Proposal: Separate streams across circuits by destination port or destination host
Robert Hogan
robert at roberthogan.net
Sun Aug 8 11:23:06 UTC 2010
On Sunday 08 August 2010 01:10:38 Nick Mathewson wrote:
>
> ** IsolateBySOCKSUser -- If this boolean option is true, then Tor will
> look at the username field of the SOCKS protocol, and make sure that
> any two streams that were created with different SOCKS usernames will
> be sent over different circuits. The empty username will be treated
> as its own username different from all other usernames.
>
Given that the problem is how to use separate circuits per application this
sounds much closer to the real solution than separating by service port.
Maybe there are other things Tor could do with the SOCKS connection if
username information is not present:
- Do not share SOCKS4/4a/5 on the same circuit.
- On *nix use the source port to look up the connection's application name
in /proc/pid/cmdline and, if cmdline is readable, treat that as a SOCKS
username when choosing circuits.
More information about the tor-dev
mailing list