- tor-relays - lists.torproject.org

New Relay
by Gary 18 Feb '18

18 Feb '18

Hello. I recently set up a new relay, jaffacakemonster2, I would be grateful if someone could answer some questions for me. 1. The bandwidth on Atlas is listed as "0". Is this a wait a few days/new relay issue or a configuration issue. I was surprised to find exit relays are default now, I hope I didn't disable too much so to speak. 2. My family on Atlas - the little numbers in brackets are not all the same, I only run two relays, however on the listings it reports sometimes two sometimes three. Are you meant to include "yourself" in the torrc or only other relays?? Thanks.

5 7

PerConnBWRate, RelayBandwidthRate, BandwidthRate
by nusenu 18 Feb '18

18 Feb '18

Hello, I've got two questions regarding some bw related torrc settings. 1) after reading tor's manpage section about PerConnBWRate: > PerConnBWRate N > bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits If set, do > separate rate limiting for each connection from a non-relay. You > should never need to change this value, since a network-wide value is > published in the consensus and your relay will use that value. > (Default: 0) I was wondering what value dir auths set in consensus, but I was not able to find anything that looked like it in consensus [1]. dir-spec [2] > "perconnbwrate" and "perconnbwburst" -- if set, each relay sets > up a separate token bucket for every client OR connectio [...]> First-appeared: 0.2.2.7-alpha > Removed-in: 0.2.2.16-alpha Does that mean that dir auths stopped including it since tor 0.2.2.16-alpha should we update the manpage then? Is there a default value if consensus does not say anything about it or is there no per connection limit in that case? 2) Is there a RelayBandwidthRate torrc setting in addition to BandwidthRate so tor instances which act as clients and relays at the same time can have independent bw rates for each role (client, relay)? BandwidthRate -> affects client and relay role RelayBandwidthRate -> affects only relay role is this correct? [1] https://collector.torproject.org/recent/relay-descriptors/consensuses/2018-… [2] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1847 -- https://mastodon.social/@nusenu twitter: @nusenu_

2 1

DoS stats from exits running 0.3.3.2-alpha
by nusenu 17 Feb '18

17 Feb '18

I was wondering if these unfriendly tor clients are using tor's default path selection or something else. If they do tor exit relays would have much smaller values in their DoS stats, right? Would any tor exit operator (listed bellow) running 0.3.3.2-alpha be willing to share (obfuscated/not exact counters) of their DoS log entries? (only if you do not have any additional firewall rules filtering packets) | abuse(a)to-surf-and-protect.net | | replace k with c : kontakt @ zwiebeltoralf . de | | <rok AT sent dot com> | | florentin aatt rochet ddoott be; LTC: LhRqJZu6U87BJNSUbkACHzVQsK39hJ3sMB | | tor-relays(a)coldhak.ca | | abuse(a)to-surf-and-protect.de | | J. Random Hacker <anonymizer(a)ccc.de> | | Exit by Reporters without Borders via https://www.torservers.net/ | | Neel Chauhan <neel AT neelc DOT org> | BTC: 1KogNvxdcXydDUNrPgqgtgV3AWktKPqXpS | | Random Person <tor AT cusse.org> | | OctaneZ-TOR <OctaneZ+toroperator(a)gmail.com> | | https://www.torservers.net/donate.html <support .AT. torservers .DOT. net> | | shallot protonmail com | | Random Person <killertor.abuse at gmail point com> | | Brandon Kuschel <kusch023 AT NOSPAM umn dot edu> | | <admin AT openbsd DOT se> | -- https://mastodon.social/@nusenu twitter: @nusenu_

6 9

cosworth@fni.pl Tor Relays MyFamily Configuration
by nusenu 17 Feb '18

17 Feb '18

Hello cosworth(a)fni.pl, thanks for adding 3 more relays, please do not forget to set your MyFamily option in your torrc files. https://torproject.org/relay-guide#ImportantifyourunmorethanoneTorinstance Let us know if you need help with that setting. regards, nusenu https://metrics.torproject.org/rs.html#search/contact:cosworth@fni.pl ornetradar(a)riseup.net: > 2018-02-16 > > | Up | Ext | JoinTime | IP | AS | CC | ORp | Dirp | OS | Version | Nickname | eFamMembers | FP | > |------+-------+------------+---------------+-----------------------+------+-------+--------+-------+-----------+------------+---------------+------------------------------------------| > | 1 | 0 | 13:06:34 | 52.158.232.63 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth1 | 1 | 8F9FE423932770C5912DCB10B1A0A797F4CFA782 | > | 1 | 0 | 13:07:24 | 40.65.111.124 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth2 | 1 | 59C8A3663F4CB5399DC5D3E9C8455ECD0818519C | > | 1 | 0 | 13:07:57 | 52.151.41.244 | Microsoft Corporation | us | 443 | 0 | Linux | 0.2.9.14 | Cosworth3 | 1 | 6466190F47F0E6DDBA566A64518E4317BCD123DE | > > https://nusenu.github.io/OrNetRadar/2018/02/16/a1 -- https://mastodon.social/@nusenu twitter: @nusenu_

1 0

Relay stuck at Bootstrapped 0%
by Paul 17 Feb '18

17 Feb '18

I am running two relays on debian (one on Raspian 9 and one on Debian 9) and one of them for over three months now. Some time ago the older one started to loop at startup. I reinstalled tor and it worked for some time only to loop again. The last notices entry looks like this "Feb 16 19:36:14.000 [notice] Bootstrapped 0%: Starting" and the next is "Feb 16 19:42:08.000 [notice] Tor 0.2.9.14 (git-a211f886ad759cab) opening log file." then it tells about opening the listeners and parsing the GEOIP files, then my relay identity and the bootstrapped 0% entry again (left some informational entries out). The debug log looks like it is getting descriptors and stuff correctly. What could be the problem?

2 7

Relay Search has moved!
by Iain Learmonth 17 Feb '18

17 Feb '18

Hi All, Relay Search has moved! It is no longer to be found at atlas.torproject.org (although a redirect is in place). The new home is at: https://metrics.torproject.org/rs.html If you prefer an onion service: http://rougmnvswfsmd4dq.onion/rs.html Thanks, Iain.

3 7

Api for atlas.torproject.org
by flipchan 17 Feb '18

17 Feb '18

Hey, Im trying to write an ip checker script for a mail server/firewall and i want to be able check if the ip is a tor relay, is their a api for looking up ips on atlas.torproject.org ? Or any other easier way to do it in like python :) -- Take Care Sincerly flipchan layerprox dev

6 6

tonull list
by TorGate 16 Feb '18

16 Feb '18

Hi to all, what is the best way to intergrade the tonull list in the torrc ? ExitPolicy https://tornull.org/tornull-bl.txt <https://tornull.org/tornull-bl.txt> is that working ? or via a include ? regards Steffen TorGate torgate(at)linux-hus.dk

2 2

DoS mitigation
by Fabian A. Santiago 16 Feb '18

16 Feb '18

Hello, I've been browsing the list archives looking for mentions of DOS mitigation. last night my exit relay went offline and when i logged into it, CPU was sitting at 100% and atlas reported mine as down and another service i have checking up time also did as well. so i rebooted my server and it was fine. i found this thread: 1) Drops off consensus for 1-2hours and returns w/o hsdir: DOS_CC_CIRCUIT_BURST_DEFAULT 90 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 100 FW: 20 connects per /32 ip, rate limited to 3 per sec. 2) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 20 connects per /32 ip, rate limited to 3 per sec. 3) Good (stable): DOS_CC_CIRCUIT_BURST_DEFAULT 20 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 20 FW: 20 connects per /32 ip, rate limited to 3 per sec. 4) Too conservative: DOS_CC_CIRCUIT_BURST_DEFAULT 10 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 10 FW: 20 connects per /32 ip, rate limited to 3 per sec. 5) Good (newly): DOS_CC_CIRCUIT_BURST_DEFAULT 50 DOS_CONN_MAX_CONCURRENT_COUNT_DEFAULT 50 FW: 100 connects per /32 ip, rate limited to 15 per sec. are these good mitigations? what else can or should be done? limiting memory use helpful? I'm running on ubuntu 16.04 and am using ufw for my firewall currently. are there any other suggestions given my platform? thanks for your help. -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

2 1

torservers internet connection
by TorGate 15 Feb '18

15 Feb '18

Hi again to all, i planing more torserver but what is the best solution for a god connection. there are 2 tor servers with a Bandwidth limit: 14.6 MB/s, burst: 29.3 MB/s is this enogth ? The internet connection has 60MB. Is this a god ide to setup more servers on this 60MB connection ? regards Steffen TorGate torgate(at)linux-hus.dk

3 11