[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Routing Guix services traffic trough Tor
From: |
Ludovic Courtès |
Subject: |
Re: Routing Guix services traffic trough Tor |
Date: |
Mon, 18 May 2020 00:33:44 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) |
Hi Brice,
Brice Waegeneire <address@hidden> skribis:
> Today I played a bit with Tor and Guix, trying to fetch substitutes
> trough
> the Tor network as blaze_cornbread asked on IRC[0] how to do this. I
> managed to get it working but in the end I don't think we should
> encourage
> people doing it this way, that's why I haven't submitted a patch to the
> cookbook for it. Currently the only supported way to proxy traffic for
> 'guix-daemon' is by setting a HTTP proxy[1] the drawback is that DNS
> query
> will still be in clear and wont go trough the proxy in contrast to a
> SOCKS5
> proxy where the query will happen on the other side of the proxy.
I don’t think that’s the case: when an HTTP proxy is in use, clients
make a CONNECT or GET HTTP request to the proxy, which resolves the host
name on their behalf. That’s why you can pass
‘--substitute-urls=http://bp7o7ckwlewr4slm.onion’ and it Just Works.
So I think you message could make a great section in the cookbook. :-)
Thanks,
Ludo’.