- network-health - lists.torproject.org

Bridge status
by Bruno Grossmann 21 Mar '22

21 Mar '22

Hello, I have installed a bridge in December 2021. It has been running seamlessly - until recently. For the last week or so, when I check the status page, it says it is down. Yet, when I check on the server, it seems to be running fine (see output below). Is it an issue with the bridge checking mechanism or is there a real issue with my bridge? In other words, what information would I be looking for to ensure my bridge is up? [root@li1228-97 ~]# systemctl status tor-master.service ● tor-master.service - Anonymizing overlay network for TCP (multi-instance master) Loaded: loaded (/usr/lib/systemd/system/tor-master.service; disabled; vendor preset: disabled) Active: active (exited) since Wed 2022-03-16 12:20:43 UTC; 22h ago Process: 19224 ExecStart=/bin/true (code=exited, status=0/SUCCESS) Main PID: 19224 (code=exited, status=0/SUCCESS) Tasks: 0 CGroup: /system.slice/tor-master.service Mar 16 12:20:43 li1228-97 systemd[1]: Stopped Anonymizing overlay network for TCP (multi-instance master). Mar 16 12:20:43 li1228-97 systemd[1]: Stopping Anonymizing overlay network for TCP (multi-instance master)... Mar 16 12:20:43 li1228-97 systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance master)... Mar 16 12:20:43 li1228-97 systemd[1]: Started Anonymizing overlay network for TCP (multi-instance master). [root@li1228-97 ~]# systemctl status -l tor ● tor.service - Anonymizing overlay network for TCP Loaded: loaded (/usr/lib/systemd/system/tor.service; enabled; vendor preset: disabled) Active: active (running) since Wed 2022-03-16 12:21:13 UTC; 22h ago Process: 19238 ExecStartPre=/usr/bin/tor --runasdaemon 0 --defaults-torrc /usr/share/tor/defaults-torrc -f /etc/tor/torrc --verify-config (code=exited, status=0/SUCCESS) Main PID: 19240 (tor) Tasks: 9 CGroup: /system.slice/tor.service ├─19240 /usr/bin/tor --runasdaemon 0 --defaults-torrc /usr/share/tor/defaults-torrc -f /etc/tor/torrc └─19242 /usr/local/bin/obfs4proxy Mar 17 06:21:43 li1228-97 Tor[19240]: Heartbeat: In the last 6 hours, I have seen 0 unique clients. Mar 17 06:41:44 li1228-97 Tor[19240]: Auto-discovered IPv6 address [2600:3c03::73f0:da93:352a:f688]:26250 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] Mar 17 07:34:47 li1228-97 Tor[19240]: No circuits are opened. Relaxed timeout for circuit 673 (a Measuring circuit timeout 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. [7 similar message(s) suppressed in last 10020 seconds] Mar 17 07:41:44 li1228-97 Tor[19240]: Auto-discovered IPv6 address [2600:3c03::73f0:da93:352a:f688]:26250 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] Mar 17 08:41:44 li1228-97 Tor[19240]: Auto-discovered IPv6 address [2600:3c03::73f0:da93:352a:f688]:26250 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] Mar 17 09:24:48 li1228-97 Tor[19240]: No circuits are opened. Relaxed timeout for circuit 718 (a Testing circuit 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. [2 similar message(s) suppressed in last 6600 seconds] Mar 17 09:41:44 li1228-97 Tor[19240]: Auto-discovered IPv6 address [2600:3c03::73f0:da93:352a:f688]:26250 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] Mar 17 09:51:50 li1228-97 Tor[19240]: Your network connection speed appears to have changed. Resetting timeout to 60000ms after 18 timeouts and 462 buildtimes. Mar 17 10:41:44 li1228-97 Tor[19240]: Auto-discovered IPv6 address [2600:3c03::73f0:da93:352a:f688]:26250 has not been found reachable. However, IPv4 address is reachable. Publishing server descriptor without IPv6 address. [2 similar message(s) suppressed in last 2400 seconds] Mar 17 10:45:46 li1228-97 Tor[19240]: No circuits are opened. Relaxed timeout for circuit 850 (a Testing circuit 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. [1 similar message(s) suppressed in last 4860 seconds]

2 1

Official country list ban access to TOR
by Ulyses uly 26 Feb '22

26 Feb '22

Hi, I'm a student of cyber intelligence master degree. Now, I am studying which countries officially censor the access to the TOR network (in their laws, penal code, ...). There is a lot of misinformation so, Do you have any official country list about it? Thanks so much :)

1 0

Tor Bridge/Relay Location
by Matthew Raposo 30 Dec '21

30 Dec '21

Hello, I was wondering if Relays and Bridges are specific to a country. If, for example, I am a bridge in the United States can I act as a Bridge for Tor users in other countries? If so, is there a range for how far a Bridge or Relay can be acting for other users? Thank you for your time. Sincerely, Jeff

2 1

(no subject)
by Rajat Sinha 04 Dec '21

04 Dec '21

Good

1 0

More details about bad-relay proposal
by Garún 19 Nov '21

19 Nov '21

Hello everyone, yesterday during the State of the Onion stream, Georg mentioned a proposal that considers the implementation of a relay trust factor in order to prevent malicious operators from getting the bandwidth they want. I wanted to ask if there are any sources I can read into for more details about this? Or if more information could be provided on the proposal? It sounds a bit like this is going into the direction of nusenu's web of trust [1]. Garún [1] https://nusenu.github.io/tor-relay-operator-ids-trust-information/

2 1

Question about authority nodes
by Daniel Mider 11 Oct '21

11 Oct '21

Dear All, First of all, I would like to say that TOR is great and you are doing a very important job globally. I would like to ask where I can find information on TOR directory nodes. Are there 9 of them? Apparently, each of them is controlled by a different organization. What are these organizations called? Regards Daniel Mider

2 1

Atlas identifying asn incorrectly.
by joe＠farnell.org.uk 27 Sep '21

27 Sep '21

Hi, the tor atlas is identifying relays hosted on AS211144 as being hosted on AS211365. Please can this be corrected?

2 1

Queries about user statistic on Tor Metrics
by Nowshin, Nafisa 22 Sep '21

22 Sep '21

Hello, I am a graduate student at Oregon State University doing research on digital privacy and security. My advisor is Dr. Glencora Borradaile. We are trying to use tor metrics data in order to understand the reason why people are connecting to tor and if it is because of some external motivation (the topic of our research) or because they are regular users. Looking at the user statistics available in tor metrics website, we had a few questions we wanted to clarify. 1. How frequently tor browsers send out update pings? Is there a fixed frequency or do they vary over time? 2. Are update pings sent every time a user opens their browser or only when new updates are pushed to the tor browser? Thank you for your time. Regards Nafisa Nowshin Graduate Assistant School of EECS, Oregon State University

3 2

merging with metrics-team@ mailing list
by Gaba 10 Sep '21

10 Sep '21

Hi people! We just moved everyone that was subscribed to metrics-team@ mailing list to this network-health@ one. Welcome everybody! This new team is maintaining all the metrics software that we run and is responsible of the state of the network. You can read more about it at http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/n… cheers, gaba -- pronouns she/her/they GPG Fingerprint EE3F DF5C AD91 643C 21BE 8370 180D B06C 59CA BD19

1 0

'margot like' feature request
by Roger Dingledine 02 Apr '21

02 Apr '21

Hi David! A feature request based on (what I understand of) your hackweek project: I often find myself in the position where I have a set of fingerprints, and I want to know if I've "got them all". So something that inputs a set of fingerprints, and outputs an ordered list of candidate "similar" relays, would be a great tool. What exactly we mean by similar, of course, will be a thing we need to iterate on. If we had a huge dataset -- with ground truth -- we could machine learning it and see how the black box gods answer. But while that thought leads to "good idea, let's collect that data set", we need something else in the mean time. Here's a start: * Component-wise similarity is computed differently for each component (version/contactinfo/nickname is a string comparison, IP address is looking for other relays on the same /x network, uptime is computing the real uptime based on the descriptor timestamp minus the descriptor uptime, etc), * But the *strength* of a match is based on how few other relays also matched. That is, we find a component match less compelling the more relays there are that match. For example, maybe the /16 address similarity is a weak match, because there are many relays on that same /16, but the /24 address similarity is a strong match because there's only one other relay closeby. * We can start out with simple comparisons, but eventually we'll want fuzzy comparisons, where e.g. we look at the Levenshtein distance for nickname ("Anonymous1, Anonymous2, Anonymous3"), or check if the two uptimes are within a threshold percentage of each other, etc. * And then the overall similarity is a function of the strength of each component-wise similarity. To start, we could just have it be a linear combination of each, with equal weighting, which means the more components have a strong match, the greater the overall similarity score. There's a lot of opportunity for improvement here, like, weighting certain components more, or non-linear weights where e.g. it's especially interesting when both bandwidthrate and bandwidthburst are strong matches. * So that's how we decide if *two* relays are similar to each other. But if I give you *ten* relays, we need a way to figure out what those relays have in common, to decide whether an eleventh relay is related to the group as a whole. The easy version here is to just do pairwise comparisons between each input relay and each consensus relay, and then sum the overall similarities into a score for each candidate. This approach should *implicitly* take into account similarity between input relays, on the theory that if A is similar to C and B is similar to C, then A is probably similar to B too. For extra credit, we could do some smarter combination than just summing them, but I don't have anything in mind yet. For comparison, check out phw's trnnr tool from the SybilHunter paper: https://github.com/NullHypothesis/trnnr/blob/master/trnnr.py which does a simplified version of the above (it only takes in one relay, it doesn't do the "strength of match is inversely proportional to how much of the population matches" part, and also it has a slick way of comparing all the components at once by just turning them all into a big unified string, which is simple but also has bizarre effects: every character in the IP address string is equally important, and the importance of each component is a function of how many characters it takes to represent it, which is...weird. :) But in general, this script is a great start to look at first. --Roger

1 0