<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Still under heavy attack even with the <span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class="">MaxMemInQueues and </span><font color="#454545" face="Helvetica Neue" class="">0.3.2.8-rc. I need 2 xeons to push 30 mbit as a guard/middle …</font><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">Markus</font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font><div><blockquote type="cite" class=""><div class="">On 22. Dec 2017, at 00:25, teor <<a href="mailto:teor2345@gmail.com" class="">teor2345@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><br class="">On 22 Dec 2017, at 10:08, Roger Dingledine <<a href="mailto:arma@mit.edu" class="">arma@mit.edu</a>> wrote:<br class=""><br class=""><blockquote type="cite" class=""><blockquote type="cite" class=""><blockquote type="cite" class="">(Connection refused; CONNECTREFUSED; count 18; recommendation warn;<br class="">host DAC825BBF05D678ABDEA1C3086E8D99CF0BBF112 at 185.73.220.8:443)<br class=""><br class="">So - I get loads of CONNECTREFUSED whilst coming up (presumably because<br class="">of the attack) and then come fully back online. <br class=""></blockquote></blockquote><br class=""><blockquote type="cite" class="">IMO your tor searches for guards and they are under load, gone or lost<br class="">their guard flag. Finally you found a guard :)<br class=""></blockquote><br class="">Yes, I agree. (Though if they were gone or lost their guard flag,<br class=""></blockquote><br class="">Gone, yes.<br class=""><br class="">But don't client circuits try previously selected guards, even if they don't<br class="">have the guard flag right now?<br class="">(I know we don't re-weight guards as new consensuses arrive. I don't know<br class="">if we ignore them once they lose the guard flag.)<br class=""><br class=""><blockquote type="cite" class="">you<br class="">would not have tried them and gotten a CONNECTREFUSED. So I think they<br class="">are all suffering from the "under load" case. Gosh.)<br class=""></blockquote><br class="">Yes, this is probably a lack of file descriptors, and new connections are<br class="">punished more severely than existing ones.<br class="">T<br class="">_______________________________________________<br class="">tor-relays mailing list<br class=""><a href="mailto:tor-relays@lists.torproject.org" class="">tor-relays@lists.torproject.org</a><br class="">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br class=""></div></div></blockquote></div><br class=""></div></body></html>