- tor-relays - lists.torproject.org

Probabilities
by Vitor Milagres 04 Dec '19

04 Dec '19

What do guard, middle and exit probabilities mean? Say, for example, that the middle probability for a certain relay is 0.15% and the guard probability for the same relay is 0.20%. What does that mean? Thanks

2 1

Accounting limits seem to cause permanent hibernation
by Manuel Wiesinger 03 Dec '19

03 Dec '19

Hello everyone, I configured an accounting limit on my tor relay. 1-2 days after restarting the tor service the relay seems to go into permanent hibernation. Once I restart the service traffic is sent and received as expected, however after 1-2 days it seems to go into permanent hibernation again until I restart the service. The longest hibernation period was for about three month(!). My configuration: Tor 0.4.1.6, on FreeBSD 12.1. (nothing else running on the machine) My relevant settings: AccountingMax 128 GBytes AccountingStart day 00:00 RelayBandwidthRate 2560 KBytes RelayBandwidthBurst 5120 KBytes Logs since the last restart: https://pastebin.com/wk04zDC8 Metrics: https://metrics.torproject.org/rs.html#details/A3BB86337E003A2668E016466EA3… (The peeks in the graphs match the times when I manually restarted the service) Since I experience this 'permanent hibernation' since at least last August, I wonder if it's expected behavior, e.g., caused by the small limit of 128 GB per day, or if it's a bug (possibly related to this one: https://lists.torproject.org/pipermail/tor-relays/2019-October/017862.html ?). Best, Manuel

3 3

Version 0.3 of obfs4 bridge docker image released
by Philipp Winter 27 Nov '19

27 Nov '19

We recently released version 0.3 of our obfs4 bridge docker image. To upgrade to the new image or deploy a new container from scratch, please take a look at our instructions: <https://community.torproject.org/relay/setup/bridge/docker/> Here's what changed in our new version: * We added a new script, 'get-bridge-line', which prints your bridge line. Run it as follows: docker exec CONTAINER_ID get-bridge-line * We improved our setup instructions. As part of this, we added a Makefile that facilitates the process of deploying a container. Here are the new instructions: <https://community.torproject.org/relay/setup/bridge/docker/> * Our new Makefile uses docker volumes to persistently store tor's data directory. This means that you can now upgrade to future docker images (which involves deleting your existing container) while keeping your bridge's identity. * We made tor log to stdout in addition to its log file, so the following command now shows tor's entire log output, and not just the first few lines. docker logs $CONTAINER_ID * The bridge can now bind to obfs4 ports < 1024. * One can now run multiple bridge containers on a single machine. Thanks to thymbahutymba for providing a great template for our Makefile and for suggesting docker volumes. Cheers, Philipp

1 0

MyFamily line commented out but stays valid?
by [REDACTED] 26 Nov '19

26 Nov '19

Hi, when i comment out the MyFamily line with an # in the torrc on one relay it seems to be still handled like before. Hitting x in nyx or waiting a few days or rebooting does not make any change. Is this expected? I expected that relay to show as part of no family now and listed as "Alleged Family Member" on all other relays which still list that fingerprint in their torrc.

5 7

switching ISP and Fallback listing
by René Ladan 24 Nov '19

24 Nov '19

Hi, I might switch my ISP soon-ish from XS4ALL to Freedom Internet so my relay [1] will get a new AS number and IPv4/IPv6 address, how does this impact being listed as a fallback candidate? I'm currently not selected as a fallback. (And yes, I know about fallback needing to be long-term reliable, but this event was caused by the big corporate powers :( ) Thanks, René [1] https://metrics.torproject.org/rs.html#details/4E8CE6F5651E7342C1E7E5ED031E…

2 1

bridge relay search is "wrong"
by David Strappazon 24 Nov '19

24 Nov '19

Hi, My bridge appears down when checking "tor relay search" on smartphone and up when checking the site from a laptop. Is there a reason? does someone already had the same issue? Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 4

Newbie question about bridge
by David Strappazon 22 Nov '19

22 Nov '19

Hi, all I configure a bridge on October the 31th. On the first days I had to reboot it multiple times but few days later I had all the necessary flags, fast and stable include. Now I'm at 9+ days of uptime, I lost the fast and stable flags and the advertised bandwidth is at 792 KiB/s when my bandwidth is configured at 3 MB/s with burst at 6 MB. Of course I haven't seen a single client. My question is: is it normal and part of a relay/bridge lifecycle or is there something wrong? Ps: on metrics.torproject.org, everything is fine. Nothing wrong in my logs either and I can use it when configuring my it in a tor browser. Any opinions or advices would be welcome. David. Envoyé depuis ProtonMail mobile

1 0

New operator
by Mario Costa 21 Nov '19

21 Nov '19

Hello everyone, I have some newbie questions and I hope this is the right place to ask them. I started operating a relay on my VPS for a bit more than a month and everything seems to be going well. I constantly have about 200 outbound and 2000 inbound connections, but in nyx I almost never see any circuits. What does it mean? Do I see circuits only when someone is actually using my relay, i.e. in Tor Browser? To further support the project I decided to run a bridge at home using a Raspberry Pi. How do I know when it is being used? I rarely see any traffic. Sometimes I see one outbound connection in nyx and some circuits open, but I never see an inbound connection to port 80 (the obfs4 port I chose). Why does the bridge have open circuits more often than the relay? I couldn’t find any answers online, so I hope to clear things out here. Regards, m. _____________________________________________________________ GPG fingerprint: 6C3B 0069 30C4 0F16 E5F6 690E 7D2E 100E C3C4 7105 <https://keys.openpgp.org/vks/v1/by-fingerprint/6C3B006930C40F16E5F6690E7D2E…>

2 2

Assertion pol->magic failed
by Logforme 21 Nov '19

21 Nov '19

Tonight my relay 855BC2DABE24C861CD887DB9B2E950424B49FC34 restarted with the following in the log file: Nov 20 19:08:07.000 [notice] Heartbeat: Tor's uptime is 20 days 12:00 hours, with 29939 circuits open. I've sent 46193.23 GB and received 45940.92 GB. Nov 20 19:08:07.000 [notice] Circuit handshake stats since last time: 36379/36379 TAP, 591207/591207 NTor. Nov 20 19:08:07.000 [notice] Since startup we initiated 0 and received 655 v1 connections; initiated 0 and received 191219 v2 connections; initiated 1 and received 191367 v3 connections; initiated 75189 and received 1351289 v4 connections; initiated 147903 and received 1783201 v5 connections. Nov 20 19:08:07.000 [notice] DoS mitigation since startup: 11 circuits killed with too many cells. 3810290 circuits rejected, 67 marked addresses. 349630 connections closed. 7988 single hop clients refused. Nov 21 00:18:01.000 [err] tor_assertion_failed_(): Bug: ../src/core/or/circuitmux_ewma.c:165: TO_EWMA_POL_CIRC_DATA: Assertion pol->magic == 0x761e7747U failed; aborting. (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: Assertion pol->magic == 0x761e7747U failed in TO_EWMA_POL_CIRC_DATA at ../src/core/or/circuitmux_ewma.c:165: . Stack trace: (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(log_backtrace_impl+0x47) [0x55d5e9f968e7] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(tor_assertion_failed_+0x147) [0x55d5e9f919c7] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(+0x8fe84) [0x55d5e9e14e84] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(+0xb839f) [0x55d5e9e3d39f] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(circuit_receive_relay_cell+0x29a) [0x55d5e9e419fa] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(command_process_cell+0x2fc) [0x55d5e9e23a1c] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(channel_tls_handle_cell+0x333) [0x55d5e9e030d3] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(+0xa773f) [0x55d5e9e2c73f] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(connection_handle_read+0x990) [0x55d5e9df0500] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(+0x707ee) [0x55d5e9df57ee] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/lib/x86_64-linux-gnu/libevent-2.0.so.5(event_base_loop+0x6a0) [0x7fb82bb5f5a0] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(do_main_loop+0x105) [0x55d5e9df6b25] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(tor_run_main+0x1225) [0x55d5e9de4545] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(tor_main+0x3a) [0x55d5e9de193a] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(main+0x19) [0x55d5e9de14b9] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7fb82a3b32e1] (on Tor 0.4.1.6 ) Nov 21 00:18:01.000 [err] Bug: /usr/bin/tor(_start+0x2a) [0x55d5e9de150a] (on Tor 0.4.1.6 ) Nov 21 00:18:02.000 [notice] Tor 0.4.1.6 opening log file. Nov 21 00:18:02.605 [notice] We compiled with OpenSSL 101000bf: OpenSSL 1.1.0k 28 May 2019 and we are running with OpenSSL 101000cf: OpenSSL 1.1.0l 10 Sep 2019. These two versions should be binary compatible. Nov 21 00:18:02.606 [notice] Tor 0.4.1.6 running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0l, Zlib 1.2.8, Liblzma 5.2.2, and Libzstd 1.1.2. <...> Nov 21 00:18:03.000 [notice] Bootstrapped 0% (starting): Starting Nov 21 00:18:07.000 [warn] Incorrect ed25519 signature(s) Nov 21 00:18:10.000 [notice] Starting with guard context "default" <...> Should I open a ticket?

2 1

Strange OpenPGP behavior during key import under Debian Buster
by Olaf Grimm 17 Nov '19

17 Nov '19

Hello! I repeatedly try to install Tor under Debian Buster and fail again at key import. With the last system I found the solution by activating the "Experimental repos" under Debian. This time it didn't work and I kept looking. Before repair: ... 2019-11-15 21:18:33 (294 KB/s) - ‘A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc’ saved [19665/19665] gpg: no valid OpenPGP data found. gpg: Total number processed: 0 My procedure: I opened the key copied from the Tor website and found at the end of the key the spelling ... sGsEejVHxvX7/iOE3rM= =47bK -----END PGP PUBLIC KEY BLOCK----- I changed the last line intuitively with an editor to ... sGsEejVHxvX7/iOE3rM==47bK -----END PGP PUBLIC KEY BLOCK----- and saved it. Afterwards the import worked! gpg2 --import ./A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc gpg: key EE8CBC9E886DDD89: 36 signatures not checked due to missing keys gpg: key EE8CBC9E886DDD89: public key "deb.torproject.org archive signing key" imported gpg: Total number processed: 1 gpg: imported: 1 gpg: no ultimately trusted keys found gpg2 --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add - OK I have no explanation! Best regards! Olaf Translated with www.DeepL.com/Translator

3 3