<html><head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<style id="css_styles" type="text/css">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: right;'] { list-style-position: inside;}
body { font-family: Segoe UI; font-size: 12pt; }</style></head>
<body><div>Just set your exit relay DNS to 8.8.8.8 and 1.1.1.1 I mean dns traffic isn't bulk traffic, let google and CloudFlare do the "work"</div><div><br /></div><div>Thanks,</div>
<div><br /></div><div id="signature_old"><div style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma"><span id="3377410eba0948d5a580008778038703">
<div>Matt Westfall</div>
<div>President & CIO</div>
<div>ECAN Solutions, Inc.</div><div>Everything Computers and Networks</div>
<div>804.592.1672</div></span></div></div><div><br /></div>
<div>------ Original Message ------</div>
<div>From: "Tim Niemeyer" <<a href="mailto:tim@tn-x.org">tim@tn-x.org</a>></div>
<div>To: <a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a></div>
<div>Sent: 6/29/2019 2:59:34 AM</div>
<div>Subject: Re: [tor-relays] exit operators: overall DNS failure rate above 5% - please check your DNS resolver</div><div><br /></div>
<div id="x9d870286e0b5431" class="plain"><blockquote cite="1561791574.2862.22.camel@tn-x.org" type="cite" class="cite2">
<tt style="word-wrap:break-word"><div class="plain_line">Hi nusenu</div>
<div class="plain_line"> </div>
<div class="plain_line">After reading your Mail, I realized that not the DNS records for the</div>
<div class="plain_line">exit IPs are failing. Instead this list shows problems to resolve dns</div>
<div class="plain_line">on the exit.</div>
<div class="plain_line"> </div>
<div class="plain_line">I looked at our exit and all looks fine. Resolver works very fast and</div>
<div class="plain_line">nothing imporint within the logfile. Only some dudes use 0.100.2.2 as</div>
<div class="plain_line">remote address, but let's be fair, that can't work. ;)</div>
<div class="plain_line"> </div>
<div class="plain_line">There are 4 exits on one machine with one dns server. Only 3 of them</div>
<div class="plain_line">are shown in the list:</div>
<div class="plain_line"><a href="https://metrics.torproject.org/rs.html#search/as:AS205100">https://metrics.torproject.org/rs.html#search/as:AS205100</a></div>
<div class="plain_line"> </div>
<div class="plain_line">Maybe it is a load problem, because this machine has 100% cpu load? :(</div>
<div class="plain_line"> </div>
<div class="plain_line">A dedicated machine for dns may be good, but currently we have only</div>
<div class="plain_line">this one machine. Another way could be to recude exit capacity, but I</div>
<div class="plain_line">don't know if it's a good idea to throttle it?</div>
<div class="plain_line"> </div>
<div class="plain_line">Btw, in the mean time we got more upstream transit and now we are</div>
<div class="plain_line">looking to get better / second hardware. But money is a limiting</div>
<div class="plain_line">factor. :(</div>
<div class="plain_line"> </div>
<div class="plain_line">Kind regards</div>
<div class="plain_line">Tim</div>
<div class="plain_line"> </div>
<div class="plain_line">Am Freitag, den 28.06.2019, 20:16 +0000 schrieb nusenu:</div>
<blockquote type="cite" class="cite">
<div class="plain_line"> Dear Exit relay operators,</div>
<div class="plain_line"> </div>
<div class="plain_line"> first of all thanks for running exit relays!</div>
<div class="plain_line"> </div>
<div class="plain_line"> One of the crucial service that you provide in addition to</div>
<div class="plain_line"> forwarding </div>
<div class="plain_line"> TCP streams is DNS resolution for tor clients. </div>
<div class="plain_line"> Exit relays which fail to resolve hostnames</div>
<div class="plain_line"> are barely useful for tor clients.</div>
<div class="plain_line"> </div>
<div class="plain_line"> We noticed that lately the failure rates did increase significantly</div>
<div class="plain_line"> due to some major exit operators apparently having DNS issues and we</div>
<div class="plain_line"> would like</div>
<div class="plain_line"> to urge you to visit Arthur's "Tor Exit DNS Timeouts" </div>
<div class="plain_line"> page that shows you the DNS error rate for exit relays:</div>
<div class="plain_line"> </div>
<div class="plain_line"> <a href="https://arthuredelstein.net/exits/">https://arthuredelstein.net/exits/</a></div>
<div class="plain_line"> (the page is usually updated once a day)</div>
<div class="plain_line"> </div>
<div class="plain_line"> Please consider checking your DNS if your exit relay consistently</div>
<div class="plain_line"> shows a non zero </div>
<div class="plain_line"> timeout rate - and make sure you run an up to date tor version.</div>
<div class="plain_line"> </div>
<div class="plain_line"> If you are an exit operator but have no (or no working) ContactInfo,</div>
<div class="plain_line"> please consider</div>
<div class="plain_line"> updating that field in your torrc so we can reach you if something is</div>
<div class="plain_line"> wrong</div>
<div class="plain_line"> with your relay.</div>
<div class="plain_line"> </div>
<div class="plain_line"> kind regards</div>
<div class="plain_line"> nusenu</div>
<div class="plain_line"> _______________________________________________</div>
<div class="plain_line"> tor-relays mailing list</div>
<div class="plain_line"> <a href="mailto:tor-relays@lists.torproject.org">tor-relays@lists.torproject.org</a></div>
<div class="plain_line"> <a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays</a></div>
</blockquote>
</tt></blockquote></div>
</body></html>