mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-08-01 19:16:07 -04:00
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
39b5148808
BBRv1 significantly improves throughput in some cases but it also significantly reduces it in others. We've run into too many network conditions it handles quite poorly. There's also a bad interaction between BBR and synproxy where it will cripple the initial throughput for connections established via synproxy. This means a basic SYN flood attack could cripple initial TCP throughput for most connections. Android doesn't enable ECN for outbound connections yet and we don't want to deviate from that so it mainly only gets activated for macOS and iOS clients. Linux kernel approach to ECN hasn't been modernized and there are fierce debates about how it should work. It can cause issues and it seems best to avoid it until Android enables it. |
||
|---|---|---|
| .github | ||
| boot/loader | ||
| certbot | ||
| etc | ||
| guide | ||
| home/.config | ||
| packages | ||
| .gitignore | ||
| certbot-ocsp-fetcher | ||
| connection-stats | ||
| count | ||
| deploy-initial | ||
| disconnect | ||
| dns-stats | ||
| fetch-info | ||
| for | ||
| hosts.sh | ||
| LICENSE | ||
| nginx-create-session-ticket-keys | ||
| nginx-rotate-session-ticket-keys | ||
| nginx-stats | ||
| ovh-mitigation | ||
| ovh-mitigation.py | ||
| README.md | ||
| reboot | ||
| requirements.in | ||
| requirements.txt | ||
| setup | ||
Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.