just a heads up...
after the recent changes to how mirrors operate, i updated my script
that rsync's against rsync.torproject.org.
the last three times it has ran (four hours apart), i've received the
below error message from cron.
it would appear that the error is due to connections to 873/tcp being
refused:
$ telnet rsync.torproject.org rsync
Trying 38.229.72.16...
telnet: connect to address 38.229.72.16: Connection refused
/chl
-------- Forwarded Message --------
rsync: failed to connect to rsync.torproject.org: Address family not
supported by protocol (97)
rsync error: error in socket IO (code 10) at clientserver.c(124)
[receiver=3.0.6]
rsync: failed to connect to rsync.torproject.org: Address family not
supported by protocol (97)
rsync error: error in socket IO (code 10) at clientserver.c(124)
[receiver=3.0.6]
Hi,
I have a couple of questions about running a Tor mirror:
1) How much traffic does an "average" mirror get every month?
2) Do mirror hosts see a lot of DoS attacks or break-in attempts?
3) Is it a good idea to run a mirror and a relay on the same machine?
Thanks,
Alexander
--
PGP Key: 0xC55A356B | https://dietrich.cx/pgp
Hey folks,
we've updated the website layout and unfortunately this means that a
change is required to continue mirroring the website[0]. Please ask
if you run into any trouble, and thanks for providing a mirror!
Cheers
Sebastian
[0]: https://www.torproject.org/docs/running-a-mirror.html.en
In order to find an answer to the question "Why not just use
cloudflare?" for mirrors, I ran one of my mirrors on cloudflare for a week.
Attached are the results of the test. The week included a new release of
tor browser, which generally creates some load on my mirror.
The results are that using cloudflare doesn't offload the binaries,
which are what make up the bulk of traffic on the mirror. From past web
log analysis, the vast majority of traffic is downloading binaries, as
linked from 3rd party forums and sites around the world. It seems almost
no one uses my mirrors to read documentation or look at anything else on
the website. Cloudflare would be great if everyone wanted to look at the
documentation or other html pages.
I've started to look at CDN providers to see if there are affordable
services which can offload the entire site itself.
Constructive thoughts and pointers to CDN providers are welcome.
--
Andrew
pgp 0x6B4D6475
https://www.torproject.org/
+1-781-948-1982
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Good day!
We have rearranged the mirror setup a bit so please remove the current
BBLN mirror (mirror.bbln.org). The 3 new mirrors (1 x NL & 2 x FR)
below are updated every 2 hours.
noc AT bbln DOT org,BBLN,NL,The
Netherlands,Europe,TRUE,TRUE,No,http://mirror-nl1.bbln.org/torproject/,http…,,
noc AT bbln DOT
org,BBLN,FR,France,Europe,TRUE,TRUE,No,http://mirror-fr1.bbln.org/torprojec…,,
noc AT bbln DOT
org,BBLN,FR,France,Europe,TRUE,TRUE,No,http://mirror-fr2.bbln.org/torprojec…,,
The French mirrors are hosted in Gravelines and Roubaix.
Thanks in advance for adding the new mirrors!
- --
Tim Semeijn
pgp 0x08CE9B4D
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iQEcBAEBAgAGBQJUPx5TAAoJEB4F+FYIzptNpOMH/3rr1qfvNF3ybb89B4SmzWjj
v32Xto5997s3ae9os0MBMed0kuPsmiNjQQxw/nRTUl9BC3utwWOGW0O0jGokrFFs
icgM4wk34+IKgzdfIwyhr8b/lAptS1q2iwHFGK4cd2TQfeOPZFxZndF3mWfDEjqr
S/paKKu4HHjXewNo3JalhK20v1WIcExUNJhqOwEvMOa/yRJqsUO85YQX9RE6v6Fs
KHdI+o33bs8NIY7fH3W6ZIe0FBrePqpgc+3LmAPiVMcZOmtjHe1aDl+y+ZuNvnTD
Rva4ydh/euabAMi0kZc61ceviId7dy8IR/K7e12ih3sUVRmRN29HxKTvWFYXcT0=
=J+ur
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear,
Please remove mirror 'mirror2.bbln.org' located in The Netherlands.
Server is being replaced with a new mirror in short notice and this
one is not up-to-date anymore.
Thanks in advance!
- --
Tim Semeijn
pgp 0x08CE9B4D
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iQEcBAEBAgAGBQJULvXKAAoJEB4F+FYIzptNE+QH/j283P6OuMSTwqIwkKeoXxtX
tzuzjYVGgDerT8u5b1TXbJZEILdsRr4DbmJlZ9ImflGpIvPLCQuL43g++ncu9sRy
/BxYnTiSC0HnR5H0AHgQpBd3LykR/0FL0Wz0dHlAOSYpoSne60Kf5nZdiNM8o74D
r93/awlI3LinB6PsLqjB5Csi7r4JvIHHDAeXftohZEPPHv39TJkpCUVR3OXM1OeI
fI3jRCMIcCDc4Y0NGGKI2J0SXHtL3WePIgQZICjBjwOLZO9xhy3qnC5lcIuNc0aE
op4dyWaMtvIyMyyurnIhvg5yuO02YsISz3txVdaSxiJp1MsRSaBFAzvaPqPkkCg=
=faVO
-----END PGP SIGNATURE-----