I noticed there's a big increase in reported users of the websocket transport in the past few weeks, from about 5 to over 50.
https://metrics.torproject.org/userstats-bridge-transport.html?graph=usersta...
"websocket" is the transport name that flash proxy uses. I checked the bridge for flash proxy, and it doesn't seem to be used notably more often in the last weeks than before.
https://globe.torproject.org/#/bridge/9DD7D759971D03E70F0181B4E6D5F7735E7BFD...
There are other bridges out there that also support the websocket transport. I don't know who's running them. I appended a list at the end of this message. It comes from grepping for "websocket" in
https://onionoo.torproject.org/details?type=bridge&fields=nickname,hashe...
Most of them seem to be related; namely, there are a lot with these characteristics: 80 <= ORPort <= 105 platform = Tor 0.2.7.0-alpha-dev on Linux transports = ["websocket","fte","obfs3","scramblesuit"] Morlock-sounding nicknames: ashrak, bashaak, delmac, gonach... The only bridges not belonging to this set are C3L (ORPort = 8118), giygas (my bridge), and nerds (ORPort = 9052, platform = Tor 0.2.5.11 on Linux").
It's possible that the new websocket users are using one of these other bridges. It's also possible, since the bridges run more than one transport, that the users are actually using some other transport, and they are mistakenly being counted for websocket:
https://lists.torproject.org/pipermail/tor-dev/2014-September/007483.html
A lot of them have last_restarted of 2015-03-14 or 2014-03-25, which fall roughly where the user increase is on the metrics graphs. Maybe they were recently rebooted with support for the websocket transport.
David Fifield
{"nickname":"ashrak","hashed_fingerprint":"F1C465D38F18091F6FED9CAC924DA50F2813C0AE","or_addresses":["10.219.160.68:80"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["websocket","fte","obfs3","scramblesuit"]}, {"nickname":"bashaak1","hashed_fingerprint":"196FC9A50B1F3828730C11C4E1DD5B55F979F548","or_addresses":["10.152.136.2:80"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"bashaak2","hashed_fingerprint":"F76FB49B6B1CC1BB23618A20A2D6E8B1509BF7BC","or_addresses":["10.128.21.28:81"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"benna2","hashed_fingerprint":"3665A4A74A6554CA03122AFBC9C3C6C5AD2F9BC6","or_addresses":["10.35.205.157:83"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"C3L","hashed_fingerprint":"E1F69F3CE3107F740646127527F8B21BA8BCDFC4","or_addresses":["10.226.202.166:8118","[fd9f:2e19:3bcf::73:c310]:8118"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","obfs4","websocket","fte"]}, {"nickname":"delmac1","hashed_fingerprint":"16EBD0A3DAD2833FDA9323F89ED9B2EFF484D748","or_addresses":["10.223.29.80:84"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"delmac2","hashed_fingerprint":"5B300273F583602780746191ADF17AC96190CC92","or_addresses":["10.12.236.225:85"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"giygas","hashed_fingerprint":"9DD7D759971D03E70F0181B4E6D5F7735E7BFDED","or_addresses":["10.233.17.187:9001","[fd9f:2e19:3bcf::df:d557]:9001"],"platform":"Tor 0.2.5.10 on Linux","transports":["websocket","obfs3_websocket"]}, {"nickname":"gonach1","hashed_fingerprint":"F532D7DC394BAE539D530EB9EC5BA22450A7910D","or_addresses":["10.231.241.32:86"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"gonach2","hashed_fingerprint":"6C1259CE071500804AC2E67673EA57045D44004B","or_addresses":["10.7.64.152:87"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"hoktar","hashed_fingerprint":"86D33A3BA7A04A1D8C1D4C44AEC5BF1FC163815C","or_addresses":["10.230.24.16:80"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["websocket","fte","obfs3","scramblesuit"]}, {"nickname":"intar1","hashed_fingerprint":"98FC0DADB4EF313BAB18C4F8F5B29186CEC1EFEE","or_addresses":["10.142.253.194:90"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"intar2","hashed_fingerprint":"22A42B97C35A6CABCB837E308E302321DEE8860B","or_addresses":["10.227.197.14:91"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"kalma","hashed_fingerprint":"D923FB993A480E27023814CB22FA568B418C3561","or_addresses":["10.86.149.238:443"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["websocket","obfs3","scramblesuit"]}, {"nickname":"krantu","hashed_fingerprint":"121385AFAC02851932A40635235D16A9A47390BE","or_addresses":["10.58.14.110:82"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","fte","websocket"]}, {"nickname":"kreeshak","hashed_fingerprint":"94A4DCD9C31958710A8208233E2FA8A58F90DD08","or_addresses":["10.85.219.97:81"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","fte","websocket"]}, {"nickname":"krelnok","hashed_fingerprint":"D1B0B1FDE5FF1047C5636BEAB06E22F3505D0895","or_addresses":["10.101.210.202:83"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","fte","websocket"]}, {"nickname":"lantia","hashed_fingerprint":"6173C626355BA51DFE93F515F792CDC7B36652F4","or_addresses":["10.74.170.126:80"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","fte","websocket"]}, {"nickname":"linvris1","hashed_fingerprint":"2DE8ED06644EAD67A4351F73CF94ED4819604AB3","or_addresses":["10.90.170.20:92"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"linvris2","hashed_fingerprint":"FFC371256605279169C8F740378EB88C542940E1","or_addresses":["10.15.182.141:93"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"naquadah1","hashed_fingerprint":"6D83B4CAF9807CB2C4C8C6C04EDDE27496E47525","or_addresses":["10.184.185.130:94"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"naquadah2","hashed_fingerprint":"9577348174583345AFF8FB2CD5C1DAAC3042F0BB","or_addresses":["10.99.253.237:95"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"nerds","hashed_fingerprint":"EE2AFFBF783BEA2D24904240A48DEDA2D5372FC8","or_addresses":["10.104.45.191:9052"],"platform":"Tor 0.2.5.11 on Linux","transports":["websocket","fte","obfs3","scramblesuit"]}, {"nickname":"orak1","hashed_fingerprint":"2E3494ABC70A4AF8AD301569C40D620C565A235A","or_addresses":["10.88.122.255:96"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"paiboun","hashed_fingerprint":"D416D28AB1C24C215D40CEB70BE36F2779E8B4A2","or_addresses":["10.54.177.10:105"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"piratepartei","hashed_fingerprint":"319F4D05D76537AADD499D5B48B4425DDFEF66C7","or_addresses":["10.133.182.221:80"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","fte","websocket"]}, {"nickname":"shaltek2","hashed_fingerprint":"09C6AD6382A5C0AB268D0AEA25284E4AC0E5E4AC","or_addresses":["10.83.36.70:99"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"tauri1","hashed_fingerprint":"5B27B16BFF449E60C6084D1ED2A082AF8C459531","or_addresses":["10.16.110.176:102"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"tauri2","hashed_fingerprint":"B694A8E4E60E4CA6BF173D973731DA0B7D425999","or_addresses":["10.73.213.191:103"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]}, {"nickname":"teltac1","hashed_fingerprint":"3EAA792F08B6D99031BBC3BCEB2C4BA58C5FAA41","or_addresses":["10.210.205.232:104"],"platform":"Tor 0.2.7.0-alpha-dev on Linux","transports":["obfs3","scramblesuit","websocket","fte"]},
On Mon, Mar 30, 2015 at 11:01:31PM -0700, David Fifield wrote:
It's possible that the new websocket users are using one of these other bridges. It's also possible, since the bridges run more than one transport, that the users are actually using some other transport, and they are mistakenly being counted for websocket:
https://lists.torproject.org/pipermail/tor-dev/2014-September/007483.html
A lot of them have last_restarted of 2015-03-14 or 2014-03-25, which fall roughly where the user increase is on the metrics graphs. Maybe they were recently rebooted with support for the websocket transport.
I guess this is what's happening. I made a graph with websocket, fte, obfs4, and scramblesuit, and it looks like there is a correlated increase in scramblesuit at the same time as the increase in websocket. Probably some new scramblesuit bridges started being used, and some of their users are being counted for websocket.
https://metrics.torproject.org/userstats-bridge-transport.html?graph=usersta...
David Fifield