August 2020 - tor-onions - lists.torproject.org

Onion Service Monitoring
by shadow 16 Aug '21

16 Aug '21

Dear fellow Onion Service operators, I'm curios how you monitor the availability of your onion services? I implemented a solution with icinga2 check commands. It basically queries the onion service via torsocks and check_tcp command [1]. > > object CheckCommand "check_tor_onion" { > command = [ "torsocks", PluginDir + "/check_tcp" ] > timeout = 6m > arguments = { > "-H" = "$hostname$" > "-p" = "$port$" > "-t" = "$timeout$" > } > } This solution is kind of flaky and produces a lot of mail noise, even if I run it with large timeout value (360s), check attempts and retry intervals. Recently I came across the tool called hsprober [2], which looks like a more compelling option. though it requires a prometheus setup. Since it is a network, where connections constantly looses connections, I would like to know how you treat this flakyness. Regardless of which software stack you use, I'm interested in your concept for monitoring your onion services from the outside (user side) and from the inside (server side). And also which tools do you use. Thank you for any answers and opinions. Have a happy new year. shadow [1] - https://www.monitoring-plugins.org/doc/man/check_tcp.html [2] - https://git.autistici.org/ale/hsprober -- best regards | viele Gruesse, shadow(a)systemli.org receive my key: gpg --keyserver zimmermann.mayfirst.org --recv-keys 0x5C6B6ED4248C1F32

7 11

Question about preventing DDOS
by froggo＠secmail.pro 18 Aug '20

18 Aug '20

My hidden service was getting a lot of DDOS attacks recently. It was firstly against Apache itself. I created a captcha system that doesn't spend much bandwidth even when under DDOS. Using OnionBalance to balance Tor instances between CPUs. My service is V3. So recently the way of DDOS changed. My bandwidth usage is nearly at maximum but even after I stop Apache service it continues. I checked it with Nethogs and Tor is spending the bandwidth when Apache is running or not running. HiddenServiceEnableIntroDoSDefense 1 HiddenServiceEnableIntroDoSRatePerSec 25 HiddenServiceEnableIntroDoSBurstPerSec 200 Using these settings with my hidden service but doesn't seem to be doing anything. Is there something known to stop this with a configuration or is dedicating more bandwidth the only way? My server spends 800 Mbps of bandwidth even though nothing is served. Thank you.

2 2

Scripts for setting up onion instan
by Farhān 04 Aug '20

04 Aug '20

Hi all, Are there any known scripts(.sh /.py etc) that could help me setup multiple .onion services on a single machine? Something like pagekite can potentially help, except of course for onion services. My aim is to setup a xmpp instance, a WriteFreely instance and a mediawiki site ultimately. Regards,

3 3