Skip to content

v1.1.1 — Canary Verification Resilience & Exit Node Hardening

Choose a tag to compare

View all tags
@hapheus hapheus released this 11 Oct 11:47
· 28 commits to main since this release
v1.1.1
5b9e5c9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • fix(canary): harden live image verification against exit node flapping (#8) by @hapheus in #8

Highlights & Resilience Improvements

  • Transient Network Flapping Defense: Added retry loop (curl --retry 2 --retry-all-errors) across 3 attempts for both Privoxy (HTTP) and SOCKS5 egress checks, mitigating transient exit-node TLS drops (curl exit code 35).
  • Circuit Stabilization: Introduced a 5-second sleep following Tor bootstrap confirmation to allow circuit stabilization before proxy requests.
  • Fallback Egress Verification: Queries api.ipify.org if check.torproject.org drops TLS/connectivity, while rigorously asserting IP leak prevention (!= runner IP).
  • Observability: Automatic container log dumping (docker logs torproxy-canary) on step failure.
  • Automated Alert Resolution: Automatically resolves open canary alert issues upon subsequent successful canary runs.

Full Changelog: v1.1.0...v1.1.1

Contributors

hapheus
Assets 2
Loading