<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>
<div>I got a couple of question to ask on the torrc file and I hope one of you will direct me.</div>
<div> </div>
<div>Ok here we go. I got it working as a relay which i can see in the terminal. I just started so it is still testing bandwidth. but this is not my questions</div>
<div> </div>
<div>1. on line 18 of mine it is about Socks. I was reading in the man pages on this. It was #Socksport 9050. Per the man pages I took out the comment and placed as "+" per the page. So now it is <strong>+SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.</strong></div>
<div> </div>
<div> </div>
<div>Ok, lines 37-44</div>
<div> </div>
<div><strong>## Send all messages of level 'notice' or higher to /var/log/tor/notices.log<br/>
#Log notice file /var/log/tor/notices.log<br/>
## Send every possible message to /var/log/tor/debug.log<br/>
#Log debug file /var/log/tor/debug.log<br/>
## Use the system log instead of Tor's logfiles<br/>
#Log notice syslog<br/>
## To send all messages to stderr:<br/>
#Log debug stderr</strong></div>
<div> </div>
<div>at one time I had the 2nd one uncommented and I did get a log file in the /var/tor/log file. I'm not running the tor-browser pkg I am just running tor thru the terminal to be straight.</div>
<div>If I would run the say tor-browser pkg from synaptic and I do have installed, but I just cant tell for sure if the relay is working that way. This way in terminal I can but also can not use the browser.</div>
<div>Should I have the 2nd one uncommented?</div>
<div> </div>
<div>Lines 55-61 I do have the ControlPort uncommented and it does show it connects to all ports. Took me a bit to get the partitions active thru the modem/router. Never had to do that before. I just used the standard ports that it had on it till the other day.</div>
<div>line 57 like i said I have uncommented and also line 61 for the hash control.</div>
<div> </div>
<div><strong>ControlPort 9051<br/>
## If you enable the controlport, be sure to enable one of these<br/>
## authentication methods, to prevent attackers from accessing it.<br/>
HashedControlPassword</strong></div>
<div> </div>
<div>OrPort is uncommented and set to the port line 84.</div>
<div> </div>
<div>on line 109 it is speaking of the bandwidth I have it uncommented</div>
<div> </div>
<div><strong>RelayBandwidthRate 100 KBytes #Throttle traffic to 100KB/s (800Kbps)<br/>
#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)</strong></div>
<div> </div>
<div>This one here blows my mind. Lines 103-122 what throws me in the terminal it shows its in hibernation</div>
<div> </div>
<div>Here this from the torrc file not to throw anyone off.</div>
<div> </div>
<div><strong>## Define these to limit how much relayed traffic you will allow. Your<br/>
## own traffic is still unthrottled. Note that RelayBandwidthRate must<br/>
## be at least 20 kilobytes per second.<br/>
## Note that units for these config options are bytes (per second), not<br/>
## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,<br/>
## 2^20, etc.<br/>
RelayBandwidthRate 100 KBytes #Throttle traffic to 100KB/s (800Kbps)<br/>
#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)</strong></div>
<div>
<div><strong>## Use these to restrict the maximum traffic per day, week, or month.<br/>
## Note that this threshold applies separately to sent and received bytes,<br/>
## not to their sum: setting "40 GB" may allow up to 80 GB total before<br/>
## hibernating.<br/>
##<br/>
## Set a maximum of 40 gigabytes each way per period.</strong><br/>
line 118<strong> AccountingMax 20 GBytes<br/>
## Each period starts daily at midnight (AccountingMax is per day)</strong><br/>
line 120<strong> AccountingStart day 00:00<br/>
## Each period starts on the 3rd of the month at 15:00 (AccountingMax<br/>
## is per month)<br/>
#AccountingStart month 3 15:00</strong></div>
<div> </div>
<div>line 118 You see i have mine set at 20G. but it was at 40GB "is that a good setting?</div>
<div> </div>
<div>line 120 what do you do with that one? </div>
<div> </div>
<div>DirPort i do not have uncommented for a caution from the man page.</div>
<div> </div>
<div>lines 186-190 </div>
<div> </div>
<div>#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more<br/>
#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy<br/>
#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy<br/>
#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy<br/>
line 190 <strong>ExitPolicy reject *:25 #no exits allowed</strong></div>
</div>
<div> </div>
<div><strong>The man pages suggested that number</strong></div>
<div> </div>
<div>This is from my Terminal</div>
<div><strong>If you do want to run an exit Relay, please set the ExitRelay option to 1 to disable this warning, and for forward compatibility.</strong></div>
<div> </div>
<div><strong>I am a little foggy on that one. Can someone please set me straight on my questions?</strong></div>
<div><strong>tks</strong></div>
<div><strong>-db-</strong></div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Sent:</b> Saturday, September 03, 2016 at 12:07 PM<br/>
<b>From:</b> tor-relays-request@lists.torproject.org<br/>
<b>To:</b> tor-relays@lists.torproject.org<br/>
<b>Subject:</b> tor-relays Digest, Vol 68, Issue 10</div>
<div name="quoted-content">Send tor-relays mailing list submissions to<br/>
tor-relays@lists.torproject.org<br/>
<br/>
To subscribe or unsubscribe via the World Wide Web, visit<br/>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br/>
or, via email, send a message with subject or body 'help' to<br/>
tor-relays-request@lists.torproject.org<br/>
<br/>
You can reach the person managing the list at<br/>
tor-relays-owner@lists.torproject.org<br/>
<br/>
When replying, please edit your Subject line so it is more specific<br/>
than "Re: Contents of tor-relays digest..."<br/>
<br/>
<br/>
Today's Topics:<br/>
<br/>
1. Re: Why can't I see more traffic? (is my banana too weak?) (Aeris)<br/>
2. Re: Why can't I see more traffic? (is my banana too weak?)<br/>
(Roman Mamedov)<br/>
3. Re: Why can't I see more traffic? (is my banana too weak?)<br/>
(Logforme)<br/>
4. Re: Why can't I see more traffic? (is my banana too weak?) (Aeris)<br/>
<br/>
<br/>
----------------------------------------------------------------------<br/>
<br/>
Message: 1<br/>
Date: Sat, 03 Sep 2016 17:05:38 +0200<br/>
From: Aeris <aeris+tor@imirhil.fr><br/>
To: Farid Joubbi <joubbi@kth.se><br/>
Cc: tor-relays@lists.torproject.org<br/>
Subject: Re: [tor-relays] Why can't I see more traffic? (is my banana<br/>
too weak?)<br/>
Message-ID: <3248493.tyuSCxODC6@home><br/>
Content-Type: text/plain; charset="utf-8"<br/>
<br/>
> Could it be that it is due to the quite slow hardware, even though I know<br/>
> that it is able to push more traffic?<br/>
<br/>
I notice too your relay got the guard flag very recently. So your relay is<br/>
currently probably not at full capacity and rather at a low one (relay usage<br/>
drops at guard flag assignment).<br/>
You have to wait 60 days from your guard flag to reach this point.<br/>
<br/>
See <a href="https://blog.torproject.org/blog/lifecycle-of-a-new-relay" target="_blank">https://blog.torproject.org/blog/lifecycle-of-a-new-relay</a>, you’re<br/>
currently at the beginning of the 3rd phase.<br/>
<br/>
<3,<br/>
--<br/>
Aeris<br/>
Individual crypto-terrorist group self-radicalized on the digital Internet<br/>
<a href="https://imirhil.fr/" target="_blank">https://imirhil.fr/</a><br/>
<br/>
Protect your privacy, encrypt your communications<br/>
GPG : EFB74277 ECE4E222<br/>
OTR : 5769616D 2D3DAC72<br/>
<a href="https://café-vie-privée.fr/" target="_blank">https://café-vie-privée.fr/</a><br/>
-------------- next part --------------<br/>
A non-text attachment was scrubbed...<br/>
Name: signature.asc<br/>
Type: application/pgp-signature<br/>
Size: 801 bytes<br/>
Desc: This is a digitally signed message part.<br/>
URL: <<a href="http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/b1ce48da/attachment-0001.sig" target="_blank">http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/b1ce48da/attachment-0001.sig</a>><br/>
<br/>
------------------------------<br/>
<br/>
Message: 2<br/>
Date: Sat, 3 Sep 2016 20:14:08 +0500<br/>
From: Roman Mamedov <rm@romanrm.net><br/>
To: Aeris <aeris+tor@imirhil.fr><br/>
Cc: tor-relays@lists.torproject.org, Farid Joubbi <joubbi@kth.se><br/>
Subject: Re: [tor-relays] Why can't I see more traffic? (is my banana<br/>
too weak?)<br/>
Message-ID: <20160903201408.178d30dc@natsu><br/>
Content-Type: text/plain; charset="utf-8"<br/>
<br/>
On Sat, 03 Sep 2016 16:53:25 +0200<br/>
Aeris <aeris+tor@imirhil.fr> wrote:<br/>
<br/>
> > Could it be that it is due to the quite slow hardware, even though I know<br/>
> > that it is able to push more traffic?<br/>
><br/>
> Yep, surely.<br/>
><br/>
> You currently push 3Mbps of traffic, which is correct for this kind of hardware.<br/>
> All "cheap" hardware (raspi, banana, olimex, pine…) suffer of the fact they<br/>
> don’t have crypto hardware acceleration and do software encryption. And so is<br/>
> very slow (10-100× factor) even compared to low end amd64 CPU with AES-NI<br/>
> extension.<br/>
<br/>
According to 'openssl speed aes-128-cbc' the Allwinner A20 CPU in Banana Pro is<br/>
capable of about 25 MBytes/sec in AES performance. While that won't translate<br/>
1:1 into Tor performance, as Farid noted in his case the CPU isn't being a<br/>
bottleneck, with only 10-20% CPU load observed.<br/>
<br/>
@Farid,<br/>
<br/>
> According to top the CPU hovers around 10-20% most of the time.<br/>
<br/>
I wonder is it 20% across both cores, which could be 40% of one core (since<br/>
Tor is not multithreaded enough), and at least somewhat closer to not being<br/>
practically idle. Can you launch 'top' and press '1' there to check?<br/>
<br/>
Also seems unclear why it didn't get the guard flag for so long, does your<br/>
public IP address change from time to time? Or do you turn the relay off and<br/>
on for whatever reason.<br/>
<br/>
--<br/>
With respect,<br/>
Roman<br/>
-------------- next part --------------<br/>
A non-text attachment was scrubbed...<br/>
Name: not available<br/>
Type: application/pgp-signature<br/>
Size: 181 bytes<br/>
Desc: OpenPGP digital signature<br/>
URL: <<a href="http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/3472ab60/attachment-0001.sig" target="_blank">http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/3472ab60/attachment-0001.sig</a>><br/>
<br/>
------------------------------<br/>
<br/>
Message: 3<br/>
Date: Sat, 03 Sep 2016 15:37:54 +0000<br/>
From: Logforme <m7527@abc.se><br/>
To: tor-relays@lists.torproject.org<br/>
Subject: Re: [tor-relays] Why can't I see more traffic? (is my banana<br/>
too weak?)<br/>
Message-ID: <em4b0fc087-63e2-4672-be99-28f2687390a1@mats-win7><br/>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br/>
<br/>
Looking at Atlas your relay advertises 2.45 MB/s which is quite low for<br/>
a 100Mbit connection: 2.45 MByte x 8 = 19.6 MbitWhat value do you have<br/>
in your torrc? For a 100mbit connection it should be at least:<br/>
BandwidthRate 12 MB<br/>
<br/>
<br/>
------ Originalmeddelande ------<br/>
Från: "Roman Mamedov" <rm@romanrm.net><br/>
Till: "Aeris" <aeris+tor@imirhil.fr><br/>
Kopia: tor-relays@lists.torproject.org; "Farid Joubbi" <joubbi@kth.se><br/>
Skickat: 2016-09-03 17:14:08<br/>
Ämne: Re: [tor-relays] Why can't I see more traffic? (is my banana too<br/>
weak?)<br/>
<br/>
>On Sat, 03 Sep 2016 16:53:25 +0200<br/>
>Aeris <aeris+tor@imirhil.fr> wrote:<br/>
><br/>
>> > Could it be that it is due to the quite slow hardware, even though<br/>
>>I know<br/>
>> > that it is able to push more traffic?<br/>
>><br/>
>> Yep, surely.<br/>
>><br/>
>> You currently push 3Mbps of traffic, which is correct for this kind<br/>
>>of hardware.<br/>
>> All "cheap" hardware (raspi, banana, olimex, pine…) suffer of the<br/>
>>fact they<br/>
>> don’t have crypto hardware acceleration and do software encryption.<br/>
>>And so is<br/>
>> very slow (10-100× factor) even compared to low end amd64 CPU with<br/>
>>AES-NI<br/>
>> extension.<br/>
><br/>
>According to 'openssl speed aes-128-cbc' the Allwinner A20 CPU in<br/>
>Banana Pro is<br/>
>capable of about 25 MBytes/sec in AES performance. While that won't<br/>
>translate<br/>
>1:1 into Tor performance, as Farid noted in his case the CPU isn't<br/>
>being a<br/>
>bottleneck, with only 10-20% CPU load observed.<br/>
><br/>
>@Farid,<br/>
><br/>
>> According to top the CPU hovers around 10-20% most of the time.<br/>
><br/>
>I wonder is it 20% across both cores, which could be 40% of one core<br/>
>(since<br/>
>Tor is not multithreaded enough), and at least somewhat closer to not<br/>
>being<br/>
>practically idle. Can you launch 'top' and press '1' there to check?<br/>
><br/>
>Also seems unclear why it didn't get the guard flag for so long, does<br/>
>your<br/>
>public IP address change from time to time? Or do you turn the relay<br/>
>off and<br/>
>on for whatever reason.<br/>
><br/>
>--<br/>
>With respect,<br/>
>Roman<br/>
-------------- next part --------------<br/>
An HTML attachment was scrubbed...<br/>
URL: <<a href="http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/4b9daf12/attachment-0001.html" target="_blank">http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/4b9daf12/attachment-0001.html</a>><br/>
<br/>
------------------------------<br/>
<br/>
Message: 4<br/>
Date: Sat, 03 Sep 2016 18:06:59 +0200<br/>
From: Aeris <aeris+tor@imirhil.fr><br/>
To: Roman Mamedov <rm@romanrm.net><br/>
Cc: tor-relays@lists.torproject.org, Farid Joubbi <joubbi@kth.se><br/>
Subject: Re: [tor-relays] Why can't I see more traffic? (is my banana<br/>
too weak?)<br/>
Message-ID: <4817647.aCTGf0bmfv@home><br/>
Content-Type: text/plain; charset="utf-8"<br/>
<br/>
> According to 'openssl speed aes-128-cbc' the Allwinner A20 CPU in Banana Pro<br/>
> is capable of about 25 MBytes/sec in AES performance. While that won't<br/>
> translate 1:1 into Tor performance, as Farid noted in his case the CPU<br/>
> isn't being a bottleneck, with only 10-20% CPU load observed.<br/>
<br/>
I don’t understand very well this fact, but CPU can be the bottleneck even if<br/>
load or CPU usage not at full capacity.<br/>
<br/>
One of my Tor guard relay have the same CPU behaviour (see screenshot<br/>
enclosed).<br/>
2 instances at 50-60% CPU usage (as reported by htop), load around 0.70-0.80<br/>
(4 cores), RAM at 20% (400MB/2GB) but bandwidth not saturated (20Mbps only on<br/>
a 200Mbps line).<br/>
Perhaps because of the multiple changes of context (AES crypto, Tor software<br/>
logic, network IO…) and so a lot of wait/IRQ (as visible on the screen) and<br/>
not a fully used CPU.<br/>
<br/>
> Also seems unclear why it didn't get the guard flag for so long, does your<br/>
> public IP address change from time to time? Or do you turn the relay off and<br/>
> on for whatever reason.<br/>
<br/>
Perhaps a low bandwidth ?<br/>
Babylonian seems to be on the lower part of guard relay (2146/2313), possible<br/>
it hadn’t enough bandwith before end of august to get guard flags ?<br/>
Only the 25% fastest relays can get the guard flag. Today it’s around 2.5 MBps<br/>
advertised / 1MBps measured. Babylonian is just at the limit (2.45MBps<br/>
advertised, 600kBps measured).<br/>
<br/>
<3,<br/>
--<br/>
Aeris<br/>
Individual crypto-terrorist group self-radicalized on the digital Internet<br/>
<a href="https://imirhil.fr/" target="_blank">https://imirhil.fr/</a><br/>
<br/>
Protect your privacy, encrypt your communications<br/>
GPG : EFB74277 ECE4E222<br/>
OTR : 5769616D 2D3DAC72<br/>
<a href="https://café-vie-privée.fr/" target="_blank">https://café-vie-privée.fr/</a><br/>
-------------- next part --------------<br/>
A non-text attachment was scrubbed...<br/>
Name: screen.png<br/>
Type: image/png<br/>
Size: 27289 bytes<br/>
Desc: not available<br/>
URL: <<a href="http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/68dda35b/attachment.png" target="_blank">http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/68dda35b/attachment.png</a>><br/>
-------------- next part --------------<br/>
A non-text attachment was scrubbed...<br/>
Name: signature.asc<br/>
Type: application/pgp-signature<br/>
Size: 801 bytes<br/>
Desc: This is a digitally signed message part.<br/>
URL: <<a href="http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/68dda35b/attachment.sig" target="_blank">http://lists.torproject.org/pipermail/tor-relays/attachments/20160903/68dda35b/attachment.sig</a>><br/>
<br/>
------------------------------<br/>
<br/>
Subject: Digest Footer<br/>
<br/>
_______________________________________________<br/>
tor-relays mailing list<br/>
tor-relays@lists.torproject.org<br/>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a><br/>
<br/>
<br/>
------------------------------<br/>
<br/>
End of tor-relays Digest, Vol 68, Issue 10<br/>
******************************************</div>
</div>
</div>
</div></div></body></html>