflake proxies at different locations. So the decision to run a bridge now seemed like the next logical step to me.