February 2014 - tor-relays - lists.torproject.org

running Tor relay live with AddressSanitizer
by starlight.2013q4＠binnacle.cx 28 Jun '14

28 Jun '14

Has anyone tried running a live relay with an image built using GCC 4.8 and -fsanitize=address? AddressSanitizer documentation says it should be no worse than about x4 on CPU and typically about x2, so it looks reasonable to try. I'm seeing peak CPU of about 7-8% of a 2.2GHz AMD core. I'd probably create a static build, with 'libevent' and 'tor' compiled using -fsanitize=address -O1 -fno-omit-frame-pointer -g per the Google documentation and 'libz' compiled normally since 'zlib' is stable and mature. Any thoughts or experience? Thanks

3 6

Need help to get TorDNSEL compiled
by BlueStar88 26 Jun '14

26 Jun '14

Hi there, today I've read about the outage at "check.torproject.org". Since my torcheck-service "torcheck.xenobite.eu" needs the underlying TorDNSEL feature I'm trying to get this to work on my host. Like this I won't need to query the TorDNSEL-part of "check.torproject.org" anymore. I'm not into programming and do not know anything about haskell, c++ and such. So be patient with me on such matters. ;-) I've DL'ed the code from the internet website mirror [2]. I've prepp'ed all the dependencies using lucid binary packages: ghc6 6.12.1-12 libghc6-mtl-dev 1.1.0.2-10 libghc6-network-dev 2.2.1.7-1 libghc6-time-dev 1.1.2.4-2 libghc6-hunit-dev 1.2.2.1-2 libssl-dev 0.9.8k-7ubuntu8.15 libghc6-stm-prof 2.1.1.2-5 libghc6-binary-prof 0.5.0.2-1 First error I got on compile attempt was: src/TorDNSEL/Main.hs:81:21: parse error on input `#' That was quite easy thought: import GHC.Prim (Addr#) I deleted the '#' hopefully making it correct this way. Next error is some numbers too high for me now: src/TorDNSEL/DeepSeq.hs:20:7: Could not find module `Data.ByteString': It is a member of the hidden package `bytestring-0.9.1.5'. Perhaps you need to add `bytestring' to the build-depends in your .cabal file. Use -v to see a list of the files searched for. The libghc6-bytestring-dev-0.9.1.5-125af ist installed by it's main package ghc6 6.12.1-12. Any ideas? Or are there some binary packages for TorDNSEL around, to make this more easy for me? :-P Thanks, BlueStar88 [1] https://blog.torproject.org/blog/tor-check-outage-03-and-04-july-2013 [2] https://www.torproject.org/tordnsel/dist/tordnsel-0.0.6.tar.gz

3 7

Any Tor/Linux coaches in Sydney?
by I 14 May '14

14 May '14

5 6

Setting up AWS cloud-relay - don't reserve expensive storage!
by Nick Sheppard 31 Mar '14

31 Mar '14

Hi all, I set up an AWS EC2 cloud Tor relay a month ago and made an expensive mistake. Perhaps others may learn from my example! I followed the instructions on the tor-project website, and found that it actually is quite a simple process, as it says. I did notice that the AWS setup screens I was seeing were different from the screenshots on the website, but they were asking me similar questions so I just went with the defaults where the website said "No changes". I didn't look closely enough. Everything went to plan and I watched the relay work for a month. However, on the AWS EC2 Management console I neglected to click on "Services" then "Billing" to see how much they were charging me. At the end of the month I got a bill for 120 dollars. And Amazon were quite right - they were charging me for the 1024 GB of storage I had accidentally asked for by not changing the default when I set up the instance. The first 30 GB were free, the other 994 I was paying for. And I was only actually using 1.5 GB ... There doesn't seem to be any way of shrinking the storage of an existing instance (though it can be expanded, now, with EBS, Elastic Block Storage), so I had to terminate it (which deletes the storage) and create another instance with a more reasonable 10 GB (of which df tells me I'm now using 11%). So ... if you've recently set up an AWS EC2 cloud relay with the Tor AMI, check your storage, and your billing! I think the option to specify your storage amount (with its default of 1024 GB) may have been introduced when AWS introduce EBS instead of just instance-backed storage (which may have defaulted to the size of the AMI??). In any case, I think the tor-project website AWS screenshots urgently need to be changed to reflect the current setup procedure, with a warning not to accept the 1024 GB default and an explicit recommendation about the amount of storage to ask for (was my guess of 10 GB reasonable?). Oh well, I have gained 100 dollars worth of wisdom from the episode. My way of "Don't look too closely, and hope for the best at the end of the month" was *not* a good idea. Nick Sheppard

7 20

External connections to port 9050
by Greg W 24 Mar '14

24 Mar '14

I turned on some logging on my firewall today to help troubleshoot and issue and noticed a load of connections from external addresses to port 9050 on my exit node. I don't think that should be publicly accessible. Am I wrong about it being publicly accessible and does anyone else see lots of connection attempts on that port? Thanks, Greg

4 7

ScrambleSuit maintenance question
by Delton Barnes 07 Mar '14

07 Mar '14

Inexperienced Debian administrator here with a question about how to maintain the new obfsproxy/Tor for ScrambleSuit. I installed as follows: 1. Updated /etc/apt/sources.list (new lines prefixed with *): deb http://server.name.redacted/debian wheezy main contrib non-free *deb http://server.name.redacted/debian unstable main contrib non-free deb http://server.name.redacted/debian-security wheezy/updates main contrib non-free deb http://deb.torproject.org/torproject.org wheezy main *deb http://deb.torproject.org/torproject.org tor-nightly-master-wheezy main 2. Created apt.conf to prevent all packages from being pulled from unstable by default: echo 'APT::Default-Release "stable";' > /etc/apt/apt.conf 3. Edited torrc with following: ServerTransportPlugin obfs3,scramblesuit exec /usr/bin/obfsproxy managed 4. Installed the new packages: apt-get update apt-get -t unstable install obfsproxy apt-get upgrade <-- Installed Tor nightly. 5. service restart tor My question: Is there a way to configure things so obfsproxy and Tor will later automatically be upgraded to a *stable* release that includes ScrambleSuit? And how to know when I need to upgrade obfsproxy and Tor? Thanks, Delton

2 2

(untrusted) Raspberry Pi binary .deb packages for Tor 0.2.4.18-rc
by Gordon Morehouse 06 Mar '14

06 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I've built Tor 0.2.4.18-rc for the Raspberry Pi and released unofficial packages[1]. They are signed with my GPG key, but as always, if you don't trust binary packages from some dude on the internet, please see the instructions to compile them for yourself[1]. 1. https://github.com/gordon-morehouse/cipollini/tree/master/raspbian_packages… 2. https://www.torproject.org/docs/debian.html.en#source Best, - -Gordon M. -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJSj5ghAAoJED/jpRoe7/ujpugIAL8U1aGVZQ4FSqCgRac0g4oW pqEGYT/aHI7GYX1J0ruS5kSjB7VGBqqskvb3LmWkSjMbJwX7MqTLbfUBj/wX8db8 sHTH/cdFNin3qazjrMnS0fe6bJ/AlimPcQSQfeEPQ3w5Wqk2Lb/qxVEY0cGxwYDn p6P4KItegJkWcT7pKHCcIkLcjUHjalS4N9xUOg0oFh1cXzA4YRrMbrmHuNuNYtOG OV09+56jlOJm6ApsYHNiDO/3lYB8xPnaMs8EbOVWUjBsh0kraTusXvNs9IquZEXd Pk83VhavdsiAmksz5u6q7+gVIXsBkwxTBlpybj5aWNOwze2D4DNe/eBKVzLTu2w= =7g1s -----END PGP SIGNATURE-----

2 1

Problem encountered with Bandwith Authority algorithm (was : "bandwidth authority algorithm is cracked")
by julien.robin28＠free.fr 03 Mar '14

03 Mar '14

Hi everybody, 15 days, 16 hours and 15 minutes (without any restart) have passed since my 2 involved in this problem are restarted (started at the same time). And there is something very clear and interesting to see. They both have restarted from nearly zero (~100kB/s) in the first days, and a problem is still completly present on 1 of the 2 identity : -> The first one (the older one also) is stuck at less than 1MB/sec (5,510 in consensus weight) - ArachnideFR94 -> The second one is growing, growing and growing, now around 9MB/sec (and more than 75,000 in the consensus weight) - ArachnideFR94v2 It can be very clearly seen by observing graph on Tor Atlas. (But there is no more bandwith earthquake like I had on december.) On this machine, the first daemon is launched by /etc/init.d, while the second one is manually lauched via another non-admin user. No differences, same nice value, completely the same torrc file apart from nickname, DirPort, ORPort and MyFamily. Pretty large max bandwith for both of them : RelayBandwidthRate 25600 KB RelayBandwidthBurst 122070 KB ShutdownWaitLength 90 -- Into the log file : The only one difference was this (I just corrected it) - it was on the server that is working perfectly fine (ArachnideFR94v2) : Jan 30 06:07:03.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [6978 similar message(s) suppressed in last 21600 seconds] Jan 30 12:07:17.000 [warn] Failing because we have 4063 connections already. Please raise your ulimit -n. [20004 similar message(s) suppressed in last 21600 seconds] -> Oops :s I know very well this problem and I just forgot to prevent it this time - Sorry for that - Corrected by editing /etc/security/limits.conf and adding some lines about the user used by my second tor daemon - I just restarted this one by SIGINT, wait and new launch (logged with a much better ulimit !) today at 12:35 UTC. Absolutely nothing else abnormal into the log of the 2 daemons. And the problem of ulimit was on the one that runs perfectly well! -- Any idea of why the first one is completely stuck at such a low value ? The next steps would be to set the 2 tor daemons on the /etc/init.d using the Multiple Tor Processes example at www.torservers.net on this machine, and to watch if ArachnideFR94v2 launched by /etc/init.d is still working as well as today. If no solution appears, may be trying to re-install the entire system, and watch what happens would be interesting. If still no solutions, it will be complicated to understand ! Best regards, and thank you in advance for your ideas Julien ROBIN

1 1

is comcast throttling relays?
by Steve Rich 02 Mar '14

02 Mar '14

Hey, I am running the following relay, and never see traffic going more than 250k. Is Comcast throttling non-exit tor proxies? https://atlas.torproject.org/#details/7E6183143778259F025576A5803E3334AB95C…

5 7

Effects of Rebooting?
by Tor Relay 28 Feb '14

28 Feb '14

I am a n00b relay (OnionTorte) operator, and, as such, know lamentably little of what I'm doing. (Yes, I'm one of *those* relay operators.) When I went to bed last night I had an HSDir flag, but it has since disappeared. And since this A.M. my consensus was halved. A bit of promiscuous pokings-about in relay metrics leads me to think that this happened in the wake of my having had to reboot my machine to unwedge it. Speed Test shows that even on the worst of BadHair Days my u/l speed doesn't sink below 15Mb/s (1900KB/s), and almost always cruises at >25Mb/s, so I don't think that it's so much a bandwidth issue as one of perceived reliability. :( I read https://blog.torproject.org/blog/lifecycle-of-a-new-relay but wasn't able to take away as much as I would have liked. If somebody can explain to me, using small words and interpretive dance as befits a callow contributor, what happened I should certainly appreciate it. Thanks, P -- Dirt kicked to the curb goes into the gutter. Professionals kicked to the curb go into retail.

2 1