From: Caspar Schutijser <caspar@schutijser.com>
Subject: Re: Tor Browser: use Lyrebird instead of obfs4proxy
To: Douglas Silva <doug.hs@proton.me>
Cc: "ports@openbsd.org" <ports@openbsd.org>
Date: Wed, 28 Jan 2026 21:20:45 +0100

Hi,

On Mon, Jan 26, 2026 at 10:49:51AM +0000, Douglas Silva wrote:
> I see that you have already committed this patch, but I just did some testing.
> 
> Although the built-in obfs4 bridges seem to connect, I'm often getting timeouts, especially when loading onion sites.
> 
> [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=<none> RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 ("general SOCKS server failure")
> 
> This is the warning that keeps repeating endlessly on the logs. If I don't enable any bridge, the warning is gone and everything loads fast.
> 
> Some observations:
> - My PF rules allow all outgoing traffic by default.
> - I use a dual-stack IPv4/IPv6.
> - I don't get any of these warnings when I connect (with an obfs4 bridge) from the Android app.
> 
> But then I didn't test the older versions, when obfs4proxy was used; so I wouldn't know if it's got anything to do with lyrebird.

I just did some tests with obfs4proxy; it also happens then.
So it's doesn't look new. I don't immediately have a clue why this
happens, that will need some more digging.

Caspar