Hi relay operators,
as you might have heard, MaxMind has changed access and use of their
GeoLite2 databases:
https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-us…
This affects Onionoo and tor, and I'm trying to find a working
alternative on the following ticket:
https://trac.torproject.org/projects/tor/ticket/32978
Today I think I found a possible alternative by using data from another
provider. But before I name it here, I'd first want to find out how
accurate it …
[View More]is.
I tried resolving relay IP addresses of relays that have been running in
the past week and compared that to our existing lookups using MaxMind's
October database.
The result is that 7669 relays (93%) had the same country code and ASN.
I put the remaining 7% on the following wiki page:
https://trac.torproject.org/projects/tor/wiki/doc/MetricsGeoipComparison
I'd like to hear from you which data source is right and which is wrong
(or if both are wrong).
If you'd like to help, please leave comments on the ticket or in the
"Comment" column on that wiki page by February 19, 2020.
Thanks for helping!
All the best,
Karsten
[View Less]
Dear Tor friends,
the NGO I am volunteering for (Digitalcourage e.V.) has been running
modest Tor exits for many years. Now we finally have the opportunity
to run a high-bandwidth exit relay because we found a data center with
a nice internet connection (20 Gbit/s) we may use.
My question is: What kind of hardware should we buy to utilize this
bandwith? I am told that we need an SFP+ networking card to connect to
the fibre optics cable, but what CPU and mainboard would you recommend
nowadays? …
[View More]It should fit into a 1 height unit 19" enclosure.
If you prefer to tell me in person: I will attend the Tor meetup in
Brussels on Friday <https://blog.torproject.org/events/tor-meetup-brussels>
and the subsequent Freedom Not Fear event <https://www.freedomnotfear.org/>.
Cheers,
Christian
--
Christian Pietsch | volunteering for Digitalcourage e.V., Germany
Digitalcourage e.V.: https://digitalcourage.de/
BigBrotherAwards Germany: https://bigbrotherawards.de/
Betting living without Google: https://pad.foebud.org/google-alternatives
[View Less]
Hi,
I was wondering how you will implement IPv6-only relays. What limits
will you set on how many relays can be per /(something)? Will you allow
only two relays per /64, for example? Do you have any plans for that
already?
Hello,
I have been watching the consensus weight and bandwidth of all of my 50 exit nodes drop consistently over the past few months. I have not made any hardware changes in my data center and actual customers have not complained about any performance issues.
Operating systems and Tor version are up to date. I'm dedicating a significant portion of bandwidth to these nodes - 10gbit/sec.
Am I having issues with the bandwidth authorities?
I'm growing frustrated with my performance to resources …
[View More]ratio, I should be doing far better than this.
Please throw ideas at me - open to any ideas.
Thanks!
John
Quintex Alliance Consulting
[View Less]
Hi all,
So here is my script for automatically starting a Windows (Expert bundle
based) relay or bridge when windows starts.
Open a new notepad document. Then add the following to it:
Cd c:/pathwheretorexpertbundleisindtalled
tor.exe -f torrc.txt (assuming your torrc is a text file). Then save this
file as batch file in the “startup” folder which should be at
C:\ProgramData\Microsoft\*Windows*\Start Menu\Programs\*Startup*
*What this does is it creates a script for windows to automatically …
[View More]run at
startup that tells the os to point to the directory tor expert bundle is
installed in and launch tor.exe and read the configuration file. This is
tested and working for me. But I am still trying to write a script to
automatically download and install the newest tor version when released as
well as obfs4, proving difficult as the url changes with each version. Any
thoughts are appreciated, thx very much.*
--
--Keifer
[View Less]
Last week i got an email with a warning that some of my relays are
missing the correct MyFamily setup and that i am a risk to do
end-to-end correlation attacks together with a list of all relays i
operate plus one relay which uses the same name than i use but is not
operated by me.
I already knew that not all of my relays have a correct MyFamily setup
because as long as i am not sure if they will stay i usually dont
include them in MyFamily because it is a pain to edit every torrc if
they …
[View More]anyway will disappear again soon.
I did it that way with all relays before and when i am sure that the
hoster is okay with me and that i am okay with the hoster i always
included them in MyFamily.
In the received email nothing was written that someone might expect an
answer from me so i deleted that email and to not trigger that warning
again i deleted the contact info from these specific relays for now.
A few days later i got a message that some of my relays will soon get
rejected because i did not responded to the previous email.
I explained why i do not have a correct MyFamily setup and i explained
that one of these relays is not operated by me even if it has the same
name than one of my relays.
The answer of the bad-relays mailing list was that its important for
them to know that one of the relays tried to look like me and that i
can use a third-party tool for setting up the MyFamily and that
further discussion about the MyFamily is more suitable for the relays
mailinglist.
What i learned from that:
- The bad-relays team expect an answer to their emails even if they do
not tell you that in the first email and rather send you a second
email that they will soon reject your relays if you dont answer them.
- I could do an end-to-end correlation attack
(I knew that already and would not use the same name and contact info
on my relays if i would like to do that)
- It is possible for them to pin relays to specific operators without
relying on the contact info or MyFamily entrys
(I assume they guess that by looking at the relays names because
otherwise they hadn't put a relay which is not operated by me into my
warning message)
- If setting up the MyFamily option is too painful for you then you
can use a third party tool which is not part of the torproject
- Relays names are free to choose and double entrys are okay but if
someone operates an relay with a name you choosed before then you can
report that operator to the bad-relays list because that operator
might be malicious
(Thankfully my relays are not called "Unnamed")
So for what reason do i set the MyFamily option beside making a Hidden
Service Guard discovery attack more easy?
[View Less]
Hi,
In order to simplify the operation of the Tor DNS exit list service,
which is used to identify if a connection is from a Tor exit relay, I am
planning to remove the features that filter by exit policy.
We recommend that if you are running an exit relay then you should
dedicate an IP address to that and not be using it for other activities.
As such, I do not think this is going to affect exit relay operators as
exit relays are unlikely to be talking to services that their exit
policy does …
[View More]not allow talking to anyway.
Still I am asking here to make sure that this change isn't going to have
any serious negative effects.
Has any operator deliberately excluded anything from their exit policy
in order to have TorDNSEL report to service operators that the
connection is not from an exit relay?
Thanks,
Iain.
[View Less]