- tor-relays - lists.torproject.org

Optimizing Tor Relay
by friendlyexitnode 17 Feb '21

17 Feb '21

Hello everyone, I'm running a very small family of exit nodes (who are friendly) and was curious if anyone had any advice on ways to optimize their relay configuration? I'm running them all on Ubuntu 20.04. I've reviewed the [Arch Wiki,](https://wiki.archlinux.org/index.php/Tor#+100Mbps_Exit_Relay_configu… but didn't notice much of an improvement. Anyone have an advice to improve Tor performance for relays? - The Friendly Exit Node Family

2 1

Is my relay broken? No stable, hsdir or guard flags
by raltullou＠posteo.org 17 Feb '21

17 Feb '21

Hi, I'm looking for help because I can't figure out what's going on. https://metrics.torproject.org/rs.html#details/11DF0017A43AF1F08825CD5D9732… - At the beginning of January the relay seems to have lost the guard flag - A week ago I checked and noticed that the relay had also lost the stable flag despite having an uptime of >2 months at that point - A week ago I rebooted the server but the situations hasn't changed - flags are still gone - metrics.torproject graphs show that the server has been transmitting data the entire time - so it doesn't seem like I missed some downtime - Serverlogs show no problems - Relay has been running continuously for almost 4 years and only gets rebooted for kernel/tor upgrades -> so uptime and MTBF should not be a problem Is there a problem on my side? Is there anything I can do or check? It is a fallback relay - is it still useful as such? TY

4 7

Huge increase in bridge connections
by Eddie 14 Feb '21

14 Feb '21

Just trying to understand if this is normal or if something else is going on. I have 2 bridges on a VPS. One is designated as "moat", the other "email". Until earlier today, for over a year, both averaged under 10 unique clients, per 6-hour reporting period. Today, the "moat" bridge, in a single period went from single digits to almost 300 unique clients. Is this normal/possible or what other explanation could there be.

4 3

Bridge Location matter?
by Astroskis Lists 13 Feb '21

13 Feb '21

Hello, Does the physical location matter for a Bridge? For example if I'm able to put it in a unusual geographical place would that benefit the network? I'm asking because I believe when you request a bridge it does not take location into account so would it matter? Thank you

3 3

ulyssa
by Anonforpeace 12 Feb '21

12 Feb '21

Hello: Does anyone know what repo I need to install for Linux Mint Ulyssa 20.1? Trying to update my bridge and can't find this repo. Thanks

2 1

Re: [tor-relays] 'reserved' bridge distribution mechanism average time until use
by Robert Bloch 11 Feb '21

11 Feb '21

How long does it take for a bridge with 'reserved' bridge distribution to see its first user? On average.

1 0

cannot update respository
by Anonforpeace 10 Feb '21

10 Feb '21

Hello: I hope you can help. My bridge is offline because: Please upgrade! This version of Tor (0.4.2.7) is not recommended, according to the directory authorities. Recommended versions are: 0.3.5.10,0.3.5.11,0.3.5.12,0.3.5.13,0.4.3.3-alpha,0.4.3.4-rc,0.4.3.5,0.4.3.6,0.4.3.7,0.4.3.8,0.4.4.1-alpha,0.4.4.2-alpha,0.4.4.3-alpha,0.4.4.4-rc,0.4.4.5,0.4.4.6,0.4.4.7,0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6 When I try to update it I get this: darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ lsb_release -c Codename: ulyssa darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ cd /etc/apt/sources.list bash: cd: /etc/apt/sources.list: Not a directory darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:~$ cd /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ ls official-package-repositories.list tor-project.list darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ lsb_release -c Codename: ulyssa darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo nano /etc/apt/sources.list.d/ darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E8… | gpg --import gpg: key EE8CBC9E886DDD89: 83 signatures not checked due to missing keys gpg: error writing keyring '/home/darkhoodie/.gnupg/pubring.kbx': Permission denied gpg: error reading '[stdin]': Permission denied gpg: import from '[stdin]' failed: Permission denied gpg: Total number processed: 0 darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E8… | gpg --import gpg: key EE8CBC9E886DDD89: 83 signatures not checked due to missing keys gpg: error writing keyring '/home/darkhoodie/.gnupg/pubring.kbx': Permission denied gpg: error reading '[stdin]': Permission denied gpg: import from '[stdin]' failed: Permission denied gpg: Total number processed: 0 darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add - gpg: directory '/root/.gnupg' created gpg: keybox '/root/.gnupg/pubring.kbx' created gpg: WARNING: nothing exported E: This command can only be used by root. darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ sudo apt update Ign:1 http://packages.linuxmint.com ulyssa InRelease Hit:2 http://packages.linuxmint.com ulyssa Release Hit:3 http://archive.canonical.com/ubuntu focal InRelease Hit:5 http://security.ubuntu.com/ubuntu focal-security InRelease Hit:6 http://archive.ubuntu.com/ubuntu focal InRelease Hit:7 http://archive.ubuntu.com/ubuntu focal-updates InRelease Hit:8 http://archive.ubuntu.com/ubuntu focal-backports InRelease Ign:9 https://deb.torproject.org/torproject.org ulyssa InRelease Err:10 https://deb.torproject.org/torproject.org ulyssa Release 404 Not Found [IP: 95.216.163.36 443] Reading package lists... Done N: Ignoring file 'sources.list.d' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension E: The repository 'https://deb.torproject.org/torproject.org ulyssa Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. darkhoodie@darkhoodie-HP-Compaq-Pro-6300-SFF:/etc/apt/sources.list.d$ Not sure where I'm going wrong. Please help. Thank you

2 1

Re: [tor-relays] Tor on Rpi (relay.jackash@simplelogin.fr)
by Patrice Bönig 10 Feb '21

10 Feb '21

> Hello Patrice > > would be great if you can share your script , thanks. Hi, sure, with pleasure. But I have to say I am not a professional programmer. There are surely better ways to do this, but it works for me. Before you can use it you have to make it executable with this command: chmod +x build_tor_from_source.sh And make sure to read the info in the script. After that you are ready to roll. regards Patrice ## build_tor_from_source.sh ######################################################################## ####################################################### ## This script is for a automatic installation of tor out of the sources. ## What it will do: # # 1. It downloads the newest tarball, compiles and installs it. # 2. It copies the data dir (with the keys) and the torrc. # 3. It removes all installations files. # 4. It starts tor as the current user # 5. It adds tor as crontab (@bootup) of current user # 6. changes the permissions of the tor logs, tor folder and torrc for the current user # 6. At the end it shows the logs to check the tor startup process ## What are the requirements for this installation script # # - the torrc must be in the same folder as this script # - check the paths used in this script if they fit for your system (the default paths are for Pi OS) # - this script must be in a location where it has write permisssions (for example home folder of current user) ## What this script can't do # # Tor is not compiled wioth systemd support, so this won't work until you switch it on. ####################################################### #! /bin/bash # echo output colour # green="tput setaf 2" white="tput setaf 7" yellow="tput setaf 3" red="tput setaf 1" ##################### $yellow echo -e "\n\n####################" echo -e "# Tor Installation #" echo -e "####################\n" # show tor version for comparison $yellow echo -e "\nTor version on the system ->" $green tor --version | cut -b 13-20 echo # new line $yellow echo -e "Tor version online available ->" $green lynx -nonumbers -dump https://dist.torproject.org | grep "https://dist.torproject.org/tor-" | grep -v "alpha" | grep -v "rc" | grep -v "asc" | tail -1 | cut -b 33-40 # question for installation $red echo -e "\n\n" read -p "Installing new version? [y/n]: " -n 1 -r echo if [[ $REPLY =~ ^[Yy]$ ]] then $green echo -e "\nstopping tor on system...\n" $white sudo killall tor $green echo -e "\ndone.\n" $green echo -e "\nsystem update and installing needed packages...\n" $white sudo apt update sudo apt upgrade -y sudo apt install -y libevent-dev libssl-dev zlib1g-dev asciidoc lynx $green echo -e "\ndone.\n" $white build_dir="temp" mkdir $build_dir cd $build_dir # in ./temp $green echo -e "\ndownloading tor from git repo...\n" $white lynx -nonumbers -dump https://dist.torproject.org | grep "https://dist.torproject.org/tor-" | grep -v "alpha" | grep -v "rc" | grep -v "asc" | tail -1 | xargs wget tar -xvf tor*.tar.gz cd `ls -d */` # in ./temp/tor-* $green echo -e "\ndone.\n" $green echo -e "\nbacking up data dir, and changing its user..." $white sudo cp -arv /var/lib/tor ./tor sudo chown -R $(whoami) ./tor $green echo -e "\ndone.\n" $green echo -e "\ncompiling, removing old version, installing new version...\n" $white ./configure && make && sudo make uninstall && sudo make install $green echo -e "\ndone.\n" $green echo -e "\ncopying torrc and restoring data directory...\n" $white sudo cp -av ../../torrc /usr/local/etc/tor/torrc sudo chwon $(whoami):root /usr/local/etc/tor/torrc sudo cp -arv ./tor /var/lib/tor $green echo -e "\ndone.\n" cd .. # in ./temp cd .. # in ./ $green echo -e "\nremoving build folder and system files...\n" $white sudo rm -R $build_dir sudo apt autoclean sudo apt autoremove $green echo -e "\ndone.\n" $green echo -e "\nadding tor as crontab to start tor on boot...\n" $white if sudo grep -q "@reboot /usr/local/bin/tor --quiet" /var/spool/cron/crontabs/$(whoami) then echo -e "tor is already present as crontab" else #echo -e "@reboot /usr/local/bin/tor --quiet" | sudo tee -a /var/spool/cron/crontabs/$(whoami) echo -e "tor is added as crontab" fi $green echo -e "\ndone.\n" $green echo -e "\nchanging user of log files...\n" $white sudo chown -R $(whoami) /var/log/tor $green echo -e "\ndone.\n" $green echo -e "\nstarting tor...\n" $white # start tor /usr/local/bin/tor --quiet echo # new line $yellow echo -e "\ntor log\n" $white sudo tail -c+1 -f /var/log/tor/notices.log else $white exit 1 fi ########################################################################

1 0

tor on Ubuntu Server 20.04.2 LTS
by tor 09 Feb '21

09 Feb '21

Hi All, Which version of tor runs on Ubuntu Server 20.04.2 LTS 64bit, if any? Thanks matt

1 0

Re: [tor-relays] Tor relay failed to start after upgrade (0.4.4.6 --> 0.4.5.5) [solved]
by David Goulet 09 Feb '21

09 Feb '21

On 09 Feb (11:55:12), tschador(a)posteo.de wrote: > Tonight my Tor relay on Raspberry Pi (buster) was upgraded from > 0.4.4.6-1~bpo10+1 to 0.4.5.5-rc-1~bpo10+1 automaticly, but failed to start: > > --- > [notice] Opening OR listener on 0.0.0.0:587 > [notice] Opened OR listener connection (ready) on 0.0.0.0:587 > [notice] Opening OR listener on [::]:587 > [warn] Socket creation failed: Address family not supported by protocol > [notice] Opening Directory listener on 0.0.0.0:995 > [notice] Closing partially-constructed OR listener connection (ready) on > 0.0.0.0:587 > [notice] Closing partially-constructed Directory listener connection (ready) > on 0.0.0.0:995 > --- > > Until then there was no change in my torrc: > > ORPort 587 > DIRPORT 995 Oh wow, interesting, so your Pi doesn't support IPv6 for some reasons and it failed to start with this config. I have opened: https://gitlab.torproject.org/tpo/core/tor/-/issues/40283 In 0.4.5.x tor, things have changed where tor will try to auto discover an IPv6 and automatically bind to it if only "ORPort <PORT>" is used. In other words, it now binds to 0.0.0.0 and [::] by default. It then publish any discovered _usable_ and _reachable_ IPv4/IPv6. If it doesn't find any IPv6, it will still listen but won't publish any IPv6. > > It seems the value [address:] is no longer optional if you're not IPv6 ready > [1]: > > ORPort [address:]PORT|auto [flags] > DirPort [address:]PORT|auto [flags] > > So I have to change my torrc to: > > ORPort 0.0.0.0:587 > DIRPORT 0.0.0.0:995 Another option would have been to add the "IPv4Only" flag to the ORPort line and should have done it for you. Cheers! David -- YrY9JHvSOJpDfyKS5AyL8h/BjZ/SQEkh00q9ek+1BXk=

1 0