Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the unneeded Privoxy layer #7

Open
ohaddahan opened this issue Aug 30, 2018 · 6 comments
Open

Remove the unneeded Privoxy layer #7

ohaddahan opened this issue Aug 30, 2018 · 6 comments

Comments

@ohaddahan
Copy link

ohaddahan commented Aug 30, 2018

Newer Tor versions support HTTPTunnelPort , making Privoxy unneeded.
Can just pass --HTTPTunnelPort and connect HAProxy directly to Tor.

@zet4
Copy link
Owner

zet4 commented Sep 7, 2018

Worth looking into, however due to last PR by @Otetz it might cause a regression for anyone using Privoxy's ACLs.

Leaving this open for now.

@Otetz
Copy link
Contributor

Otetz commented Sep 8, 2018

I think not so many people use Privoxy ACL at now. The lower the points of failure — the higher the reliability.
But in any case, some kind of client authorization will be required on HAProxy. In order not to leave it open to the entire Internet.

@ohaddahan
Copy link
Author

@Otetz I believe Privoxy shouldn't even be in ports accessible to the outside world.
Only HAProxy should, and it support authentication.
I honestly don't see any use for Privoxy with the existence of HTTPTunnelPort.

@zet4
Copy link
Owner

zet4 commented Sep 17, 2018

Currently I am unable to make necessary changes to this project but if someone has a spare moment they can open a PR and we can continue there.

@arturhg
Copy link

arturhg commented Oct 19, 2018

Probably Privoxy should be kept for a while because of this:
https://tor.stackexchange.com/questions/16095/405-method-connection-mark-unattached-ap

Or DeleGate can be considered as a replacement:
https://superuser.com/questions/423563/convert-http-requests-to-socks5

@quite
Copy link

quite commented Mar 8, 2019

I think it's worth noting that HttpTunnelPort only supports CONNECT. So it does not function as a transparent proxy, which many or even most clients expect when talking HTTP (for HTTPS, the connect method is indeed used). Edit: ah, this what the stackexchange link above talks about.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants