[tor-bugs] #18635 [Tor]: Make a design for circuit- migration in the event of DoS

[Tor Bug Tracker & Wiki]

#18635: Make a design for circuit- migration in the event of DoS
------------------------------+--------------------------------
     Reporter:  nickm         |      Owner:
         Type:  task          |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.2.9.x-final
    Component:  Tor           |    Version:
     Severity:  Normal        |   Keywords:  dos
Actual Points:                |  Parent ID:
       Points:  medium/large  |   Reviewer:
      Sponsor:  SponsorU-can  |
------------------------------+--------------------------------
 I'm not saying we should '''build''' this, but I do think we should come
 up with a design:

 Right now if you DoS a single server in a circuit you observe, you can
 tell that the circuit went down.  Wouldn't it be cool if instead circuits
 could migrate and withstand crashes in some subset of their nodes?

 This is especially important for introduction circuits and rendezvous
 circuits, I bet.

 This would mean major design changes, and is probably best done with a few
 researchers and a bunch of whiteboards.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18635>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online