When I press on
Restart Tor button in
tor-control-panel on a Gateway and then open Wireshark to inspect the traffic, I see strange ICMP packets to IP addresses which are not associated with Tor while bootstraping with info “Destination unreachable (Host unreachable)”! Then, I see many TCP packets to all of obsf4 bridges I listed in Tor Config (I think that’s ok). Then, after bootstrap has done and I visit sites through Whonix-Workstation, I see only two IP address of obfs4 bridges in Wireshark so it seems like Tor has chosen two best bridges to connect to as entry nodes.
I use Tor with obfs4 bridges and I didn’t do any modifications to Whonix-Gateway, only custom line of bridges were used.