After receiving reports of Snowflake proxies being blocked by DTLS fingerprint in Russia[0], we updated the standalone proxy to enable a new DTLS randomization and mimicry feature[1] by default.
Proxy operators that are using the standalone version of the proxy will need to update or set the following command-line option:
-covertdtls-config randomizemimic
Browser-based proxies such as the browser badge or webextension were not blocked and do not require an update.
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
Is there any chance to get the standalone proxy build added to the
deb.torproject.org repo? The Debian version is quite outdated, and even
Debian Testing doesn't have anything newer than 2.10.1.
Regards,
forest
···
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
Don't "by default" and "please add flag" contradict each other?
If it makes sense to enable it by default, then perhaps there’s no need
for an extra flag.
I also get the snowflake binary from deb.torproject.org. If it isn't
updated there, my binary will unfortunately remain outdated Not
everyone wants to use Docker.
···
On Thu, 16 Apr 2026 16:19:20 -0400 Cecylia Bocovich via tor-relays <tor-relays@lists.torproject.org> wrote:
Hello,
After receiving reports of Snowflake proxies being blocked by DTLS
fingerprint in Russia[0], we updated the standalone proxy to enable a
new DTLS randomization and mimicry feature[1] by default.
Proxy operators that are using the standalone version of the proxy will
need to update or set the following command-line option:
-covertdtls-config randomizemimic
Browser-based proxies such as the browser badge or webextension were not
blocked and do not require an update.
The Ansible role for Snowflake has been updated to version v2.13.1.
En 16/04/26 14:19, Cecylia Bocovich via tor-relays escribió:
···
Hello,
After receiving reports of Snowflake proxies being blocked by DTLS fingerprint in Russia[0], we updated the standalone proxy to enable a new DTLS randomization and mimicry feature[1] by default.
Proxy operators that are using the standalone version of the proxy will need to update or set the following command-line option:
-covertdtls-config randomizemimic
Browser-based proxies such as the browser badge or webextension were not blocked and do not require an update.
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
I installed a standalone Snowflake proxy and it seems to default to running as root. Are there any concerns? Is running as root required to run properly?
Thank you!
···
On Friday, April 17th, 2026 at 09:59, Marek Küthe via tor-relays <tor-relays@lists.torproject.org> wrote:
Don't "by default" and "please add flag" contradict each other?
If it makes sense to enable it by default, then perhaps there’s no need
for an extra flag.
I also get the snowflake binary from deb.torproject.org. If it isn't
updated there, my binary will unfortunately remain outdated Not
everyone wants to use Docker.
On Thu, 16 Apr 2026 16:19:20 -0400 > Cecylia Bocovich via tor-relays <tor-relays@lists.torproject.org> wrote:
> Hello,
>
> After receiving reports of Snowflake proxies being blocked by DTLS
> fingerprint in Russia[0], we updated the standalone proxy to enable a
> new DTLS randomization and mimicry feature[1] by default.
>
> Proxy operators that are using the standalone version of the proxy will
> need to update or set the following command-line option:
>
> -covertdtls-config randomizemimic
>
> Browser-based proxies such as the browser badge or webextension were not
> blocked and do not require an update.
>
> Thank you for running a Snowflake proxy!
>
> [0] Snowflake-targeted DTLS filtering in Russia, starting 2026-03-30 · Issue #603 · net4people/bbs · GitHub
> [1] https://www.petsymposium.org/foci/2025/foci-2025-0006.pdf
> _______________________________________________
> tor-relays mailing list -- tor-relays@lists.torproject.org
> To unsubscribe send an email to tor-relays-leave@lists.torproject.org
--
Marek Küthe
m.k@mk16.de
er/ihm he/him
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
Quoting forest-relay-contact--- via tor-relays (2026-04-17 02:39:08)
Is there any chance to get the standalone proxy build added to the
deb.torproject.org repo? The Debian version is quite outdated, and even
Debian Testing doesn't have anything newer than 2.10.1.
We are working on it, but it will take some time to get there:
···
--
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
Quoting Josh Lawson via tor-relays (2026-04-17 23:54:35)
I installed a standalone Snowflake proxy and it seems to default to running as root. Are there any concerns? Is running as root required to run properly?
Is not needed to be run as root and AFAIK 2.10.1-1 debian package did fix this
problem:
···
--
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.
_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org
Not