January 2019 - tor-commits - lists.torproject.org

[tor/release-0.3.5] Merge branch 'maint-0.3.3' into maint-0.3.4
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit d7259b64d41a29781b3150badccec093a7a0ef30 Merge: fe3331b84 fee2eaf2d Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:58 2019 -0500 Merge branch 'maint-0.3.3' into maint-0.3.4

1 0

[tor/release-0.3.5] Merge branch 'bug21394_029_redux' into maint-0.2.9
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 73de7b4bcb9b85a02f0bb7e75620dc6bffbdc75e Merge: 3b5188576 06484eb5e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:54 2019 -0500 Merge branch 'bug21394_029_redux' into maint-0.2.9 changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-)

1 0

[tor/release-0.3.5] Merge branch 'maint-0.3.5' into release-0.3.5
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 9cdb7a33c83aac71e864cfcdf59f140c55da7bb7 Merge: 54049cb6f 74bda3079 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:58 2019 -0500 Merge branch 'maint-0.3.5' into release-0.3.5

1 0

[tor/release-0.3.5] Merge branch 'maint-0.3.4' into maint-0.3.5
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 74bda3079c97490e0cdae7368ef1bc6f1242bd47 Merge: 16deb1f5f d7259b64d Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:58 2019 -0500 Merge branch 'maint-0.3.4' into maint-0.3.5

1 0

[tor/maint-0.2.9] Merge branch 'bug21394_029_redux' into maint-0.2.9
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 73de7b4bcb9b85a02f0bb7e75620dc6bffbdc75e Merge: 3b5188576 06484eb5e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:54 2019 -0500 Merge branch 'bug21394_029_redux' into maint-0.2.9 changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-)

1 0

[tor/maint-0.2.9] Bug 21394 touchup: Increase DNS attempts to 3
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 06484eb5e19081f478c0c5569e2de6fcfb8d3531 Author: Dhalgren <dhalgren.tor(a)gmail.com> Date: Sun Apr 1 05:01:51 2018 +0000 Bug 21394 touchup: Increase DNS attempts to 3 Also don't give up on a resolver as quickly if multiple are configured. --- changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-) diff --git a/changes/bug21394.2 b/changes/bug21394.2 new file mode 100644 index 000000000..b580d2a78 --- /dev/null +++ b/changes/bug21394.2 @@ -0,0 +1,7 @@ + o Minor bugfix (Exit node DNS retries): + - Re-attempt timed-out DNS queries 3 times before failure, since our + timeout is 5 seconds for them, but clients wait 10-15. Also allow + slightly more timeouts per resolver before giving up on it in the + case where an exit has multiple resolvers configured. Fixes bug 21394; + bugfix on 0.3.1.9. + diff --git a/src/or/dns.c b/src/or/dns.c index c1e3c3256..33628373d 100644 --- a/src/or/dns.c +++ b/src/or/dns.c @@ -1428,27 +1428,30 @@ configure_nameservers(int force) // If we only have one nameserver, it does not make sense to back off // from it for a timeout. Unfortunately, the value for max-timeouts is // currently clamped by libevent to 255, but it does not hurt to set - // it higher in case libevent gets a patch for this. - // Reducing attempts in the case of just one name server too, because - // it is very likely to be a local one where a network connectivity - // issue should not cause an attempt to fail. + // it higher in case libevent gets a patch for this. Higher-than- + // default maximum of 3 with multiple nameservers to avoid spuriously + // marking one down on bursts of timeouts resulting from scans/attacks + // against non-responding authoritative DNS servers. if (evdns_base_count_nameservers(the_evdns_base) == 1) { SET("max-timeouts:", "1000000"); - SET("attempts:", "1"); } else { - SET("max-timeouts:", "3"); + SET("max-timeouts:", "10"); } // Elongate the queue of maximum inflight dns requests, so if a bunch - // time out at the resolver (happens commonly with unbound) we won't + // remain pending at the resolver (happens commonly with Unbound) we won't // stall every other DNS request. This potentially means some wasted // CPU as there's a walk over a linear queue involved, but this is a // much better tradeoff compared to just failing DNS requests because // of a full queue. SET("max-inflight:", "8192"); - // Time out after 5 seconds if no reply. + // Two retries at 5 and 10 seconds for bind9/named which relies on + // clients to handle retries. Second retry for retried circuits with + // extended 15 second timeout. Superfluous with local-system Unbound + // instance--has its own elaborate retry scheme. SET("timeout:", "5"); + SET("attempts:","3"); if (options->ServerDNSRandomizeCase) SET("randomize-case:", "1");

1 0

[tor/maint-0.3.4] Merge branch 'bug21394_029_redux' into maint-0.2.9
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 73de7b4bcb9b85a02f0bb7e75620dc6bffbdc75e Merge: 3b5188576 06484eb5e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:54 2019 -0500 Merge branch 'bug21394_029_redux' into maint-0.2.9 changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-)

1 0

[tor/maint-0.3.3] Merge branch 'bug21394_029_redux' into maint-0.2.9
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 73de7b4bcb9b85a02f0bb7e75620dc6bffbdc75e Merge: 3b5188576 06484eb5e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:54 2019 -0500 Merge branch 'bug21394_029_redux' into maint-0.2.9 changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-)

1 0

[tor/maint-0.3.3] Merge branch 'maint-0.2.9' into maint-0.3.3
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit fee2eaf2d4b401c0e6d879224bf42992a780085a Merge: bf8bb9c52 73de7b4bc Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:58 2019 -0500 Merge branch 'maint-0.2.9' into maint-0.3.3

1 0

[tor/maint-0.3.5] Merge branch 'bug21394_029_redux' into maint-0.2.9
by nickm＠torproject.org 05 Jan '19

05 Jan '19

commit 73de7b4bcb9b85a02f0bb7e75620dc6bffbdc75e Merge: 3b5188576 06484eb5e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jan 4 15:04:54 2019 -0500 Merge branch 'bug21394_029_redux' into maint-0.2.9 changes/bug21394.2 | 7 +++++++ src/or/dns.c | 19 +++++++++++-------- 2 files changed, 18 insertions(+), 8 deletions(-)

1 0