December 2014 - tor-relays - lists.torproject.org

onionoo backend seems to be down.
by jason＠icetor.is 21 Apr '15

21 Apr '15

Hello All, Anyone else notice onionoo and the tools that rely on it (globe.torproject.org atlas.torproject.org) seem to be down? -Jason

5 4

Making your relay submit hidden service statistics
by George Kadianakis 04 Feb '15

04 Feb '15

Hello people, some days ago we sent a mail [1] asking for feedback on our patch that collects hidden service statistics from Tor relays. Specifically, we are trying to answer the questions: "Approximately how many hidden services are there?" and "Approximately how much traffic of the Tor network is going to hidden services?". For more information see my previous email and the relevant proposals. Our code [2] got merged in upstream Tor some days ago and now we are looking for more volunteers to enable it on their relays. We will collect these statistics during the next [days] weeks, and in a month we plan to publish a short report with our findings. To help us you will need to use the very latest version of Tor and also slightly edit your torrc. Here are some instructions for Debian/Ubuntu [3]: ----- Let's start by slightly editing your regular Tor torrc to enable hidden service statistics. Please append the folowing to your regular torrc (not including quotes): """ HiddenServiceStatistics 1 """ Now, we need to install a bleeding edge version of Tor that can do hidden service statistics. You can either use the git master [3], or use Tor's APT repositories. The following instructions help you with the latter approach. Please start by following "Option two" of https://www.torproject.org/docs/debian so that you add the proper APT repositories and install tor and the deb.torproject.org-keyring package. Next, add the following line to your sources.lst: deb http://deb.torproject.org/torproject.org tor-nightly-master-wheezy main (you might need to replace 'wheezy' with your distribution, like you did in the previous step) Now, do # apt-get update # apt-get install tor which should upgrade your Tor to the latest nightly version., Your system Tor should now be up-to-date and able to collect hidden service statistics! Just start Tor as you normally do, using the torrc we modified above. For example you could simply do: # tor -f torrc but feel free to use your init script if you prefer that. Now just leave your relay do its thing, and keep an eye to this mailing list around mid-January 2015 for the results of our research. --- FWIW, if you are not using Debian, you can use the master branch of the official git repository: https://git.torproject.org/tor.git You will also need to edit your torrc in the same manner as the Debian instructions. Feel free to reply with any questions you have! Thanks! George Kadianakis Karsten Loesing Aaron Johnson David Goulet [1]: https://lists.torproject.org/pipermail/tor-dev/2014-December/007968.html [2]: https://trac.torproject.org/projects/tor/ticket/13192 [3]: for example see http://tor.stackexchange.com/questions/75/how-can-i-install-tor-from-the-so…

1 1

Re: [tor-relays] building Tor against LibreSSL 2.1.1 fails with "undefined reference to `EVP_aes_128_ctr'" error
by teor 15 Jan '15

15 Jan '15

> Date: Fri, 21 Nov 2014 07:22:10 -0800 > From: Seth <list(a)sysfu.com> > > I'm trying to build tor-0.2.5.10 from source against LibreSSL 2.1.1 on a > FreeBSD 9.3x jail system. > > It fails with this message > > ----------------------------------- > > CC src/tools/tor-gencert.o > CCLD src/tools/tor-gencert > src/common/libor-crypto.a(aes.o): In function `aes_new_cipher': > /usr/local/src/tor-0.2.5.10/src/common/aes.c:100: undefined reference to > `EVP_aes_128_ctr' > *** [src/tools/tor-gencert] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > *** [all] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > > -------------------------------------- > > Has anyone has any luck building Tor against LibreSSL? > Yes, on OS X, but it wasn't easy, and it didn't bootstrap for me due to SSL errors. Others have had more luck, but mostly on Linux AFAIK. Do you perhaps have a system-installed OpenSSL 0.9.* which is lacking EVP_aes_128_ctr? See https://trac.torproject.org/projects/tor/ticket/13817 for a similar failure, due to the following issues: configure --with-openssl-dir= detects the wrong bin/openssl if "$OPENSSL_DIR/bin/openssl" isn't in the path before all other openssl executables. configure --enable-static-openssl requires LDFLAGS="$OPENSSL_DIR/lib":$LDFLAGS to link properly, at least on OS X. If you do run into runtime SSL errors, see this bug: https://trac.torproject.org/projects/tor/ticket/13816 teor pgp 0xABFED1AC hkp://pgp.mit.edu/ https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 http://0bin.net/paste/Mu92kPyphK0bqmbA#Zvt3gzMrSCAwDN6GKsUk7Q8G-eG+Y+BLpe7w…

4 11

Exit Node / iptables / massive attempts on DPT 8118 ?
by rush23＠gmx.net 07 Jan '15

07 Jan '15

5 16

Someone broke the tor-relay speed record?
by Justaguy 04 Jan '15

04 Jan '15

https://globe.thecthulhu.com/#/relay/F528DED21EACD2E4E9301EC0AABD370EDCAD2C… Someone just got 149.08 MB/s on a non-exit relay. This is amazing! Would you mind saying what kind of hardware you use for this? Ipredator used https://ipredator.se/guide/torserver to get to 101MB/s. So your setup should be even more extreme. -- PGP fingerprint: 8516 5FFC 011A 6465 D042 6AC1 D719 1F41 B7CE EDFF OTR fingerprint OFTC: FF6D1AC2 13F38B15 EDB21522 D3530A6F 6EE01996 OTR fingerprint freenode: 293FAFD3 1155A465 C5B77015 B65E8AEC 63A1AF21 Full PGP public key: https://justaguy.pw

6 11

Relay is down
by Giovanny Andres Gongora Granada 01 Jan '15

01 Jan '15

Hi, My relay was up during 4 days, but now it's down. In the log it says: Dec 30 21:19:51.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '128.31.0.39:9131'. Please$ Dec 30 21:19:51.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '208.83.223.34:443'. Pleas$ Dec 30 21:19:51.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '131.188.40.189:80'. Pleas$ Dec 30 21:19:51.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '86.59.21.38:80'. Please c$ What could be happening? I restart it but it says the same on the log. Regards, Gio -- Mozilla Hispano: http://mozilla-hispano.org Mentor en mozilla-hispano.org: Gioyik <https://www.mozilla-hispano.org/documentacion/Usuario:Gioyik> Mozilla Colombia: Miembro en MozillaColombia <http://mozillacolombia.org/our-contributors/> twitter: Gioyik <https://twitter.com/Gioyik> Blog: gioyik.wordpress.com irc: gioyik

8 11

OT: folding@home
by Sebastian Urbach 28 Dec '14

28 Dec '14

Dear list members, I would like to invite any operator, who has some idle Cores (CPU or GPU) left,to join the folding@home distributed computing project: http://folding.stanford.edu/ There is now a brandnew team called Tor Project (Unofficial) with the id 227615. Hope to see some of you there :-) -- Sincerely yours / Sincères salutations Sebastian Urbach ----------------------------------------- Definition of Tor: 10% luck, 20% skill, 15% concentrated power of will, 5% pleasure, 50% pain and 100% reason to remember the name! -----------------------------------------

6 10

boost CPU on a Tor relay
by s7r 28 Dec '14

28 Dec '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, A Tor relay currently going 33MB/s could go a lot faster but CPU is at 93% usage - this is the bottleneck. Here is the output of /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 26 model name : Intel(R) Core(TM) i7 CPU 950 @ 3.07GHz stepping : 5 microcode : 0x11 cpu MHz : 3068.000 cache size : 8192 KB physical id : 0 siblings : 8 core id : 0 cpu cores : 4 apicid : 0 initial apicid : 0 fpu : yes fpu_exception : yes cpuid level : 11 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 popcnt lahf_lm ida dtherm tpr_shadow vnmi flexpriority ept vpid bogomips : 6132.24 clflush size : 64 cache_alignment : 64 address sizes : 36 bits physical, 48 bits virtual power management: it also goes down to processor 1 - processor 7 Any ideas how this could be boosted? OS is Debian wheezy. No aes-ni hardware acceleration, no openssl benchmarking or customization currently. advices? Thank you. - -- s7r PGP Fingerprint: 7C36 9232 5ABD FB0B 3021 03F1 837F A52C 8126 5B11 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUDuRTAAoJEIN/pSyBJlsRLqYH/iSCtC9r/7/DBCG2qqUGPEgY TELvt+UMGyMP6ncNJH+vDEdHO4BBlSMzFQdj2sKyO3hOT5492cIOaT3gGokaDApL W913yqUkIfiUT6FUWJ6g4/LUt25pMG25Ednr/ZJJXR/pR+Ym3T3ytg+MSwRBmpEe +h26Q7qvd/p4f6VhTR0sEsxQfDLVXrEsj3kn0BL0rLklN5zH/bqmIsK2hio5Nl3H KBvbvyt+JbLhA/4+jygT6AygHDH9arpXWEh3ZcJVn7mE0OmPAvukdlLUj70K5F7r cCeMakcGBbSzit5tY7jUmSvkUewVBhAxAZmv1hgNnuCoSrGPtQZseCbM06cry+k= =TyKF -----END PGP SIGNATURE-----

6 10

Re: [tor-relays] OT: folding@home
by teor 27 Dec '14

27 Dec '14

Some thoughts on the security of crowdsourced computing: Installing additional software increases the attack surface of your relay, even more so when the new software access the network. (Not to mention any additional libraries.) There is also the issue of the security of automatic updates to the any executables - Folding@home may have less of an issue with this than BOINC, as there is only one project involved. If you're willing to accept the additional risk, it seems like a worthy cause. (There's also a minor additional power cost, which really only impacts your provider and the environment…) > Date: Sat, 27 Dec 2014 12:54:24 +0100 > From: mikael <mikael(a)gutanet.sk> > > Hi, > some years ago I contributed to https://secure.worldcommunitygrid.org/ > via BOINC (https://boinc.berkeley.edu/) but stoped. > Forgive my paranoia, but I couldn't find proof that it really helps what > they write, that the provided cpu power could doesn't land at NSA for > example :/ > > Any different experience? > >> On 12/26/14 6:55 PM, Sebastian Urbach wrote: >> Dear list members, >> >> I would like to invite any operator, who has some idle Cores (CPU or >> GPU) left,to join the folding@home distributed computing project: >> >> http://folding.stanford.edu/ >> >> There is now a brandnew team called Tor Project (Unofficial) with the >> id 227615. Hope to see some of you there :-) >

3 2

News reporting exit node attacks
by Austin Bentley 27 Dec '14

27 Dec '14

Anyone have any more information on any of this stuff? They claim it's a 0day but I have yet to see proof.

3 4