<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div dir="auto">Hi Tor operators,<br></div><div dir="auto"><br></div><div dir="auto">Some of us took/will take advantage of the increase in allowed Tor relays per IPv4 address[1] to reduce costs for running Tor relays. This change will result in more relays sharing the same source IP address than before, which means other relays using rate limits on their ORPorts might need to make sure they do not<br></div><div dir="auto">unintentionally block relay to relay connectivity.<br></div><div dir="auto"><br></div><div dir="auto">Many relay operators deploy TCP SYN rate limiting packet filters theses days due to the ongoing DDoS issues. With the increase in Tor relays per IPv4 address, there might be more (new) connection coming from the same source IP.<br></div><div dir="auto"><br></div><div dir="auto">If you have strict TCP SYN rate limits per source IP, please ensure that this change does not result in blacklisting relay to relay traffic. You could for example whitelist relay IP addresses or have less strict rate limits for them.<br></div><div dir="auto"><br></div><div dir="auto">Thanks for reading,<br></div><div dir="auto"><br></div><div dir="auto"><a href="https://applied-privacy.net" rel="noopener noreferrer" target="_blank">https://applied-privacy.net</a><br></div><div dir="auto"><a href="https://nothingtohide.nl" rel="noopener noreferrer" target="_blank">https://nothingtohide.nl</a><br></div><div dir="auto"><br></div><div dir="auto">[1] <a href="https://gitlab.torproject.org/tpo/core/tor/-/issues/40744" rel="noopener noreferrer" target="_blank">https://gitlab.torproject.org/tpo/core/tor/-/issues/40744</a><br></div> </body>
</html>