June 2022 - tor-relays - lists.torproject.org

Identifying a relay
by Eddie 16 Jun '22

16 Jun '22

Have a question about how a server I connect to can tell I am running a guard/middle relay. All I can think of is that they check the published list of tor nodes against the IP. Or (maybe, but unlikely) portscan the IP and probe any open ports to determine the service. Are there any other methods that can be used. Background: The corp my wife works for blocked our IP. The excuse they gave was that it was due to a change made by a vendor they use to identify malicious IP addresses. I have been running the relay for almost 5 years without any previous flagging. They also state that running a middle relay is not in violation of any policy, but the vendor mis-identified our relay as an exit, hence blocking it. After changing the IP, the new IP was also blocked in less than 24 hours. My feeling is that the vendor is now just using the full list of tor nodes and indiscriminately blocking everything, despite what the corp security folks say. I'm looking for some sort of validation I can use to counter their claims.

5 5

(No Subject)
by Admin Platinum Host 14 Jun '22

14 Jun '22

Hi there, I currently own a Tor Relay that has been running since 2022-05-24. A day ago it restarted, which was a bit strange. Recently I found that the Relay has changed to a Guard Relay, which I am pleased about. I was wondering why the restart occurred as the VPS Server has been online since the first start. The Relay is called UKLondonRelay1 with the IP address 80.64.218.62. https://metrics.torproject.org/rs.html#details/B1B1CAD0A73EC5148B06A0A0E819… Any help on this matter would be appreciated. Kind regards, Leon The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.

1 0

[Workshop] Sysadmin 101 for (new) relay operators - June 4th @ 1900 UTC
by gus 14 Jun '22

14 Jun '22

Join us June 4th at 1900 UTC for new and prospective Tor relay and bridge operators on the basic "sysadmin foo" required to contribute to the network! ## Sysadmin 101 for new relay operators So you want to contribute to the open-source Tor network by running a relay or maybe a bridge? The Tor network is the most important tool for evading surveillance and bypassing internet censorship. And Tor relays and bridges are vital to the health and integrity of the Tor network. Millions of users rely on relays and bridges to stay safe, and how you configure and maintain that relay or bridge is critical. Volunteers aren't a nice enhancement. They are a core feature. Running a relay or a bridge raises frequent questions: * Should I run a relay or a bridge? * Should I run a relay or a bridge from a residential/home internet connection? * Which operating system should I run for my Tor node (hint: the one you are most comfortable with securing and maintaining) * More generally, what does it take to keep that relay or bridge operating safely, but both you and Tor users? This workshop will start with a presentation approaching some of the core issues that arise when running a Tor node. The session will move into an "ask me anything" discussion to approach other common and less common questions. The 90-minute event will be geared towards current and prospective Tor bridge and relay operators, particularly those relatively new to running public internet services. Seasoned Linux and BSD Tor operators will be attending the event ready to address the discussion. ## How to join the workshop The workshop is entirely free, and participants need to fill out this registration form. The event will take place on BigBlueButton, an online video conference platform, on June 4th at 1900 - 2030 UTC. You can register here: https://nc.torproject.net/apps/forms/cDLPxryHJcP5kMeW ## Facilitators The workshop will be facilitated by: * George (@gman999) - Tor *BSD Diversity Project member, Serge bridge directory authority maintainer, long-time relay operator and a wide variety of other contributions. * Kushal Das (@kushal) - RPM Tor maintainer and member of the Tor Community team. -- The Tor Project Community Team Lead

2 3

My current node setup
by Nyasaki Server 07 Jun '22

07 Jun '22

Hi to all new ppl that may have joined after the sysadmin101 workshop. I decided to share my setup here in case any newbies are interested and maybe somebody who is doing this for a while longer than me sees any flaws in my setup. Feedback is always welcome! I was tired of using the debian testing for running my node and decided to redo my node with arch because of the fast package updates and rolling release model. Currently my setup consists of 3 servers: Exit-Node: Archlinux with tor, unbound and prometheus running, prometheus is a nice metric collection service that nicely collects the statics that tor exposes. It's a VPS hosted at Terrahost in Norway for 20$ / month with 2 vCPU’s and 4GB Memory. Unbound only resolves requests from localhost, due to a high percentage of DNS timeouts in the past I decided to use this just as backup and resolve everything else via the dedicated DNS server. Tor is set up to expose the metrics to localhost, where prometheus is running. The actual prometheus metrics port is just allowed for 1 IP, thats the one my Dashboard server has. The firewall is set up to allow every port that's listed in my torrc, my non-default ssh port and the IP of my dashboard for the metrics port. DNS: Ubuntu 22.04 LTS (due to oracle clouds small selection of images) with unbound as DNS and prometheus. Hosted at Oracle Cloud via the free tier with 1 vCPU and 1GB Memory. The firewall is open for DNS requests from my node ip, metrics requests from my dashboard IP and non-default ssh port. Dashboard: Ubuntu 22.04 LTS with unbound as DNS and prometheus. Hosted at Oracle Cloud via the free tier with 1 vCPU and 1GB Memory. There's a Grafana dashboard and the Prometheus server running. Again all ports blocked but ssh and http/https are open Image of the Dashboard https://imgur.com/a/fYpRD8O My Node https://metrics.torproject.org/rs.html#details/017342E197B8C575A5C5301CD008… My GPG Key https://keyserver.ubuntu.com/pks/lookup?search=nyasaki.srv%40gmail.com&fing…

3 2

New OrNetStats Section: Largest Bridge Operators
by nusenu 07 Jun '22

07 Jun '22

Hi, OrNetStats got a new section today showing the largest bridge operators by advertised bandwidth grouped by ContactInfo: https://nusenu.github.io/OrNetStats/#bridge-operators-grouped-by-contactinfo This is possible because the Torproject started to publish bridge ContactInfos. The listing only includes operators with at least 50 Mbit/s aggregated advertised bandwidth. AROI support for bridges You can also protect your bridge ContactInfo against spoofing now. The same fields as for relays apply. If you have setup your AROI [1] on your relays already you can simply copy the ContactInfo to your bridges and publish the list of hashed bridge fingerprints under this URL: https://-your-hostname-/.well-known/tor-relay/hashed-bridge-rsa-fingerprint.txt After successful validation your bridges will be added to your operator level pages on OrNetStats. OrNetRadar will also be extended to support bridges. kind regards, nusenu [1] https://nusenu.github.io/OrNetStats/#authenticated-relay-operator-ids -- https://nusenu.github.io

3 3

Error 403 connecting to Sysadmin 101 Workshop
by Eldalië 07 Jun '22

07 Jun '22

Hello there, I'm trying to connect to the Sysadmin 101 Workshop, but after waiting for moderator approval I keep getting the following error (also in the attached image): You have been removed from the meeting User has an invalid sessionToken due to ejection --- 403 Any idea about what's happening here or how to solve it? -- Eldalië My private key is attached. Please, use it and provide me yours!

2 2

Will pay but need someone
by paul＠coffswifi.net 07 Jun '22

07 Jun '22

5 4

[Event] Relay Operators Meetup - May 21, 2022 @ 1900 UTC
by gus 07 Jun '22

07 Jun '22

Hello relay operators, The next Tor relay operator meetup will happen on Saturday, May 21 @ 1900 UTC. Where: BigBlueButton - https://tor.meet.coop/gus-og0-x74-dzn No need for a registration or anything else, just use the room-link above. We're working on the agenda here: https://pad.riseup.net/p/tor-relay-meetup-may-2022-keep Everyone is free to bring up additional questions or topics at the meeting itself. Please share with your friends, social media and other mailing lists! cheers, Gus -- The Tor Project Community Team Lead

5 6

Does Tor work with Intel QAT acceleration
by Andreas Bollhalder 07 Jun '22

07 Jun '22

Hi all I have my first Tor relay up und running. It's currently installed on a little desktop computer with an Intel i5 9500T CPU. My Internet connection is 10Gb/s symetric. From this bandwidth, I would be able to spend a good part for supporting the Tor network. With that little machine, it seems that it would max out at somewhere at ~30 MBytes/s. For my definitive Tor relay hardware, I'm currently researching some options, which would be capable of handling Tor traffic at the rate of 200 to 300MBytes. Even it would be used nowadays, but who knows whats coming in the future and I hope this relay would last 5 years ore so. It looks to me, that with a normal CPU, it's impossible to reach my goal. But then I encountered, that Intel has the Quick Assist Technoloy (QAT) integrated in some of their products (ie. Atom C3xx8). This QAT can be used with OpenSSL as a hardware accelerator for encryption. There also exist dedicated PCIe cards with QAT (ie. Netgate CPIC-8955). Searching the Internet, I couldn't find any information if QAT would be helpful with Tor. But Tor uses the OpenSSL library and this can use the QAT acceleration. Is there anyone who has tried this und can share his expirience? Thanks in advance Andreas

4 6

[warn] Received a bad CERTS cell: Link certificate does not match TLS certificate
by Felix 07 Jun '22

07 Jun '22

Hi all I found a message in the logs: Apr 16 15:07:46.000 [warn] Received a bad CERTS cell: Link certificate does not match TLS certificate -- Cheers Felix

2 1