I’m planning this move which I said I could not do. Are there tips and tricks I should know of?
Like is there a ratio of -capacity to ephemeral ports to open. I read this here somewhere.
Like any preferred range of ports to use. High end or middle.
Of course it is all dependent on me replacing the ISP supplied router with my own which can do port forwarding. This part is tested.
The reason for this change is because my stats show a very VERY large number of connections less than 30 seconds. This says the connection did not work properly.
And an average of 70/day Timed out waiting for client to open data channel.
I know the UDP forwarding works. I see it in my router logs and I see it in the snowflake logs. Does it matter that the external port 65518 does not make it to the same respective port (65534) to the proxy?
After an analysis of logs and everything else I slapped my forehead in a D’oh! moment. D'oh! - Wikipedia!
Yes! My firewall in Ubuntu. When I read your response (@tobrop) I thought “He came to the same conclusion.” I was too concentrated on my router change.
Even though it is obvious, there in no mention of this in any instruction I followed (Tor Project_Compile Snowflake proxy from the source). It reminds you of the “nohup” in the startup command which allows the program to run in the background even after the terminal is closed, it reminds you to output to an optional logfile, it reminds you to make a crob job to allow the proxy to start after a reboot, it reminds you to open ports in the router and use -ephemeral-ports-range.
sudo ufw allow 65500:65534/udp did it.
In no time after the proxy restart I already had 8 clients which I never saw before.
@WofWca: am not behind CG-NAT and not a static public IP so after a power failure or just a brown-out or blip, the modem and router reboot and I get a new DHCP IP. The machine is on a UPS but not modem/router.
If the modem reboots i suggest restarting the snowflake process because the state will go again to unknown=restricted. At least this happens to my machines. If modem gets a new ip the users count drops to 5-10 from 80-120.
Had not thought of it so I will keep my eye out for this. The modem and router are too far from the UPS to plug into it.
I have started out small -capacity 8 and will monitor my out bound bandwidth in order to adjust. I only have 10 Mbps to give.
This project was a good marriage of a CPU bound machine (100% 24/7) to a mostly I/O bound process.
Before unrestricted I hardly ever saw 7 concurrent clients connected whereas now I hardly see less than 7. It would probably be more if (when) I increased capacity.