April 2019 - tor-commits - lists.torproject.org

[community/master] Merge remote-tracking branch 'nusenu/relay-guide'
by hiro＠torproject.org 27 Apr '19

27 Apr '19

commit e498cf9559e2f121d95e84952d8e9b02d7b09dc2 Merge: 0b39fe6 f9a99af Author: hiro <hiro(a)torproject.org> Date: Sat Apr 27 21:40:27 2019 +0200 Merge remote-tracking branch 'nusenu/relay-guide' .../relays-requirements/contents.lr | 82 ++- .../relay-operations/technical-setup/contents.lr | 564 +++++++++++++++++++++ .../relay-operations/types-of-relays/contents.lr | 77 +++ templates/relay-operations.html | 23 - 4 files changed, 722 insertions(+), 24 deletions(-)

1 0

[community/master] add initial relay guide content (incomplete)
by hiro＠torproject.org 27 Apr '19

27 Apr '19

commit f9a99af58d4ece35e490ac58e1a71f3a72c28d17 Author: nusenu <nusenu-github(a)riseup.net> Date: Sat Apr 27 18:07:10 2019 +0000 add initial relay guide content (incomplete) --- .../relays-requirements/contents.lr | 82 ++- .../relay-operations/technical-setup/contents.lr | 564 +++++++++++++++++++++ .../relay-operations/types-of-relays/contents.lr | 77 +++ templates/relay-operations.html | 23 - 4 files changed, 722 insertions(+), 24 deletions(-) diff --git a/content/relay-operations/relays-requirements/contents.lr b/content/relay-operations/relays-requirements/contents.lr index 4e672f6..a4349d1 100644 --- a/content/relay-operations/relays-requirements/contents.lr +++ b/content/relay-operations/relays-requirements/contents.lr @@ -6,7 +6,7 @@ color: primary --- _template: layout.html --- -title: Relays requirements +title: Relay requirements --- subtitle: Requirements for Tor relays depend on the type of relay and the bandwidth they provide. Learn more about specific relay requirements. --- @@ -15,3 +15,83 @@ key: 2 html: relay-operations.html --- body: + +Requirements for Tor relays depend on the type of relay and the bandwidth they +provide. + +# Bandwidth and Connections + +A non-exit relay should be able to handle at least 7000 concurrent +connections. This can overwhelm consumer-level routers. If you run the Tor +relay from a server (virtual or dedicated) in a data center you will be fine. +If you run it behind a consumer-level router at home you will have to try and +see if your home router can handle it or if it starts failing. Fast exit +relays (>=100 Mbit/s) usually have to handle a lot more concurrent connections +(>100k). + +It is recommended that a relay have at least 16 Mbit/s (Mbps) upload bandwidth +and 16 Mbit/s (Mbps) download bandwidth available for Tor. More is better. The +minimum requirements for a relay are 10 Mbit/s (Mbps). If you have less than 10 +Mbit/s but at least 1 Mbit/s we recommend you run a [bridge with obfs4 +support](https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/obfs4proxy). +If you do not know your bandwidth you can use http://beta.speedtest.net to +measure it. + +# Monthly Outbound Traffic + +It is required that a Tor relay be allowed to use a minimum of 100 GByte of +outbound traffic (and the same amount of incoming traffic) per month. Note: That +is only about 1 day worth of traffic on a 10 Mbit/s (Mbps) connection. More (>2 +TB/month) is better and recommended. **Ideally a relay runs on an unmetered plan** +or includes 20 TB/month or more. If you have a metered plan you might want to +configure tor to only use a given amount of [bandwidth or monthly traffic](FIXME). + +# Public IPv4 Address + +Every relay needs a public IPv4 address - either directly on the host +(preferred) or via NAT and port forwarding. + +The IPv4 address is not required to be static but static IP addresses are +preferred. Your IPv4 address should remain unchanged for at least 3 hours (if it +regularly changes more often than that, it does not make much sense to run a +relay or bridge there since it takes time to distribute the new list of relay +IPs to clients - which happens only once every hour). + +Additional IPv6 connectivity is great and recommended/encouraged but not a +requirement. There should be no problem at all with this requirement (all +commercially available servers come with at least one IPv4 address). + +Note: You can only run two Tor relays per public IPv4 address. If you want to +run more than two relays you will need more IPv4 addresses. + +# Memory Requirements + +* A <40 Mbit/s non-exit relay should have at least 512 MB of RAM available. +* A non-exit relay faster than 40 Mbit/s should have at least 1 GB of RAM. +* On an exit relay we recommend at least 1.5 GB of RAM per tor instance. + +# Disk Storage + +Tor does not need much disk storage. A typical Tor relay needs less than 200 MB +for Tor related data (in addition to the operating system itself). + +# CPU + +* Any modern CPU should be fine. +* It is recommended to use CPUs with AESNI support (that will improve performance +and allow for up to about ~400-450 Mbps in each direction on a single tor +instance on modern CPUs). If the file /proc/cpuinfo contains the word aes your +CPU has support for AES-NI. + +# Uptime + +Tor has no hard uptime requirement but if your relay is not running for more +than 2 hours a day its usefulness is limited. Ideally the relay runs on a server +which runs 24/7. Reboots and tor daemon restarts are fine. + +# Tor Version + +For security reasons, Tor relays should not downgrade their tor version from a +supported to an unsupported version of tor. Some unsupported versions are +insecure. Relays that attempt to downgrade to an insecure version will be +rejected from the network automatically. diff --git a/content/relay-operations/technical-setup/contents.lr b/content/relay-operations/technical-setup/contents.lr index 5016702..d7af9b1 100644 --- a/content/relay-operations/technical-setup/contents.lr +++ b/content/relay-operations/technical-setup/contents.lr @@ -15,3 +15,567 @@ key: 3 html: relay-operations.html --- body: + +# Considerations when choosing a hosting provider + +If you have access to a high speed internet connection (>=100 Mbit/s in both +directions) and a physical piece of computer hardware, this is the best way to +run a relay. Having full control over the hardware and connection gives you a +more controllable and (if done correctly) secure environment. You can host your +own physical hardware at home (do NOT run a Tor exit relay from your home) or in +a data center. Sometimes this is referred to as installing the relay on "bare +metal". + +If you do not own physical hardware, you could run a relay on a rented dedicated +server or virtual private server (VPS). This can cost anywhere between +$3.00/month and thousands per month, depending on your provider, hardware +configuration, and bandwidth usage. Many VPS providers will not allow you to run +exit relays. You must follow the VPS provider's terms of service, or risk having +your account disabled. For more information on hosting providers and their +policies on allowing Tor relays, please see this list maintained by the Tor +community: [GoodBadISPs](FIXME). + +## Questions to consider when choosing a hoster + +* How much monthly traffic is included? (Is bandwidth "unmetered"?) +* Does the hoster provide IPv6 connectivity? (it is recommended, but not required) +* What virtualization / hypervisor (if any) does the provider use? (anything but OpenVZ should be fine) +* Does the hoster start to throttle bandwidth after a certain amount of traffic? +* How well connected is the autonomous system of the hoster? To answer this +question you can use the AS rank of the autonomous systems if you want to +compare: http://as-rank.caida.org/ (a lower value is better) + +## If you plan to run Exit Relays + +* Does the hoster allow Tor exit relays? (explicitly ask them before starting an +exit relay there) +* Does the hoster allow custom WHOIS records for your IP addresses? This helps +reduce the amount of abuse sent to the hoster instead of you. +* Does the hoster allow you to set a custom DNS reverse entry? (DNS PTR record) +This are probably things you will need to ask the hoster in a Pre-Sales ticket + +# AS/location diversity + +When selecting your hosting provider, consider network diversity on an +autonomous system (AS) and country level. A more diverse network is more +resilient to attacks and outages. Sometimes it is not clear which AS you are +buying from in case of resellers. To be sure it is best to ask the hoster about +the AS number before ordering a server. + +It is best to avoid hosters where many Tor relays are already hosted, but it is +still better to add one there than to run no relay at all. **Try to avoid** the +following hoster: + +* OVH SAS (AS16276) +* Online S.a.s. (AS12876) +* Hetzner Online GmbH (AS24940) +* DigitalOcean, LLC (AS14061) + +To find out which hoster and countries are already used by many other operators +(that should be avoided) you can use Relay Search: + +* [Autonomous System Level +Overview](https://metrics.torproject.org/rs.html#aggregate/as) +* [Country Level Overview](https://metrics.torproject.org/rs.html#aggregate/cc) + +# Choosing an Operating System + +We recommend you use the operating system you are most familiar with. Please +keep in mind that since most relays run on Debian and we want to avoid a +monoculture, BSD and other non-Linux based relays are greatly needed. + +The following table shows the current OS distribution on the Tor network to give +you an idea of how much more non-Linux relays we should have: + +* https://nusenu.github.io/OrNetStats/#os-distribution-relays + +# OS Level Configuration + +OS configuration is outside the scope of this guide but the following points are +crucial for a Tor relay, so we want to mention them here nonetheless. + +## Time Synchronization (NTP) + +Correct time settings are essential for Tor relays. It is recommended that you +use the network time protocol (NTP) for time synchronization and ensure your +timezone is set correctly. + +## Automatic Software Updates + +One of the most imported things to keeps your relay secure is to install +security updates timely and ideally automatically so you can not forget about +it. We collected the steps to enable automatic software updates for different +operating systems: + +* [RPM-based distributions](FIXME) (RHEL, CentOS, Fedora, openSUSE) +* [Debian/Ubuntu](FIXME) +* [FreeBSD/HardenedBSD](FIXME) + +# Tor Relay Setup: Installation and Configuration + +This section covers the installation and configuration of the program required +to run a Tor relay for various operating systems. These steps are intended for +the latest stable version of the given OS, on Ubuntu for the latest LTS release. + +Note: For some operating systems, there are alpha version packages available +(tor versions with new features not deemed to be stable yet). These are only +recommended for people eager to test and report bugs in bleeding edge +releases/features. If you are looking to run a relay with minimal effort we +recommend you stick to stable releases. + +In this guide we describe how to setup a new non-exit relay. By reading further +you can easily switch to become an exit relay. + +**Questions you should clarify before configuring Tor:** + +* Do you want to run a Tor exit or non-exit (guard/middle) relay? +* If you want to run an exit relay: Which ports do you want to allow in your +exit policy? (more ports usually means potentially more abuse complains) +* What external TCP port do you want to use for incoming Tor connections? +("ORPort" configuration, we recommend port 443 if that is not used by another +daemon on your server already. ORPort 443 is recommended because it is often one +of the few open ports on public WIFI networks. Port 9001 is another commonly used ORPort.) +* What email address will you use in the ContactInfo field of your relay(s)? +Note: This information will be made public. +* How much bandwidth/monthly traffic do you want to allow for Tor traffic? +* Does the server have an IPv6 address? + +The installation commands are shown in code blocks and must be executed with root privileges. + +## Make sure relay ports can be reached + +If you are using a firewall, open a hole in your firewall so incoming +connections can reach the ports you will use for your relay (ORPort, plus +DirPort if you enabled it). Also, make sure you allow all outgoing connections +too, so your relay can reach the other Tor relays, clients and destinations. You +can find the specific ORPort TCP port number in the torrc configuration samples +bellow (in the OS specific sections). + +## Configuration Management + +Tor does not scale well on multi-core machines. If you run a Tor relay on a +server with a fast Internet uplink (>200 Mbit/s) you might want to consider +running multiple Tor instances on a single server with multiple cores. Note: You +can only run two tor instances per public IPv4 address. + +If you plan to run more than a single relay, or you want to run a high capacity +relay (multiple Tor instances per server) or want to use strong security +features like [Offline Master +Keys](https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/OfflineKeys) +without performing additional steps manually, you may want to use a configuration +management for better maintainability. + +There are multiple configuration management solutions for Unix based operating +systems (Ansible, Puppet, Salt, ...). + +The following Ansible Role has specifically been build for Tor relay operators +and supports multiple operating systems: + +http://github.com/nusenu/ansible-relayor + +## Platform specific Instructions + +Please choose your platform: + +* Debian/Ubuntu +* CentOS/RHEL +* Fedora +* FreeBSD +* openSUSE + +## Verify that your relay works + +If your logfile (syslog) contains the following entry after starting your tor +daemon your relay should be up and running as expected: + +``` +Self-testing indicates your ORPort is reachable from the outside. Excellent. +Publishing server descriptor. +``` + +About 3 hours after you started your relay it should appear on +[Relay Search](https://metrics.torproject.org/rs.html). You can search for your +relay using your nickname or IP address. + +# Getting Help + +If you run into problems while setting up your relay you can ask your questions +on the public tor-relays mailing list: + +* https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays + +This is a great resource for asking (and answering) questions, and generally +getting to know other relay operators. Make sure to check out the archives! + +# Limiting bandwidth usage (and traffic) + +Tor will not limit its bandwidth usage by default, but supports multiple ways to +restrict the used bandwidth and the amount of traffic. This can be handy if you +want to ensure that your Tor relay does not exceed a certain amount of bandwidth +or total traffic per day/week/month. The following torrc configuration options +can be used to restrict bandwidth and traffic: + +* AccountingMax +* AccountingRule +* AccountingStart +* BandwidthRate +* BandwidthBurst +* RelayBandwidthRate + +Having a fast relay for some time of the month is preferred over a slow relay +for the entire month. + +Also see the bandwidth entry in the FAQ: https://www.torproject.org/docs/faq.html.en#BandwidthShaping + +# IPv6 + +We encourage everyone to enable IPv6 on their relays. This is especially +valuable on exit and guard relays. + +Before enabling your tor daemon to use IPv6 in addition to IPv4 you should do +some basic IPv6 connectivity tests. + +he following command line will ping the IPv6 addresses of Tor directory +authorities from your server: + +``` +ping6 -c2 2001:858:2:2:aabb:0:563b:1526 && ping6 -c2 2620:13:4000:6000::1000:118 && ping6 -c2 2001:67c:289c::9 && ping6 -c2 2001:678:558:1000::244 && ping6 -c2 2607:8500:154::3 && ping6 -c2 2001:638:a000:4140::ffff:189 && echo OK. +``` + +At the end of the output you should see "OK." if that is not the case do not +enable IPv6 in your torrc configuration file before IPv6 is indeed working. If +you enable IPv6 without working IPv6 connectivity your entire relay will not be +used, regardless if IPv4 is working. + +If it worked fine, make your Tor relay reachable via IPv6 by adding an +additional ORPort line to your configuration (example for ORPort 9001): + +``` +ORPort [IPv6-address]:9001 +``` + +The location of that line in the configuration file does not matter you can +simply add it next to the first ORPort lins in your torrc file. + +Note: You have to explicitly specify your IPv6 address in square brackets, you +can not tell tor to bind to any IPv6 (like you do for IPv4). If you have a +global IPv6 address you should be able to find it in the output of the following +command: + +``` +ip addr|grep inet6|grep global +``` + +If you are an exit relay with IPv6 connectivity, tell your tor daemon to allow +exiting via IPv6 so clients can reach IPv6 destinations: + +``` +IPv6Exit 1 +``` + +Note: Tor requires IPv4 connectivity, you can not run a Tor relay on IPv6-only. + +# Important if you run more than one Tor instance + +To avoid putting Tor clients at risk when operating multiple relays you must set +a proper [MyFamily](https://2019.www.torproject.org/docs/tor-manual.html.en#MyFamily) +value and have a valid [ContactInfo](https://2019.www.torproject.org/docs/tor-manual.html.en#Contac… +in your torrc configuration. The MyFamily setting is simply telling Tor clients what Tor +relays are controlled by a single entity/operator/organization, so they don't +use them in multiple position in a single circuit. + +If you run two relays and they have fingerprints AAAAAAAAAA and BBBBBBBB, you +would add the following configuration to set MyFamily: + +``` +MyFamily AAAAAAAAAA,BBBBBBBB +``` + +to both relays. To find your relays fingerprint you can look into the log files +when tor starts up or find the file named "fingerprint" in your tor +DataDirectory. + +Instead of doing so manually for big operators we recommend to automate the +MyFamily setting via a configuration management solution. Manually managing +MyFamily for big relaygroups is error prone and can put Tor clients at risk. + +# Exit Relay Configuration + +It is recommended that you setup exit relays on servers dedicated to this +purpose. It is not recommended to install Tor exit relays on servers that you +need for other services as well. Do not mix your own traffic with your exit +relay traffic. + +## Reverse DNS and WHOIS record + +Before switching your relay to become an exit relay, ensure that you have set a +clear DNS reverse (PTR) record to make it clear for everyone that this is a tor +exit relay. Something like "tor-exit" it its name is a good start. + +If your provider offers it, make sure your WHOIS record contains clear +indications that this is a Tor exit relay. + +## Exit Notice HTML page + +To make it even more obvious that this is a Tor exit relay you should serve a +Tor exit notice HTML page. Tor can do that for you if your DirPort is on TCP +port 80, you can make use of tor's DirPortFrontPage feature to display a +HTML file on that port. This file will be shown to anyone directing his browser +to your Tor exit relay IP address. + +``` +DirPort 80 +DirPortFrontPage /path/to/html/file +``` + +We offer a sample Tor exit notice HTML file, but you might want to adjust it to +your needs: +https://gitweb.torproject.org/tor.git/plain/contrib/operator-tools/tor-exit-notice.html + +Here are some more tips for running a reliable exit relay: +https://blog.torproject.org/tips-running-exit-node + +## Exit Policy + +Defining the [exit +policy](https://www.torproject.org/docs/tor-manual.html.en#ExitPolicy) +is one of the most important parts of an exit relay configuration. The exit +policy defines which destination ports you are willing to forward. This has an +impact on the amount of abuse emails you will get (less ports means less abuse +emails, but an exit relay allowing only few ports is also less useful). If you +want to be a useful exit relay you must **at least allow destination ports 80 +and 443**. + +As a new exit relay - especially if you are new to your hoster - it is good to +start with a reduced exit policy (to reduce the amount of abuse emails) and +further open it up as you become more experienced. The reduced exit policy can +be found on the +[ReducedExitPolicy](https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy) +wiki page. + +To become an exit relay change ExitRelay from 0 to 1 in your torrc configuration +file and restart the tor daemon. + +``` +ExitRelay 1 +``` + +## DNS on Exit Relays + +Unlike other types of relays, exit relays also do DNS resolution for Tor +clients. DNS resolution on exit relays is crucial for Tor clients, it should be +reliable and fast by using caching. + +* DNS resolution can have a significant impact on the performance and reliability your exit relay provides. Poor DNS performance will result in less traffic going through your exit relay. +* Don't use any of the big DNS resolvers as your primary or fallback DNS resolver to avoid centralization (Google, OpenDNS, Quad9, Cloudflare, 4.2.2.1-6) +* We recommend running a local caching and DNSSEC-validating resolver without using any forwarders (specific instructions follow bellow for each operating systems) +* if you want to add a second DNS resolver as a fallback to your /etc/resolv.conf configuration, try to choose a resolver within your autonomous system and make sure it is not your first entry in that file (the first entry should be your local resolver) +* if a local resolver like unbound is not an option for you try to use a resolver that your provider runs in the same autonomous system (to find out if an IP address is in the same AS as your relay, you can look it up, using for example https://bgp.he.net) +* try to avoid adding too many resolvers to your /etc/resolv.conf file to limit exposure on an AS-level (try to not use more than two entries) + +There are multiple options for DNS server software, unbound has become a popular +one but **feel free to use any other you are comfortable with**. When choosing your +DNS resolver software try to ensure it supports DNSSEC validation and QNAME +minimisation (RFC7816). In every case the software should be installed +using the OS package manager to ensure it is updated with the rest of the +system. + +By using your own DNS resolver you are less vulnerable to DNS-based censorship +that your upstream resolver might impose. + +Here follow specific instructions on how to install and configure unbound on +your exit - a DNSSEC-validating and caching resolver. unbound has many +configuration and tuning nobs but we try to keep these instructions as simple +and short as possible and the basic setup will do just fine for most operators. + +After switching to unbound verify it works as expected by resolving a valid +hostname, if it does not work, you can restore the old resolv.conf file. + +### Debian/Ubuntu + +The following 3 commands install unbound, backup your DNS configuration and tell +the system to use the local unbound: + +``` +apt install unbound +cp /etc/resolv.conf /etc/resolv.conf.backup +echo nameserver 127.0.0.1 > /etc/resolv.conf +``` + +To avoid that the configuration gets changed (for example by the DHCP client): + +``` +chattr +i /etc/resolv.conf +``` + +The Debian configuration ships with QNAME minimisation (RFC7816) enabled +by default so you don't need to enable it explicitly. The unbound resolver you +just installed does also DNSSEC validation. + +### CentOS/RHEL + +Install the unbound package: + +``` +yum install unbound +``` + +in /etc/unbound/unbound.conf replace the line + +``` +# qname-minimisation: no +``` + +with: + +``` +qname-minimisation: yes +``` + +enable and start unbound: + +``` +systemctl enable unbound +systemctl start unbound +``` + +Tell the system to use the local unbound server: + +``` +cp /etc/resolv.conf /etc/resolv.conf.backup +echo nameserver 127.0.0.1 > /etc/resolv.conf +``` + +To avoid that the configuration gets changed (for example by the DHCP client): + +``` +chattr +i /etc/resolv.conf +``` + +### FreeBSD + +FreeBSD ships unbound in the base system but the one in ports is usually +following upstream more closely so we install the unbound package: + +``` +pkg install unbound +``` + +Replace the content in /usr/local/etc/unbound/unbound.conf with the following lines: + +``` +server: + verbosity: 1 + qname-minimisation: yes +``` + +enable and start the unbound service: + +``` +sysrc unbound_enable=YES +service unbound start +``` + +Tell the system to use the local unbound server: + +``` +cp /etc/resolv.conf /etc/resolv.conf.backup +echo nameserver 127.0.0.1 > /etc/resolv.conf +``` + +To avoid that the configuration gets changed (for example by the DHCP client): + +``` +chflags schg /etc/resolv.conf +``` + +# Tor relay lifecycle + +It takes some time for relay traffic to ramp up, this is especially true for +guard relays but to a lesser extend also for exit relays. To understand this +process, read about the lifecycle of a new relay: +https://blog.torproject.org/lifecycle-new-relay + +# Maintaining a relay + +## Backup Tor Identity Keys + +After your initial installation and start of the tor daemon it is a good idea to +make a backup of your relay's long term identity keys. They are located in the +"keys" subfolder of your DataDirectory (simply make a copy of the entire folder +and store it in a secure location). Since relays have a ramp-up time it makes +sense to backup the identity key to be able to restore your relay's reputation +after a disk failure - otherwise you would have to go through the ramp-up phase +again. + +Default locations of the keys folder: + +* Debian/Ubuntu: `/var/lib/tor/keys` +* FreeBSD: `/var/db/tor/keys` + +## Subscribe to the tor-announce mailing list + +This is a very low traffic mailing list and you will get information about new +stable tor releases and important security update information. + +* https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-announce + +## Setting up outage notifications + +Once you setup your relay it will likely run without much work from your side. +If something goes wrong it is good to get notified automatically. We recommend +you use one of the free services that allow you to check your relay's ORPorts +for reachability and send you an email should they become unreachable for what +ever reason. + +UptimeRobot is one of these services that allow you to monitor TCP listeners on +arbitrary ports. This service can check your configured ports once every 5 +minutes and send you an email should your tor process die or become unreachable. +This checks only for the listener but does not speak the Tor protocol. + +* https://uptimerobot.com/ + +A good way to monitor a relay for its health state is to have a look at its +bandwidth graphs. + +## System Health Monitoring + +To ensure your relay is healthy and not overwhelmed it makes sense to have some +basic system monitoring in place to keep an eye on the following metrics: + +* Bandwidth +* Established TCP Connections +* Memory +* Swap +* CPU + +There are many tools for monitoring this kind of data, munin is one of them and +is relatively easy to setup. + +Note: **Do not make your private monitoring data graphs public since this could +help attackers with deanonymizing Tor users.** + +Some practical advice: + +* If you want to publish traffic statistics, you should aggregate all your relays' traffic over at least a week, then round that to the nearest 10 TiB (terabytes). +* Reporting individual relays is worse than reporting totals for groups of relays. In future, tor will securely aggregate bandwidth statistics, so any individual relay bandwidth reporting will be less secure than tor's statistics. +* Smaller periods are worse. +* Numbers are worse than graphs. +* Real-time data is worse than historical data. +* Data in categories (IP version, in/out, etc.) is worse than total data. + +## Tools + + This section listsm a few tools that you might find handy as a Tor relay operator. + +Nyx: [Nyx](https://nyx.torproject.org/) is a Tor Project tool (formerly arm) +that allows you to see real time data of your relay. + +vnstat: vnstat is a command-line tool that shows the amount of data going +through your network connection. You can also use it to generate PNG pictures +showing traffic graphs. + +vnstat documentation and demo output: + +* https://humdi.net/vnstat/ +* https://humdi.net/vnstat/cgidemo/ diff --git a/content/relay-operations/types-of-relays/contents.lr b/content/relay-operations/types-of-relays/contents.lr index ba96bf0..f78a338 100644 --- a/content/relay-operations/types-of-relays/contents.lr +++ b/content/relay-operations/types-of-relays/contents.lr @@ -15,3 +15,80 @@ key: 1 html: relay-operations.html --- body: + +All nodes are important, but they have different technical requirements and +legal implications. Understanding the different kinds of nodes is the first step +to learning which one is right for you. + +# Guard and middle relay + +(also known as non-exit relays) + +A guard relay is the first relay in the chain of 3 relays building a Tor circuit. A +middle relay is neither a guard nor an exit, but acts as the second hop between +the two. To become a guard, a relay has to be stable and fast (at least +2MByte/s) otherwise it will remain a middle relay. + +Guard and middle relays usually do not receive abuse complaints. All relays will +be listed in the public list of Tor relays, so may be blocked by certain +services that don't understand how Tor works or deliberately want to censor Tor +users. If you are running a relay from home and have one static IP, you may want +to consider running a bridge instead so that your non-Tor traffic doesn't get +blocked as though it's coming from Tor. If you have a dynamic IP address or +multiple static IPs, this isn't as much of an issue. + +A non-exit Tor relay requires minimal maintenance efforts and bandwidth usage +can be highly customized in the tor configuration (will be covered in more +detail later in this guide). The so called "exit policy" of the relay decides if +it is a relay allowing clients to exit or not. A non-exit relay does not allow +exiting in its exit policy. + +# Exit relay + +The exit relay is the final relay in a Tor circuit, the one that sends traffic +out its destination. The services Tor clients are connecting to (website, chat +service, email provider, etc) will see the IP address of the exit relay instead +of their real IP address of the Tor user. + +Exit relays have the greatest legal exposure and liability of all the relays. +For example, if a user downloads copyrighted material while using your exit +relay, you the operator may receive a +[DMCA notice](https://www.dmca.com/Solutions/view.aspx?ID=712f28a5-93f2-467b-ba92… +. Any abuse complaints about the exit will go directly to you (via your +hoster, depending on the WHOIS records). Generally, most complaints can be +handled pretty easily through template letters, which we'll discuss more in +legal considerations section. + +Because of the legal exposure that comes with running an exit relay, you should +not run a Tor exit relay from your home. Ideal exit relay operators are +affiliated with some institution, like a university, a library, a hackerspace or +a privacy related organization. An institution can not only provide greater +bandwidth for the exit, but is better positioned to handle abuse complaints or +the rare law enforcement inquiry. + +If you are considering running an exit relay, please read the [section on legal +considerations](FIXME) for exit relay operators. + +# Bridge + +The design of the Tor network means that the IP address of Tor relays is public. +However, one of the ways Tor can be blocked by governments or ISPs is by +blacklisting the IP addresses of these public Tor nodes. Tor bridges are nodes +in the network that are not listed in the public Tor directory, which make it +harder for ISPs and governments to block them. + +Bridges are useful for Tor users under oppressive regimes or for people who want +an extra layer of security because they're worried somebody will recognize that +they are contacting a public Tor relay IP address. Several countries, including +China and Iran, have found ways to detect and block connections to Tor bridges. +Pluggable transports +(https://www.torproject.org/docs/pluggable-transports.html.en), a special +kind of bridge, address this by adding an additional layer of obfuscation. + +Bridges are relatively easy, low-risk and low bandwidth Tor nodes to operate, +but they have a big impact on users. A bridge isn't likely to receive any abuse +complaints, and since bridges are not listed in the public consensus, they are +unlikely to be blocked by popular services. Bridges are a great option if you +can only run a Tor node from your home network, have only one static IP, and +don't have a huge amount of bandwidth to donate -- we recommend giving your +bridge at least 1 Mbit/sec. diff --git a/templates/relay-operations.html b/templates/relay-operations.html index b964ab7..7fa9c8c 100644 --- a/templates/relay-operations.html +++ b/templates/relay-operations.html @@ -1,5 +1,4 @@ <div class="container py-5"> - <h2 class="text-primary">{{ _('Why run a Tor Relay?') }}</h2> <div class="row py-5"> <div class="col-8"> {{ this.body }} @@ -8,7 +7,6 @@ <p>Illustration area</p> </div> </div> - <h2 class="text-primary">{{ _('How to run a Relay?') }}</h2> <div class="row py-5"> {% for child in this.children|sort(attribute='key') %} <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> @@ -22,25 +20,4 @@ </div> {% endfor %} </div> - <h2 class="text-primary text-center">{{ _('Can\'t run a relay yourself?') }}</h2> - <p class="text-center">{{ _('You can donate to these organizations that help relay operators:') }}</p> - <div class="row"> - <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> - <div class="card h-100 border-1"> - <img class="card-img-top" src="{{ 'static/images/gray-image.png'|asseturl }}" alt="Card image cap"> - <div class="card-body"> - <h4 class="card-title text-primary">{{ _('Tor Servers') }}</h4> - <p class="card-text">{{ _('Two lines about the here. Two lines about the here. Two lines about the here. Two lines about the here.')}}</p> - </div> - </div> - </div> - <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> - <div class="card h-100 border-1"> - <img class="card-img-top" src="{{ 'static/images/gray-image.png'|asseturl }}" alt="Card image cap"> - <div class="card-body"> - <h4 class="card-title text-primary">{{ _('Nos Ognions') }}</h4> - <p class="card-text">{{ _('Two lines about the here. Two lines about the here. Two lines about the here. Two lines about the here.') }} </p> - </div> - </div> - </div> </div>

1 0

[community/master] Remove about.html template
by hiro＠torproject.org 27 Apr '19

27 Apr '19

commit 0b39fe653c4fe790f4e45ce0428236d91acbefe8 Author: hiro <hiro(a)torproject.org> Date: Sat Apr 27 21:39:33 2019 +0200 Remove about.html template --- templates/about.html | 43 ------------------------------------------- 1 file changed, 43 deletions(-) diff --git a/templates/about.html b/templates/about.html deleted file mode 100644 index 4372ae2..0000000 --- a/templates/about.html +++ /dev/null @@ -1,43 +0,0 @@ -<!doctype html> -<meta charset="utf-8"> -<meta name="viewport" content="width=device-width, initial-scale=1"> -<link rel="stylesheet" href="{{ '/static/bootstrap.css'|asseturl }}"> -<link rel="stylesheet" href="{{ '/static/fonts/open-iconic/font/css/open-iconic-bootstrap.css'|asseturl }}"> -<link rel="stylesheet" href="{{ '/static/fonts/fontawesome/css/all.min.css'|asseturl }}" rel="stylesheet"> -<title>{{ _("Tor Project") }} | {% block title %}{{ this.title }}{% endblock %}</title> -<body class="no-gutters"> - <header> - {% include 'navbar.html' %} - </header> - <div class="page"> - {% include 'header.html' %} - <div class="container-fluid"> - <div class="row flex-xl-nowrap"> - <main role="main" class="mx-auto col-12 {{ bag('alternatives', this.alt, 'order') }}"> - {% if this.path == "/about/history" %} - <div class="container py-3 mt-5 preamble"> - {{ this.parent.body }} - </div> - {% elif this.parent.path == "/about/jobs" %} - <div class="container py-3 mt-5"> - {{ this.summary }} - </div> - <div class="container py-3"> - {{ this.description }} - </div> - {% else %} - <div class="container py-3 mt-5 preamble"> - {{ this.body }} - </div> - {% endif %} - {% if this.parent.path == "/about" %} - {% include this.html %} - {% endif %} - </main> - </div> - </div> - </div> - <footer> - {% include 'footer.html' %} - </footer> -</body>

1 0

[translation/tpo-web_completed] Update translations for tpo-web_completed
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit a682a9162eb390413deb6449ad13c79bfa698ec1 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:50:18 2019 +0000 Update translations for tpo-web_completed --- contents+tr.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index 11b2ce613..bdd8cfc3c 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -483,7 +483,7 @@ msgstr "" #: https//www.torproject.org/about/people/ #: (content/about/people/contents+en.lrpeople.title) msgid "People" -msgstr "İnsanlar" +msgstr "Kişiler" #: https//www.torproject.org/about/people/ #: (content/about/people/contents+en.lrpeople.body) @@ -978,8 +978,8 @@ msgid "" "vast community of volunteer contributors and many have become paid staff." msgstr "" "Bize listede olmayan bir konumda yardımcı olabileceğinizi mi düşünüyorsunuz?" -" Geniş bir gönüllü katılımcı topluluğundan destek alıyoruz ve bir süre sonra" -" maaşlı çalışanımız olan pek çok kişi var." +" Geniş bir gönüllü katılımcı topluluğundan destek alıyoruz ve gönüllü olarak" +" başlayıp bir süre sonra profesyonel çalışanımız olan pek çok kişi var." #: templates/jobs.html:32 templates/projects.html:33 msgid "We invite you to join us on IRC to find how you can get involved." @@ -1169,4 +1169,4 @@ msgstr "Ayrıntılı bilgi alın." #: templates/macros/reports.html:5 templates/macros/reports.html:19 msgid "View PDF" -msgstr "PDF Belgesine Bakın" +msgstr "PDF Belgesini Aç"

1 0

[translation/tpo-web] Update translations for tpo-web
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit 9df6aeda3ceedc002bb2099c61f1a90763043efb Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:50:13 2019 +0000 Update translations for tpo-web --- contents+tr.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index 11b2ce613..bdd8cfc3c 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -483,7 +483,7 @@ msgstr "" #: https//www.torproject.org/about/people/ #: (content/about/people/contents+en.lrpeople.title) msgid "People" -msgstr "İnsanlar" +msgstr "Kişiler" #: https//www.torproject.org/about/people/ #: (content/about/people/contents+en.lrpeople.body) @@ -978,8 +978,8 @@ msgid "" "vast community of volunteer contributors and many have become paid staff." msgstr "" "Bize listede olmayan bir konumda yardımcı olabileceğinizi mi düşünüyorsunuz?" -" Geniş bir gönüllü katılımcı topluluğundan destek alıyoruz ve bir süre sonra" -" maaşlı çalışanımız olan pek çok kişi var." +" Geniş bir gönüllü katılımcı topluluğundan destek alıyoruz ve gönüllü olarak" +" başlayıp bir süre sonra profesyonel çalışanımız olan pek çok kişi var." #: templates/jobs.html:32 templates/projects.html:33 msgid "We invite you to join us on IRC to find how you can get involved." @@ -1169,4 +1169,4 @@ msgstr "Ayrıntılı bilgi alın." #: templates/macros/reports.html:5 templates/macros/reports.html:19 msgid "View PDF" -msgstr "PDF Belgesine Bakın" +msgstr "PDF Belgesini Aç"

1 0

[translation/donatepages-messagespot_completed] Update translations for donatepages-messagespot_completed
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit 7ece5feeb1f3c99acff484891c35bcbb18cc093c Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:45:43 2019 +0000 Update translations for donatepages-messagespot_completed --- locale/tr/LC_MESSAGES/messages.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/locale/tr/LC_MESSAGES/messages.po b/locale/tr/LC_MESSAGES/messages.po index c675207bc..86590a938 100644 --- a/locale/tr/LC_MESSAGES/messages.po +++ b/locale/tr/LC_MESSAGES/messages.po @@ -38,7 +38,7 @@ msgstr "Tor Projesine Hemen Destek Olabilirsiniz!" #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:607 #: tmp/cache_locale/03/03963079e40d8bba608baf2120533e119d90cb2cfc82fee9e293708eb548373f.php:75 msgid "Tor: Strength in Numbers" -msgstr "Tor: Strength in Numbers (Birlikten Kuvvet Doğar)" +msgstr "Tor: Birlikten Kuvvet Doğar" #: tmp/cache_locale/f1/f1c758a0a2b3397f444e81463a5afc68c251bdbcd430c9979e3044b79d32dffc.php:52 #: tmp/cache_locale/f1/f1c758a0a2b3397f444e81463a5afc68c251bdbcd430c9979e3044b79d32dffc.php:75 @@ -600,7 +600,7 @@ msgstr "Kredi Kartı" #: tmp/cache_locale/93/936f5ca9f26662b60293a725343573df95cb28c99d7c3f12b1c94ed37a453012.php:356 #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:315 msgid "* required fields" -msgstr " * doldurulması zorunlu alanlar" +msgstr " * ile işaretli alanların doldurulması zorunludur" #: tmp/cache_locale/93/936f5ca9f26662b60293a725343573df95cb28c99d7c3f12b1c94ed37a453012.php:371 #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:330 @@ -1990,8 +1990,8 @@ msgstr "" "<a class=\"hyperlinks links\" target=\"_blank\" " "href=\"https://newsletter.torproject.org/\">Tor Haberleri</a> duyurularına " "kayıt olabilir, <a class=\"hyperlinks links\" target=\"_blank\" " -"href=\"https://blog.torproject.org/\">Tor Blog</a> yazılarını okuyabilir ya " -"da <a class=\"hyperlinks links\" target=\"_blank\" " +"href=\"https://blog.torproject.org/\">Tor Günlüğü</a> yazılarını okuyabilir " +"ya da <a class=\"hyperlinks links\" target=\"_blank\" " "href=\"https://twitter.com/torproject\">Twitter üzerinden bizi takip " "edebilirsiniz</a>."

1 0

[translation/donatepages-messagespot] Update translations for donatepages-messagespot
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit 946120d9f97218e414829e91e6cc3c76d85ac222 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:45:36 2019 +0000 Update translations for donatepages-messagespot --- locale/tr/LC_MESSAGES/messages.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/locale/tr/LC_MESSAGES/messages.po b/locale/tr/LC_MESSAGES/messages.po index c675207bc..86590a938 100644 --- a/locale/tr/LC_MESSAGES/messages.po +++ b/locale/tr/LC_MESSAGES/messages.po @@ -38,7 +38,7 @@ msgstr "Tor Projesine Hemen Destek Olabilirsiniz!" #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:607 #: tmp/cache_locale/03/03963079e40d8bba608baf2120533e119d90cb2cfc82fee9e293708eb548373f.php:75 msgid "Tor: Strength in Numbers" -msgstr "Tor: Strength in Numbers (Birlikten Kuvvet Doğar)" +msgstr "Tor: Birlikten Kuvvet Doğar" #: tmp/cache_locale/f1/f1c758a0a2b3397f444e81463a5afc68c251bdbcd430c9979e3044b79d32dffc.php:52 #: tmp/cache_locale/f1/f1c758a0a2b3397f444e81463a5afc68c251bdbcd430c9979e3044b79d32dffc.php:75 @@ -600,7 +600,7 @@ msgstr "Kredi Kartı" #: tmp/cache_locale/93/936f5ca9f26662b60293a725343573df95cb28c99d7c3f12b1c94ed37a453012.php:356 #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:315 msgid "* required fields" -msgstr " * doldurulması zorunlu alanlar" +msgstr " * ile işaretli alanların doldurulması zorunludur" #: tmp/cache_locale/93/936f5ca9f26662b60293a725343573df95cb28c99d7c3f12b1c94ed37a453012.php:371 #: tmp/cache_locale/04/0421bb9119a5b92b0e2e4a49c25d718283ccfa1495534b2a08ff967a0f4fd06a.php:330 @@ -1990,8 +1990,8 @@ msgstr "" "<a class=\"hyperlinks links\" target=\"_blank\" " "href=\"https://newsletter.torproject.org/\">Tor Haberleri</a> duyurularına " "kayıt olabilir, <a class=\"hyperlinks links\" target=\"_blank\" " -"href=\"https://blog.torproject.org/\">Tor Blog</a> yazılarını okuyabilir ya " -"da <a class=\"hyperlinks links\" target=\"_blank\" " +"href=\"https://blog.torproject.org/\">Tor Günlüğü</a> yazılarını okuyabilir " +"ya da <a class=\"hyperlinks links\" target=\"_blank\" " "href=\"https://twitter.com/torproject\">Twitter üzerinden bizi takip " "edebilirsiniz</a>."

1 0

[translation/support-portal_completed] Update translations for support-portal_completed
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit 621bd90f1b4e5bfea9ed9b5fd1aeb19793b9217a Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:20:42 2019 +0000 Update translations for support-portal_completed --- contents+tr.po | 61 +++++++++++++++++++++++++++++----------------------------- 1 file changed, 30 insertions(+), 31 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index 17d407e27..d3532fd59 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -129,8 +129,8 @@ msgid "" "Tor Browser can certainly help people access your website in places where it" " is blocked." msgstr "" -"Tor Browser kesinlikle sansürcülerin engellediği yerlerdeki kullanıcıların " -"web sitenize erişmesine yardımcı olur." +"Tor Browser kesinlikle sansür uygulanan yerlerdeki kullanıcıların web " +"sitenize erişmesine yardımcı olur." #: https//support.torproject.org/faq/faq-2/ #: (content/faq/faq-2/contents+en.lrquestion.description) @@ -173,7 +173,7 @@ msgid "" "manual.torproject.org/) section on [censorship](https://tb-" "manual.torproject.org/circumvention/)" msgstr "" -"Ayrıntılı bilgi almak için [Tor Browser Kullanıcı Kitabında](https://tb-" +"Ayrıntılı bilgi almak için [Tor Browser Belgelerinde](https://tb-" "manual.torproject.org/tr/) bulunan [sansür](https://tb-" "manual.torproject.org/tr/circumvention/) bölümüne bakabilirsiniz." @@ -186,7 +186,7 @@ msgid "" " or uBlock Origin?" msgstr "" "Tor Browser üzerine, AdBlock Plus ya da uBlock Origin gibi yeni bir eklenti " -"ya da uzantı kurmalı mıyım?" +"kurmalı mıyım?" #: https//support.torproject.org/faq/faq-3/ #: (content/faq/faq-3/contents+en.lrquestion.description) @@ -290,8 +290,8 @@ msgid "" " advanced user who knows how to configure both in a way that doesn't " "compromise your privacy." msgstr "" -"Genel olarak, gizliliğinizi tehlikeye atmayacak şekilde ayarlamayı bilen " -"uzman bir kullanıcı değilseniz, Tor ile VPN bağlantısını birlikte " +"Genel olarak, ayarları gizliliğinizi tehlikeye atmayacak şekilde yapabilecek" +" uzman bir kullanıcı değilseniz, Tor ile VPN bağlantısını birlikte " "kullanmanızı önermiyoruz. " #: https//support.torproject.org/faq/faq-5/ @@ -318,9 +318,9 @@ msgid "" "Digital signature is a process ensuring that a certain package was generated" " by its developers and has not been tampered with." msgstr "" -"Sayısal imza belirli bir paketin gerçekten geliştiricileri tarafından " -"üretildiğinden ve üzerinde sonradan bir değişiklik yapılmadığından emin " -"olunmasını sağlar." +"Bir sayısal imza, bir paketin gerçekten özgün geliştiricileri tarafından " +"üretildiğini ve üzerinde sonradan bir değişiklik yapılmadığını anlamak için " +"kullanılır." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -431,8 +431,8 @@ msgstr "https://gpg4win.org/download.html adresinden indirebilirsiniz." msgid "" "Once it's installed, use GnuPG to import the key that signed your package." msgstr "" -"Kurulduktan sonra GnuPG uygulamasını kullanarak paketinizin imzalandığı " -"anahtarı içe aktarın." +"Kurduktan sonra paketinizin imzalandığı anahtarı GnuPG uygulamasında içe " +"aktarın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -539,14 +539,14 @@ msgid "" ".8_en-US.exe.asc C:\\Users\\Alice\\Desktop\\torbrowser-install-8.0.8_en-" "US.exe" msgstr "" -"gpg.exe --verify C:\\Kullanıcılar\\Elvan\\Desktop\torbrowser-install-" -"win64-8.0.8_en-US.exe.asc C:\\Kullanıcılar\\Elvan\\Desktop\torbrowser-" +"gpg.exe --verify C:\\Kullanıcılar\\Alice\\Desktop\torbrowser-install-" +"win64-8.0.8_en-US.exe.asc C:\\Kullanıcılar\\Alice\\Desktop\torbrowser-" "install-8.0.8_en-US.exe" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) msgid "Please substitute \"Alice\" with your own username." -msgstr "Lütfen \"Elvan\" yerine kendi kullanıcı adınızı yazın." +msgstr "Lütfen \"Alice\" yerine kendi kullanıcı adınızı yazın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -610,9 +610,7 @@ msgstr "" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) msgid "Currently valid subkey fingerprints are:" -msgstr "" -"Currently valid subkey fingerprints are:\n" -"Geçerli alt anahtar parmak izleri:" +msgstr "Geçerli alt anahtar parmak izleri:" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -625,8 +623,8 @@ msgid "" "Notice that there is a warning because you haven't assigned a trust index to" " this person." msgstr "" -"Notice that there is a warning because you haven't assigned a trust index to this person.\n" -"(Bu kişiye bir güven endeksi atamamış olduğunuz için bir uyarı verildi.)" +"Bu kişiye bir güven endeksi atamamış olduğunuz için bir uyarı verildiğini " +"unutmayın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -634,8 +632,9 @@ msgid "" "This means that GnuPG verified that the key made that signature, but it's up" " to you to decide if that key really belongs to the developer." msgstr "" -"This means that GnuPG verified that the key made that signature, but it's up to you to decide if that key really belongs to the developer.\n" -"(GnuPG bu imzayı oluşturan anahtar ile doğrulandı ancak bu anahtarın gerçekten geliştiriciye ait olup olmadığına siz karar vermelisiniz.)" +"Bu sonuç GnuPG tarafından bu imzayı oluşturan anahtarın doğrulandığını " +"gösterir. Ancak bu anahtarın gerçekten geliştiriciye ait olup olmadığına siz" +" karar vermelisiniz." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -643,8 +642,8 @@ msgid "" "The best method is to meet the developer in person and exchange key " "fingerprints." msgstr "" -"The best method is to meet the developer in person and exchange key fingerprints.\n" -"(En iyi yöntem geliştirici ile doğrudan görüşerek parmak izlerini değiş tokuş etmektir.)" +"En iyi yöntem geliştirici ile doğrudan görüşerek parmak izlerini değiş tokuş" +" etmektir." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -785,7 +784,7 @@ msgid "" "post that details its new features and known issues." msgstr "" "Yeni bir kararlı Tor Browser sürümü yayınladığımızda, yeni eklenen " -"özellikler ve bilinen sorunlarla ilgili bir blog iletisi yazıyoruz." +"özellikler ve bilinen sorunlarla ilgili bir günlük yazısı da yayınlıyoruz." #: https//support.torproject.org/tbb/tbb-1/ #: (content/tbb/tbb-1/contents+en.lrquestion.description) @@ -826,9 +825,9 @@ msgid "" "Most antivirus or malware protection allows the user to \"whitelist\" " "certain processes that would otherwise be blocked." msgstr "" -"Çoğu antivirus ya da zararlı yazılımdan korunma uygulamasında kullanılmasına" -" izin verilecek uygulamaları belirleyen ve kullanıcıların düzenleyebileceği " -"bir \"beyaz liste\" bulunur." +"Çoğu antivirus ya da zararlı yazılımdan korunma uygulamasında, " +"kullanılmasına izin verilecek uygulamaları belirleyen ve kullanıcıların " +"düzenleyebileceği bir \"beyaz liste\" özelliği bulunur." #: https//support.torproject.org/tbb/tbb-10/ #: (content/tbb/tbb-10/contents+en.lrquestion.description) @@ -2472,7 +2471,7 @@ msgid "" "announcements and details regarding this project." msgstr "" "Bu proje ile ilgili ayrıntılı bilgi almak ve duyuruları görmek için <mark><a" -" href=\"https://blog.torproject.org\">blog</a></mark> bölümüne " +" href=\"https://blog.torproject.org\">günlük</a></mark> bölümüne " "bakabilirsiniz." #: https//support.torproject.org/gettor/gettor-1/ @@ -6481,8 +6480,8 @@ msgstr "" "Ayrıntılı bilgi almak için <mark><a " "href=\"https://www.torproject.org/about/sponsors.html.en\">destekçi " "listemize</a></mark> ve mali durumumuz hakkındaki <mark><a " -"href=\"https://blog.torproject.org/category/tags/form-990\">blog " -"iletilerimize</a></mark> bakabilirsiniz." +"href=\"https://blog.torproject.org/category/tags/form-990\">günlük " +"yazılarımıza</a></mark> bakabilirsiniz." #: https//support.torproject.org/misc/misc-3/ #: (content/misc/misc-3/contents+en.lrquestion.description) @@ -6520,7 +6519,7 @@ msgid "" " post on the subject</a></mark>." msgstr "" "Ayrıntılı bilgi almak için <mark><a href=\"https://blog.torproject.org" -"/bittorrent-over-tor-isnt-good-idea\">bu konu hakkındaki blog iletisine " +"/bittorrent-over-tor-isnt-good-idea\">bu konu hakkındaki günlük yazısına " "bakabilirsiniz</a></mark>." #: https//support.torproject.org/misc/misc-5/

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit 23521c792c89972859435efbf01a496bbdbfa93f Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:20:35 2019 +0000 Update translations for support-portal --- contents+tr.po | 61 +++++++++++++++++++++++++++++----------------------------- 1 file changed, 30 insertions(+), 31 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index 17d407e27..d3532fd59 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -129,8 +129,8 @@ msgid "" "Tor Browser can certainly help people access your website in places where it" " is blocked." msgstr "" -"Tor Browser kesinlikle sansürcülerin engellediği yerlerdeki kullanıcıların " -"web sitenize erişmesine yardımcı olur." +"Tor Browser kesinlikle sansür uygulanan yerlerdeki kullanıcıların web " +"sitenize erişmesine yardımcı olur." #: https//support.torproject.org/faq/faq-2/ #: (content/faq/faq-2/contents+en.lrquestion.description) @@ -173,7 +173,7 @@ msgid "" "manual.torproject.org/) section on [censorship](https://tb-" "manual.torproject.org/circumvention/)" msgstr "" -"Ayrıntılı bilgi almak için [Tor Browser Kullanıcı Kitabında](https://tb-" +"Ayrıntılı bilgi almak için [Tor Browser Belgelerinde](https://tb-" "manual.torproject.org/tr/) bulunan [sansür](https://tb-" "manual.torproject.org/tr/circumvention/) bölümüne bakabilirsiniz." @@ -186,7 +186,7 @@ msgid "" " or uBlock Origin?" msgstr "" "Tor Browser üzerine, AdBlock Plus ya da uBlock Origin gibi yeni bir eklenti " -"ya da uzantı kurmalı mıyım?" +"kurmalı mıyım?" #: https//support.torproject.org/faq/faq-3/ #: (content/faq/faq-3/contents+en.lrquestion.description) @@ -290,8 +290,8 @@ msgid "" " advanced user who knows how to configure both in a way that doesn't " "compromise your privacy." msgstr "" -"Genel olarak, gizliliğinizi tehlikeye atmayacak şekilde ayarlamayı bilen " -"uzman bir kullanıcı değilseniz, Tor ile VPN bağlantısını birlikte " +"Genel olarak, ayarları gizliliğinizi tehlikeye atmayacak şekilde yapabilecek" +" uzman bir kullanıcı değilseniz, Tor ile VPN bağlantısını birlikte " "kullanmanızı önermiyoruz. " #: https//support.torproject.org/faq/faq-5/ @@ -318,9 +318,9 @@ msgid "" "Digital signature is a process ensuring that a certain package was generated" " by its developers and has not been tampered with." msgstr "" -"Sayısal imza belirli bir paketin gerçekten geliştiricileri tarafından " -"üretildiğinden ve üzerinde sonradan bir değişiklik yapılmadığından emin " -"olunmasını sağlar." +"Bir sayısal imza, bir paketin gerçekten özgün geliştiricileri tarafından " +"üretildiğini ve üzerinde sonradan bir değişiklik yapılmadığını anlamak için " +"kullanılır." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -431,8 +431,8 @@ msgstr "https://gpg4win.org/download.html adresinden indirebilirsiniz." msgid "" "Once it's installed, use GnuPG to import the key that signed your package." msgstr "" -"Kurulduktan sonra GnuPG uygulamasını kullanarak paketinizin imzalandığı " -"anahtarı içe aktarın." +"Kurduktan sonra paketinizin imzalandığı anahtarı GnuPG uygulamasında içe " +"aktarın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -539,14 +539,14 @@ msgid "" ".8_en-US.exe.asc C:\\Users\\Alice\\Desktop\\torbrowser-install-8.0.8_en-" "US.exe" msgstr "" -"gpg.exe --verify C:\\Kullanıcılar\\Elvan\\Desktop\torbrowser-install-" -"win64-8.0.8_en-US.exe.asc C:\\Kullanıcılar\\Elvan\\Desktop\torbrowser-" +"gpg.exe --verify C:\\Kullanıcılar\\Alice\\Desktop\torbrowser-install-" +"win64-8.0.8_en-US.exe.asc C:\\Kullanıcılar\\Alice\\Desktop\torbrowser-" "install-8.0.8_en-US.exe" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) msgid "Please substitute \"Alice\" with your own username." -msgstr "Lütfen \"Elvan\" yerine kendi kullanıcı adınızı yazın." +msgstr "Lütfen \"Alice\" yerine kendi kullanıcı adınızı yazın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -610,9 +610,7 @@ msgstr "" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) msgid "Currently valid subkey fingerprints are:" -msgstr "" -"Currently valid subkey fingerprints are:\n" -"Geçerli alt anahtar parmak izleri:" +msgstr "Geçerli alt anahtar parmak izleri:" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -625,8 +623,8 @@ msgid "" "Notice that there is a warning because you haven't assigned a trust index to" " this person." msgstr "" -"Notice that there is a warning because you haven't assigned a trust index to this person.\n" -"(Bu kişiye bir güven endeksi atamamış olduğunuz için bir uyarı verildi.)" +"Bu kişiye bir güven endeksi atamamış olduğunuz için bir uyarı verildiğini " +"unutmayın." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -634,8 +632,9 @@ msgid "" "This means that GnuPG verified that the key made that signature, but it's up" " to you to decide if that key really belongs to the developer." msgstr "" -"This means that GnuPG verified that the key made that signature, but it's up to you to decide if that key really belongs to the developer.\n" -"(GnuPG bu imzayı oluşturan anahtar ile doğrulandı ancak bu anahtarın gerçekten geliştiriciye ait olup olmadığına siz karar vermelisiniz.)" +"Bu sonuç GnuPG tarafından bu imzayı oluşturan anahtarın doğrulandığını " +"gösterir. Ancak bu anahtarın gerçekten geliştiriciye ait olup olmadığına siz" +" karar vermelisiniz." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -643,8 +642,8 @@ msgid "" "The best method is to meet the developer in person and exchange key " "fingerprints." msgstr "" -"The best method is to meet the developer in person and exchange key fingerprints.\n" -"(En iyi yöntem geliştirici ile doğrudan görüşerek parmak izlerini değiş tokuş etmektir.)" +"En iyi yöntem geliştirici ile doğrudan görüşerek parmak izlerini değiş tokuş" +" etmektir." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -785,7 +784,7 @@ msgid "" "post that details its new features and known issues." msgstr "" "Yeni bir kararlı Tor Browser sürümü yayınladığımızda, yeni eklenen " -"özellikler ve bilinen sorunlarla ilgili bir blog iletisi yazıyoruz." +"özellikler ve bilinen sorunlarla ilgili bir günlük yazısı da yayınlıyoruz." #: https//support.torproject.org/tbb/tbb-1/ #: (content/tbb/tbb-1/contents+en.lrquestion.description) @@ -826,9 +825,9 @@ msgid "" "Most antivirus or malware protection allows the user to \"whitelist\" " "certain processes that would otherwise be blocked." msgstr "" -"Çoğu antivirus ya da zararlı yazılımdan korunma uygulamasında kullanılmasına" -" izin verilecek uygulamaları belirleyen ve kullanıcıların düzenleyebileceği " -"bir \"beyaz liste\" bulunur." +"Çoğu antivirus ya da zararlı yazılımdan korunma uygulamasında, " +"kullanılmasına izin verilecek uygulamaları belirleyen ve kullanıcıların " +"düzenleyebileceği bir \"beyaz liste\" özelliği bulunur." #: https//support.torproject.org/tbb/tbb-10/ #: (content/tbb/tbb-10/contents+en.lrquestion.description) @@ -2472,7 +2471,7 @@ msgid "" "announcements and details regarding this project." msgstr "" "Bu proje ile ilgili ayrıntılı bilgi almak ve duyuruları görmek için <mark><a" -" href=\"https://blog.torproject.org\">blog</a></mark> bölümüne " +" href=\"https://blog.torproject.org\">günlük</a></mark> bölümüne " "bakabilirsiniz." #: https//support.torproject.org/gettor/gettor-1/ @@ -6481,8 +6480,8 @@ msgstr "" "Ayrıntılı bilgi almak için <mark><a " "href=\"https://www.torproject.org/about/sponsors.html.en\">destekçi " "listemize</a></mark> ve mali durumumuz hakkındaki <mark><a " -"href=\"https://blog.torproject.org/category/tags/form-990\">blog " -"iletilerimize</a></mark> bakabilirsiniz." +"href=\"https://blog.torproject.org/category/tags/form-990\">günlük " +"yazılarımıza</a></mark> bakabilirsiniz." #: https//support.torproject.org/misc/misc-3/ #: (content/misc/misc-3/contents+en.lrquestion.description) @@ -6520,7 +6519,7 @@ msgid "" " post on the subject</a></mark>." msgstr "" "Ayrıntılı bilgi almak için <mark><a href=\"https://blog.torproject.org" -"/bittorrent-over-tor-isnt-good-idea\">bu konu hakkındaki blog iletisine " +"/bittorrent-over-tor-isnt-good-idea\">bu konu hakkındaki günlük yazısına " "bakabilirsiniz</a></mark>." #: https//support.torproject.org/misc/misc-5/

1 0

[translation/tpo-web_completed] Update translations for tpo-web_completed
by translation＠torproject.org 27 Apr '19

27 Apr '19

commit f6a25fc9b2e0c211eda6ae6c67f302bf0ac3e32e Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 27 14:20:17 2019 +0000 Update translations for tpo-web_completed --- contents+tr.po | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index 33c474a87..11b2ce613 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -322,7 +322,7 @@ msgid "" "and open to maximize transparency and separation." msgstr "" "1990'lı yıllarda ortaya çıkmasından bu yana, onion yöneltme, merkezi olmayan" -" bir ağ üzerine tasarlandı. Saydamlığını ve korumasını en üst düzeye " +" bir ağ üzerine tasarlandı. Şeffaflığını ve korumasını en üst düzeye " "çıkarmak için, ağın farklı ilgi alanlarından çeşitli güvenirlik düzeyine " "sahip kuruluşlar tarafından işletilmesi ve bunu sağlayacak yazılımın özgür " "ve açık kaynaklı olması gerekiyordu." @@ -462,10 +462,10 @@ msgid "" "to an uncensored internet, and Tor has become the world's strongest tool for" " privacy and freedom online." msgstr "" -"Tor Projesi olarak her gün, insanların sansürsüz bir İnternete kişisel " -"gizliliğini koruyarak erişebilmesi için mücadele ediyoruz. Tor çevrimiçi " -"kişisel gizlilik ve özgürlük sağlamak için dünyanın en güçlü aracı haline " -"geldi." +"Tor Projesi olarak her gün, insanların kişisel gizliliğini koruyarak " +"İnternete sansürsüz olarak erişebilmesi için mücadele ediyoruz. Tor " +"çevrimiçi kişisel gizliliği ve özgürlüğü sağlamak için dünyanın en güçlü " +"aracı haline geldi." #: https//www.torproject.org/about/history/ #: (content/about/history/contents+en.lrpage.body) @@ -477,7 +477,7 @@ msgid "" msgstr "" "Ancak Tor bir yazılımdan çok daha fazlasıdır. İnsan haklarına adanmış " "uluslararası bir insan topluluğu tarafından üretilen bir sevgi emeğidir. Tor" -" Projesi, saydamlığa ve kullanıcılarının güvenliğine " +" Projesi, şeffaflığa ve kullanıcılarının güvenliğine " "[derinden](https://blog.torproject.org/tor-social-contract) bağlıdır." #: https//www.torproject.org/about/people/ @@ -638,7 +638,7 @@ msgid "" msgstr "" "Kötü niyetli, hatalı yapılandırılmış ya da başka bir şekilde çalışmadığını " "düşündüğünüz bir aktarıcı bulursanız, nasıl bildireceğinizi öğrenmek için " -"wiki sayfamıza ve blog yazılarına bakabilirsiniz." +"wiki sayfamıza ve günlük yazılarına bakabilirsiniz." #: templates/contact.html:76 msgid "Report a security issue."

1 0