Currently the broker code is implemented only for App Engine; i.e. it doesn't have a main function and relies on being invoked using the App Engine APIs.
Instead, the broker should run as a standalone HTTPS server somewhere, and App Engine should only be a dumb request/response forwarder (we can steal the forwarder code from meek). That will make it possible to easily add domain fronts other than Google (#22782 (moved)), and any secret data we handle on the broker won't have to be revealed to Google.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items
0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
Linked items
0
Link issues together to show that they're related.
Learn more.
Currently the broker code is implemented only for App Engine; i.e. it doesn't have a main function and relies on being invoked using the App Engine APIs.
Instead, the broker should run as a standalone HTTPS server somewhere, and App Engine should only be a dumb request/response forwarder (we can steal the forwarder code from meek). That will make it possible to easily add domain fronts other than Google (#22782 (moved)), and any secret data we handle on the broker won't have to be revealed to Google.
Trac: Username: cmm32 Owner: N/Ato cmm32 Status: new to assigned
I think we're not going to regain access to https://snowflake-reg.appspot.com/. I think the way forward is to do #23947 (moved); i.e., move the proxy-hosting page away from keroserene.net, and then we configure the proxy on the new host to use the new broker.
I think we're not going to regain access to https://snowflake-reg.appspot.com/. I think the way forward is to do #23947 (moved); i.e., move the proxy-hosting page away from keroserene.net, and then we configure the proxy on the new host to use the new broker.
Done in comment:15:ticket:23947.
The standalone broker is now the primary broker. Let's leave proxy-go instances running for the old App Engine broker for a time.
Trac: Resolution: N/Ato fixed Status: assigned to closed
I just noticed that, due to a mistake of mine, the fallback proxy-go instances that were meant to be assigned to the standalone broker were instead assigned to the old App Engine broker. So all 6 were on the old broker, instead of 3 and 3 like desired.
I fixed it at 2018-04-18 00:06:42. I suspect it had been misconfigured since 2018-04-02 04:57:42, when I reinstated periodic restarts of the fallback proxies (comment:1:ticket:25688).