general:
  stop_time: 30 min
network:
  graph:
    type: gml
    inline: |
      graph [
        directed 0
        node [
          id 0
          host_bandwidth_down "1 Gbit"
          host_bandwidth_up "1 Gbit"
        ]
        edge [
          source 0
          target 0
          latency "50 ms"
          jitter "0 ms"
          packet_loss 0.0
        ]
      ]
hosts:
  fileserver:
    network_node_id: 0
    processes:
    - path: tgen
      environment:
        OPENBLAS_NUM_THREADS: "1"
      args: ../../../conf/tgen.server.graphml.xml
      start_time: 1
      expected_final_state: running
  fileserver-onion:
    network_node_id: 0
    processes:
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.onionserver.graphml.xml
      start_time: 1
      expected_final_state: running
    - path: tor
      args: --Address fileserver-onion --Nickname fileserveronion
            --defaults-torrc torrc-defaults -f torrc
      start_time: 900
      expected_final_state: running
  fileserver-onion-arti:
    network_node_id: 0
    processes:
    # tgen server process
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.onionserver.graphml.xml
      start_time: 1
      expected_final_state: running
      # Currently need the arti-extra binary for HS-server functionality
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - -o=onion_services.tgen_hs.proxy_ports=[["80", "127.0.0.1:8080"]]
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
  fileserver-onion-arti-auth:
    network_node_id: 0
    processes:
    # tgen server process
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.onionserver.graphml.xml
      start_time: 1
      expected_final_state: running
      # Currently need the arti-extra binary for HS-server functionality
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion-auth.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - -o=onion_services.tgen_hs.proxy_ports=[["80", "127.0.0.1:8080"]]
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 900
      expected_final_state: running
  # Like fileserver-onion-arti, except it has full vanguards enabled
  fileserver-onion-arti-full-vanguards:
    network_node_id: 0
    processes:
    # tgen server process
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.onionserver.graphml.xml
      start_time: 1
      expected_final_state: running
      # Currently need the arti-extra binary for HS-server functionality
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - -o=onion_services.tgen_hs.proxy_ports=[["80", "127.0.0.1:8080"]]
      - -o=vanguards.mode="full"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
  fileserver-onion-auth:
    network_node_id: 0
    processes:
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.onionserver.graphml.xml
      start_time: 1
      expected_final_state: running
    - path: tor
      args: --Address fileserver-onion-auth --Nickname fileserveronionauth
            --defaults-torrc torrc-defaults -f torrc
      start_time: 900
      expected_final_state: running
  4uthority:
    network_node_id: 0
    ip_addr: 100.0.0.1
    processes:
    - path: tor
      args: --Address 4uthority --Nickname 4uthority
            --defaults-torrc torrc-defaults -f torrc
      start_time: 1
      expected_final_state: running
  exit1:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address exit1 --Nickname exit1
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  exit2:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address exit2 --Nickname exit2
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  relay1:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address relay1 --Nickname relay1
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  relay2:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address relay2 --Nickname relay2
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  relay3:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address relay3 --Nickname relay3
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  relay4:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address relay4 --Nickname relay4
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  bridge:
    ip_addr: 100.0.0.2
    network_node_id: 0
    processes:
    - path: tor
      args: --Address bridge --Nickname bridge
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  bridge-obfs4:
    ip_addr: 100.0.0.3
    network_node_id: 0
    processes:
    - path: tor
      args: --Address bridge-obfs4 --Nickname bridgeobfs4
            --defaults-torrc torrc-defaults -f torrc
      start_time: 60
      expected_final_state: running
  articlient:
    network_node_id: 0
    host_options:
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      environment:
        OPENBLAS_NUM_THREADS: "1"
      args: ../../../conf/tgen.torclient.graphml.xml
      start_time: 25m
      expected_final_state: {exited: 0}
  # same as articlient, but uses arti-extra binary, which has experimental features enabled.
  articlient-extra:
    network_node_id: 0
    host_options:
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      environment:
        OPENBLAS_NUM_THREADS: "1"
      args: ../../../conf/tgen.torclient.graphml.xml
      start_time: 25m
      expected_final_state: {exited: 0}
  articlient-bridge:
    network_node_id: 0
    host_options:
      # Enable pcap capture so we can check for leaks
      pcap_enabled: true
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.bridge.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      environment:
        OPENBLAS_NUM_THREADS: "1"
      args: ../../../conf/tgen.torclient.graphml.xml
      start_time: 25m
      expected_final_state: {exited: 0}
  articlient-bridge-obfs4:
    network_node_id: 0
    host_options:
      # Enable pcap capture so we can check for leaks
      pcap_enabled: true
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.bridge.toml
      - -c=./arti.d/arti.obfs4-client.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      environment:
        OPENBLAS_NUM_THREADS: "1"
      args: ../../../conf/tgen.torclient.graphml.xml
      start_time: 25m
      expected_final_state: {exited: 0}
  articlient-onion:
    network_node_id: 0
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.toronionclient.graphml.xml
      start_time: 1500
  # arti client connecting to the arti onion service
  articlient-onion-artiserver:
    network_node_id: 0
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclient.graphml.xml
      start_time: 1500
  # arti client connecting to the arti onion service that uses full vanguards
  articlient-onion-artiserver-full-vanguards:
    network_node_id: 0
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclientfullvanguards.graphml.xml
      start_time: 1500
  # arti client connecting to the arti onion service that runs
  # in restricted discovery mode
  #
  # Like articlient-onion-artiserver-auth-2, this connects to
  # fileserver-onion-arti-auth.
  #
  # This is the client nicknamed "default", configured in the service's
  # authorized_clients directory.
  articlient-onion-artiserver-auth:
    network_node_id: 0
    processes:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclient-auth.graphml.xml
      start_time: 1500
  # arti client connecting to the arti onion service that runs
  # in restricted discovery mode
  #
  # Like articlient-onion-artiserver-auth, this connects to
  # fileserver-onion-arti-auth.
  #
  # This is the client nicknamed "alice", configured in the service's static
  # list of client keys.
  articlient-onion-artiserver-auth-2:
    network_node_id: 0
    processes:
    # Use the version of arti built with keymgr and experimental-api support:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclient-auth-2.graphml.xml
      start_time: 1500
  articlient-onion-auth:
    network_node_id: 0
    processes:
    # Use the version of arti built with keymgr and experimental-api support:
    - path: ../../target/x86_64-unknown-linux-gnu/debug/arti-extra
      args:
      - proxy
      - -c=./arti.d/arti.common.toml
      - -c=./arti.d/arti.onion.toml
      - -o=proxy.socks_listen="127.0.0.1:9000"
      - --disable-fs-permission-checks
      - -l=debug,tor_proto=trace
      environment:
        RUST_BACKTRACE: "1"
        HOME: ./home
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.toronionclient-auth.graphml.xml
      start_time: 1500
  torclient-onion-artiserver:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address tconionas --Nickname tconionas
            --defaults-torrc torrc-defaults -f torrc
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclient.graphml.xml
      start_time: 25m
  # tor client connecting to the arti onion service that uses full vanguards
  torclient-onion-artiserver-full-vanguards:
    network_node_id: 0
    processes:
    - path: tor
      args: --Address tconionas --Nickname tconionas
            --defaults-torrc torrc-defaults -f torrc
      start_time: 15m
      expected_final_state: running
    - path: tgen
      # See https://shadow.github.io/docs/guide/compatibility_notes.html#libopenblas
      environment: { OPENBLAS_NUM_THREADS: "1" }
      args: ../../../conf/tgen.artionionclientfullvanguards.graphml.xml
      start_time: 25m