Opened 6 months ago

Closed 6 months ago

#2442 closed enhancement (invalid)

Option to disable SSU Peer Test

Reported by: Zlatin Balevsky Owned by: zzz
Priority: minor Milestone: undecided
Component: router/transport Version: 0.9.38
Keywords: ssu Cc:
Parent Tickets: Sensitive: no

Description

While working with Arctic I discovered that his firewall configuration actually changes the source port in outgoing datagrams to a random value. This breaks the current Alice → Bob → Charlie → Alice test because Bob forwards to Charlie the port that he sees, but that is open for responses only from Bob.

As a result after running the test the router decides that it's firewalled even though the appropriate ports are forwarded correctly and inbound unsolicited SSU sessions get established just fine.

As it would be too much work to redesign the peer test to cater to this rare type of firewall, I suggest we just add an option to disable the test altogether.

Subtickets

Change History (1)

comment:1 Changed 6 months ago by Zlatin Balevsky

Resolution: invalid
Status: newclosed

After more analysis, SSU links do not get established just fine, there are many problems with them. So this ticket is not useful. Closing.

Note: See TracTickets for help on using tickets.