Politeia / Proposals connection does not use cfg.TorProxy

[dajohi]

[JoeGruffins]

This requires some upstream changes so can't do it without those. You can disable politeia now though. Currently, the piclient.Opts struct doesn't accept a custom HTTP client or proxy, so there's no straightforward way to inject one without modifying the upstream politeia library or forking/wrapping the client

[satstack]

afaict basically all network connections traverse clearnet except for the connection to the dex server.

When I attempted to enforce tor, I also noticed the btc and dcr SPV nodes don't use cfg.TorProxy either (btc/dcr SPV nodes don't connect to any peers), nor does the mempool explorer, coinpaprika price checker, etc.

[ERR] CORE[dcr]: external fee rate API failure: error performing request: Get "https://explorer.dcrdata.org/insight/api/utils/estimatefee?nbBlocks=2": context deadline exceeded

To enforce tor I'm using systemd. I tried to workaround this by setting http proxy vars as well, but neither SOCKS or http proxies (like privoxy) fix the underlying modules not using tor.

systemctl cat --runtime bisonw.service | grep -E '^Env|^IPAddress' | grep -v PATH
...
Environment="ALL_PROXY=socks5h://127.0.0.1:9050"
Environment="HTTPS_PROXY=socks5h://127.0.0.1:9050"
Environment="HTTP_PROXY=socks5h://127.0.0.1:9050"
Environment="NO_PROXY=127.0.0.1,localhost,::1"
IPAddressAllow=127.0.0.1/32
IPAddressAllow=::1/128
IPAddressAllow=192.168.0.44/32
IPAddressAllow=192.168.1.35/32
IPAddressDeny=any

You can simulate somethign similar using systemd-run if you want to reproduce this behavior.

systemd-run --pty --wait \
  --setenv=ALL_PROXY=socks5h://127.0.0.1:9050 \
  --setenv=HTTPS_PROXY=socks5h://127.0.0.1:9050 \
  --setenv=HTTP_PROXY=socks5h://127.0.0.1:9050 \
  --setenv=NO_PROXY=127.0.0.1,localhost,::1 \
  -p IPAddressDeny=any \
  -p IPAddressAllow=127.0.0.1/32 \
  -p IPAddressAllow=::1/128 \
  -p IPAddressAllow=192.168.0.44/32 \
  -p IPAddressAllow=192.168.1.35/32 \
  -- \
  bisonw --torproxy=127.0.0.1:9050