<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div dir="auto">Hi,<br></div><div dir="auto"><br></div><div dir="auto">Imo mobile chips with mostly low-performance 'efficient cores' are a suboptimal fit for running Tor at scale. A couple of reasons:<br></div><div dir="auto"><br></div><div dir="auto">- Performance between the different core types (efficient vs. performance) is very different. You would need to lock Tor processes to specific cores and accept that you can only run 2 fast relays (and 8 slow ones), or have 10 of them capped at the efficient core's performance profile (because the Tor processes would get swapped around all the time).<br></div><div dir="auto">- These CPUs aren't build for sustained loads so their real world sustained clock speed is significantly lower than their turbo speed, hampering their performance (especially compared to benchmarks).<br></div><div dir="auto"><br></div><div dir="auto">That being said, especially the 2 performance cores are quite decent and should be able to push some nice amount of Tor traffic (with some help from the efficient cores). My guess is that the i7 would not saturate a 1 Gb/s link (probably 600-650 Mb/s when utilizing all cores effectively) if your relays have the guard flag. Middle only relays would push more traffic. So with some quirks/workarounds, I think you could certainly make these CPUs work (but I still wouldn't recommend them).<br></div><div dir="auto"><br></div><div dir="auto">Do you need SFP or SFP+? Both aren't a feature of the CPU (except for some embedded SoCs) and are generally easily/cheaply available. For example the Intel X520-DA2 and Mellanox ConnectX-3 are extremely affordable second hand or refurbished and both of the CPUs have enough PCI-e lanes to run them at full speed.<br></div><div dir="auto"><br></div><div dir="auto">Regarding i5 vs i7: the i7 effectively only has a higher sustained clock speed and marginally better GPU (which is irrelevant for Tor) but otherwise is pretty much identical. If the difference would be small (i.e. ~20 euro/dollar) I would go for the i7 but otherwise I wouldn't bother. Your mileage may vary of course :-).<br></div><div dir="auto"><br></div><div dir="auto">About RAM: Tor is (for the most part) single threaded so quite a few operators run one Tor process per physical core or per thread. In your case this would mean 10 or 12 Tor relays. Especially guard relays can go out of memory very easily nowadays because of all sorts of attacks, so I wouldn't recommend less than 4 GB of available RAM per relay (so 40-48 GB for Tor + X GB for OS/networking/routing/firewall/services/etc.). 90% of the time you don't need it, but when you do need it it makes sure Tor doesn't crash, your kernel doesn't panic and your server stays responsive (e.g. ssh) etc. You could also run less relays (or limit their bandwidth) and keep it at 32 GB of RAM, but then you would have a harder time to saturate the uplink.<br></div><div dir="auto"><br></div><div dir="auto">Cheers,<br></div><div dir="auto"><br></div><div dir="auto">tornth<br></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto">Jul 10, 2024, 11:30 by tor-relays@lists.torproject.org:<br></div><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><div dir="auto">Hi everyone,<br></div><div dir="auto">we are planning to get some hardware to run a physical Tor exit node, starting with a 1Gbps dedicated, unmetered uplink (10Gbps downlink). We will also route a /24 on it, so we will have large availability of addresses to run multiple instances. We have been running a few exit nodes so far, but never on our own hardware.<br></div><div dir="auto"><br></div><div dir="auto">Which is the bandwith limit per core/Tore instance? Or what can we expect to be the bottleneck?<br></div><div dir="auto"><br></div><div dir="auto">Due to some other requirements we need for some experiments (SFP ports, coreboot support, etc) we can mainly choose between these 2 CPUs:<br></div><div dir="auto"> Intel i5-1235U<br></div><div dir="auto"> Intel i7-1255U<br></div><div dir="auto"><br></div><div dir="auto">The cost between the two models is significant enough in our case to pick the i7 only if it's really useful.<br></div><div dir="auto"><br></div><div dir="auto">In both cases with 32GB of DDR5 RAM (we can max to 64 if needed, but is it?).<br></div><div dir="auto"><br></div><div dir="auto">Should this allow us to saturate the uplink?<br></div><div dir="auto"><br></div><div dir="auto">To summarize, with this bandwith, this hardware and a /24 how many Tor exit nodes should be ideal to run considering that each of them could have their own address?<br></div><div dir="auto"><br></div><div dir="auto">Thanks!<br></div><div dir="auto">_______________________________________________<br></div><div dir="auto">tor-relays mailing list<br></div><div dir="auto">tor-relays@lists.torproject.org<br></div><div dir="auto">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays<br></div></blockquote><div dir="auto"><br></div> </body>
</html>