October 2015 - tor-relays - lists.torproject.org

(no subject)
by 刘东晨 08 Oct '15

08 Oct '15

5 4

Obfsproxy OSX help
by Geoff Down 08 Oct '15

08 Oct '15

Hi all, is anyone willing to talk me through getting Obfsproxy working on OSX10.4? I've got as far as Step 3 on https://www.torproject.org/projects/obfsproxy-instructions.html.en#instruct… but can't find the Obfsproxy binary; and since I have no idea what 'pip' does, even though it reports the 'package' as installed, I am at a loss. Regards, Geoff Down -- http://www.fastmail.com - Access your email from home and the web

2 5

how important is configuring DNSSEC root trust anchor for 'unbound' running on an exit node?
by Dhalgren Tor 03 Oct '15

03 Oct '15

Is it important to configure the DNSSEC trust-anchor for an instance of 'unbound' running on an exit node? I put a lot of work into setting up a new exit and want to take a break, but just noticed this item. 'unbound' was built from source rather than installed from a distribution, so this step must be performed manually. The relay resides in the high-quality German LeaseWeb network and the risk of DNS mischief appears low.

1 1

excessive bandwidth assigned bandwidth-limited exit relay
by Dhalgren Tor 03 Oct '15

03 Oct '15

Have a new exit running in an excellent network on a very fast server with AES-NI. Server plan is limited to100TB so have set a limit slightly above this (18000000 bytes/sec) thinking that bandwidth would run 80-90% of the maximum and average to just below the plan limit. After three days the assigned bandwidth for the relay is going up instead of moderating--looks like the measurement system has a problem in this case. Just dropped the limit to 16500000 to stay below 100TB with maximum load. A good number appears to be around 65000 to 70000, but 98000 was just assigned. What can be done to extract proper rating from measurement system? Tried setting TokenBucketRefillInterval to 10 milliseconds for more exact control but this has not helped. Should an IPTABLES packet-dropping limit be established? Can the rating system be fixed?

7 28

replace BandwidthRate with "traffic control" on busy routers
by Dhalgren Tor 03 Oct '15

03 Oct '15

Routers running at or near a BandwidthRate setting offer terrible latency and induce connection time-outs. Refuse all DIR-port requests with "HTTP/1.0 503 Directory busy, try again later ". 'tc' ingress filter is dramatically better for rate-limiting. For case and 'tc' example see final post https://lists.torproject.org/pipermail/tor-relays/2015-October/007901.html initial post https://lists.torproject.org/pipermail/tor-relays/2015-October/007863.html

1 0

Onionoo down?
by Geoff Down 03 Oct '15

03 Oct '15

A query using Globe stalls at the 'processing - please wait' stage, so I assume the problem is actually with Onionoo. GD -- http://www.fastmail.com - Same, same, but different...

4 4

how reliable is the advertised vs consumed bandwidth on tor metrics
by jensm1 02 Oct '15

02 Oct '15

I just stumbled over this (https://metrics.torproject.org/bandwidth-flags.html) graph at tor metrics, which shows advertised exit bandwidth to be around 40Gbit/s and consumed exit bandwidth around 20Gbit/s. This would mean that we have about twice as much exit bandwidth than we need, which I strongly doubt. So now I'm curious about what causes this disparity. Thanks!

2 1