<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I think that a network based to much on remotes VMs, with closed
source software running on the most deep machine level, is not
very resilient and secure.</p>
<p>So the reason why I was thinking to do so is that I wanted to run
a small exit relay on a device running only open source software,
like Olimex Lime2 does, and under my direct control.</p>
<p>The latency from my home and the VM is not so high (45-50 ms),
and I was pretty sure that with a proper configuration I didn't
risk that users exit through my home connection. But If you say
that with a so small bandwidth It can't run properly, I trust you,
so I keep a non-exit relay.</p>
Anyway thanks for your advices
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Il 22/05/19 11:05, nusenu ha scritto:<br>
</div>
<blockquote type="cite"
cite="mid:638c7f0e-efda-32ae-2caa-93953db43cee@riseup.net">
<pre class="moz-quote-pre" wrap="">
<a class="moz-txt-link-abbreviated" href="mailto:tor-relay@riseup.net">tor-relay@riseup.net</a>:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">I'm running a non exit relay on a debian machine (in the next few
months I will switch to *BSD) on a Lime2.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
I assume you are referring to a relay run at home.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">I'm running an exit relay
too on a remote VM.
I would turn my non-exit relay in an exit one, but for obvious
reasons, I don't want to run It from my shitty ISP IP. I could give
10-14 mbps from my home connection, so I think that the lime2 would
be powerful enough to run It properly.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
I would discourage such a setup for the following reasons:
- this setup includes the risk that users will exit
through your home broadband IP address (bad!) if tunnels break down
- such setups that introduce an additional hop decrease the user-experience
- most users will not be happy with an "10-14mbps" exit at a home broadband connection
- it is not clear to me why you would involve your home IP at all for your exit
if you have a VM in a datacenter
nonetheless, thanks for running relays,
nusenu
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
tor-relays mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a>
<a class="moz-txt-link-freetext" href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a>
</pre>
</blockquote>
</body>
</html>