tor-onions

tor-onions@lists.torproject.org

February 2018

7 participants
2 discussions

Re: [tor-onions] DDoS, Single Onion Services and IP Addresses
by Alec Muffett 02 Feb '18

02 Feb '18

The current limit is 2 connections per IP address. This affects single onion services, because they don't use guards. Can you please make sure that you only have one or two Single Onion Services on each outbound IP address? I think the NYT is okay (separate IPs?) but if I understand this right, this is going to hamper EOTK development, since I have ~ 12 worker onions spread over 6 quad-core machines, and then publish up to 10 additional "service" addresses via OnionBalance ... all behind my single DSL NAT firewall that protects them from inbound traffic. Hmmm... - a

6 7

DDoS, Single Onion Services and IP Addresses
by teor 01 Feb '18

01 Feb '18

Hi All, Is this list still working? :-) One of our new DDoS defences stops Tor clients from building lots of circuits over multiple connections from the same IP address. The current limit is 2 connections per IP address. This affects single onion services, because they don't use guards. Can you please make sure that you only have one or two Single Onion Services on each outbound IP address? If you have multiple IP addresses on your machine, you can set OutboundBindAddress. Otherwise, Tor will use the default route. T

2 1