mirrors/arti.git/crates/tor-guardmgr/src/guard.rs, branch arti-v0.0.2

Fix a clippy issue on nightly

2021-11-24T23:13:58Z

Fix a few typos.

2021-11-24T23:12:44Z

Also fix some commonwealth spellings that had slipped in.

Fix typo in tor-guardmgr comment related to suspicious guards

2021-11-23T04:48:30Z

Remove all remaining dbg! instances.

2021-11-04T14:54:47Z

tor-guardmgr: Add tests for a few functions.

2021-11-02T16:17:11Z

Add Futureproof wrapper type, use for GuardDisabled enum

2021-10-27T14:10:44Z

The Futureproof type lets you serialize and deserialize types whose representations might change (most useful for enums that might grow additional variants). It uses #[serde(untagged)] to accomplish this. This gets used in order to make the `disabled` field of `Guard` more robust against future guard disablement reasons being added. A test was also added to verify correct behaviour of the new type.

Add #[serde(flatten)] HashMap fields to serializable objects

2021-10-27T12:31:52Z

As per arti#175, we'd like to be able to handle newer Arti versions storing additional state in the persisted state files, without dropping this data on the floor when we write out changes to these files. Use the #[serde(flatten)] mechanism to achieve this, by adding catch-all HashMap fields to all structs that are at risk of this happening to them.

Implement a "lightweight" form of pathbias detection.

2021-10-26T16:03:23Z

We now track, for every guard: the total number of successful circuits we've built through it, along with the total number of "indeterminate" circuits. Recall that a circuit's status is "indeterminate" if it has failed for a reason that _might_ be the guard's fault, or might not be the guard's fault. For example, if extending to the second hop of the circuit fails, we have no way to know whether the guard deliberately refused to connect there, or whether the second hop is just offline. But we don't want to forgive all indeterminate circuit failures: if we did, then a malicious guard could simply reject any second hops that it didn't like, thereby filtering the client into a chosen set of circuits. As a stopgap solution, this patch now makes guards become permanently disabled if the fraction of their circuit failures becomes too high. See also general-purpose path bias selection (arti#65), and Mike's idea for changing the guard reachability definition (torspec#67). This patch doesn't do either of those. Closes #185.

guardmgr: Don't use guards that are marked as unlisted.

2021-10-25T14:27:13Z

Closes #202.

Implement the guard side of shared state directories.

2021-10-21T17:31:38Z