Tor - Snowflake

Snowflake Client

In certain countries access to Tor is restricted or entirely blocked. To circumvent this censorship users may need to access it indirectly using a Snowflake client such as the Tor Browser or Orbot to obfucaste Tor traffic and mask it as a video or audio call.

Snowflake Proxy

This requires the existence of Snowflake proxies which can easily be setup by volunteers living in places with unrestricted Tor access. These proxies can be installed as standalone application for desktop or server, using Orbot on Android or iOS, trough a website with the necessary embedded code or simply via a web extension available for Firefox and Chromium based web browser.

Snowflake Architecture

A client requests a snowflake proxy to a broker which searches for one available, gets an answer, forwards it to the client which then establishes a peer-to-peer connection over WebRTC to the proxy with the request relayed through the Tor network before reaching its destination.

            > requests snowflake
+--------+        proxy (1)     +--------+
| Client |----------------------| Broker |
+--------+  forwards it (4) <   +--------+
    |                                |
    |           > gets an answer (3) |
    +-----------+ +------------------+
> establishes   | | < searches for an
  peer-to-peer  | |   available one (2)
  connection (5)| |
     +----------|-|---+           
     | [ p1 ]  [ p2 ] |
     | [ p3 ] [ p.. ] |
     |                |
     |   Snowflake    |
     |   Proxies      |
     +----------------+
              |   > request is then
	 +--------+ relayed through Tor (5)
	 | Bridge |
	 +--------+
	     |
       +-------------+
       | Destination |
       +-------------+

Sources


The text is available under the license Creative Commons Attribution-ShareAlike 4.0