- tor-relays - lists.torproject.org

New openssl releases
by Nick Mathewson 26 Sep '16

26 Sep '16

Just a reminder: if you're operating a relay, you should make sure that your operating system is giving you updates for openssl, and you are applying them. There was an update today about bugs in Thursday's OpenSSL releases. For the security advisory, see here: https://www.openssl.org/news/secadv/20160926.txt best wishes, -- Nick

1 0

Arm connection page shown as empty for one particular node
by Ralph Seichter 25 Sep '16

25 Sep '16

Hello, since updating my nodes to Tor 0.2.8.8, the "connections" page of Arm is not showing connections anymore for one exit node running on Gentoo Linux. On a Debian based exit node and on Gentoo based non-exit nodes things work as expected. The affected exit seems to work fine and bandwidth graphs look OK, only the connection list is unexpectedly shown as empty. I tried all listed "resolving utility" options, but that did not help. Any idea on how I might be able to debug/fix this? -Ralph

3 4

Arm phantom keystroke issue.
by Matt Helps 24 Sep '16

24 Sep '16

Hello. The node we run is in our library and we have a raspberry pi SSH'ed into the node and an LCD displaying the output from Arm. Arm is bugging out on a random basis and appears to be receiving a C keystroke that I believe is the clear log command. I ran the pi with no keyboard and I even used another machine to display the ARM output from the SSH session and it did the same thing. Has anyone else seen this and is there a solution? It's a real bummer because we use this as a learning tool in our library and the pretty graphs of incoming and outgoing traffic really get people interested. When this phantom keystroke happens the graphs stop and somebody has to press N on the keyboard to get the pretty graphs rolling again. This can happen in 2-3 hours or upto 12 hours. See pic here. http://imgur.com/a/wrMhT Cheers, Matt

4 3

adding multi-instance service file to Arch Linux's tor package?
by nusenu 23 Sep '16

23 Sep '16

Dear Arch Linux Tor Package Maintainer, I just filed a new task in Arch Linux's bug tracker, since you are the maintainer of the tor package I wanted to let you know about it (since it does not get auto assigned to you): https://bugs.archlinux.org/task/50877 Let me know what you think. thanks, nusenu

1 0

Re: [tor-relays] Rampup speed of Exit relay
by D. S. Ljungmark 22 Sep '16

22 Sep '16

On ons, 2016-09-21 at 17:29 +0200, Aeris wrote: > > > > 17 MBytes/s in each direction. > > From Atlas graph, your node is currently growing up, so wait few > weeks more to > have the real bandwidth consumption, but don’t expect huge change. It looks as if it stabilized a while ago, and I see more fluctuations in between hours of the day, than I see between days. > > 17M*B*ps is 140M*b*ps and you already have a good relay :) > This is around the speed expected for standard CPU (150 to 300Mbps > per Tor > instance, best CPU available can "only" drain around 500Mbps). For a relay, yes. However, on an Exit node, the traffic patterns are quite different than a pure relay, that's why I'm asking here for that. Exit traffic uses a metric ton more, short-lived connections to different parts of the world, and there's a lot of things there that I could probably tune better. ( Normal relays seldom have a trouble filling the conntrac tables, while exits do. ) > > And your CPU have all chance to be the bottleneck at this speed. Tor > is not > multi-core at the moment and so you can’t be able to fully use your > CPU > capacity. For example, if you have a 4-core CPU, don’t expect to have > more > than 0.25-0.3 load with only Tor (1 core fully used). Load is only about IO, processes waiting for something. That's why I quoted CPU usage, and the cpu usage per cpu isn't quite getting there for me. :-( > > You have to start another Tor instance to use a little more your CPU > (1 other > core) and so to drain additionnal 150-300Mbps. Scaling up on more hardware is always an option, but I really want to push the limit of the exit node, as the others won't be exits (Local network design, really) , and exit traffic is always more interesting. //D.S.

4 4

new big exit operator on the horizon (Quintex)
by nusenu 22 Sep '16

22 Sep '16

Hi John, thanks for adding all your exit relays (with proper MyFamily config)! http://www.quintex.com/torgraph.html https://atlas.torproject.org/#search/contact:quintex https://lists.riseup.net/www/arc/ornetradar/2016-09/msg00090.html

1 0

Caching new entry debian-tor...
by shraptor 21 Sep '16

21 Sep '16

What's up with these messages I get in tor-arm and log? Caching new entry debian-tor for debian-tor [62 duplicates hidden] What is tor doing?? Sep 20 19:10:21.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:10:45.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:11:09.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:11:33.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:11:57.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:12:21.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:12:45.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:13:09.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:13:33.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:13:57.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:14:21.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:14:45.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:15:09.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:15:33.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:15:57.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:16:21.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:16:45.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:17:09.000 [notice] Caching new entry debian-tor for debian-tor Sep 20 19:17:33.000 [notice] Caching new entry debian-tor for debian-tor seems to try to do it quite often? /scooby

4 6

Why can't I see more traffic? (is my banana too weak?)
by Farid Joubbi 20 Sep '16

20 Sep '16

Hello, I have been running a middle relay for one year in a few days. I would expect the relay to push more traffic than it does. https://atlas.torproject.org/#details/875F74A3DC14737BECA06F8B500022154D1A2… What is the reason for it not handling more traffic? The Internet connection is 250 Mbit/s downstream and 100 Mbit/s upstream. There is nothing else using this connection. The "server" is a Banana Pro: http://www.lemaker.org/product-bananapro-specification.html The Banana is running Bananian Linux: https://www.bananian.org/ I know that the Banana Pro is not that powerful, but still I think that it is able to handle more traffic than it seems to do. According to top the CPU hovers around 10-20% most of the time. I have also been running nload and tload in order to see the load over a longer time. Does anyone have an idea of why I'm not seeing more traffic? Could it be that it is due to the quite slow hardware, even though I know that it is able to push more traffic? What kind of relay speeds can you expect from a Raspberry Pi for example? Thanks.

5 8

Middle relay
by Jim Electro House 20 Sep '16

20 Sep '16

Hi to all! I'm running a non-exit relay and I'd like to configure it to run *only* as a middle relay. Do you know which conf should I add on my torrc file?

8 12

Guard/Middle/Exit Hosting
by Markus Koch 16 Sep '16

16 Sep '16

Just 2 let you know, DigitalOcean has a new Promo: $15 free aka 3 months free droplet. Guard/Middle is no problem at all. My exits have been kicked after around 4 months (too many abuse mails :( ) Promocode: LOWENDBOX https://lowendbox.com/blog/september-hosting-vps-coupon-round-up/ I do not get any money from it, just to let you know, DigitalOcean is already big in the Tor network but its free money :) Markus

5 9

Node families and guard flags
by Ralph Seichter 16 Sep '16

16 Sep '16

When running two non-exit nodes, configured as a single family with no other members, and using identical bandwidth settings, is it to be expected that only one of the nodes ever obtains the guard flag? The node uptimes are pretty much the same as well, but consensus weight differs significantly. I don't really understand why that is, given what I read about node life cycles. -Ralph

5 11

Re: [tor-relays] Guard/Middle/Exit Hosting
by Tristan 15 Sep '16

15 Sep '16

Thanks! Going on 2 months with an exit node. I had to disable SSH after about a month, but that's the only complaint I've gotten. On Sep 15, 2016 2:43 PM, "Markus Koch" <niftybunny(a)googlemail.com> wrote: Just 2 let you know, DigitalOcean has a new Promo: $15 free aka 3 months free droplet. Guard/Middle is no problem at all. My exits have been kicked after around 4 months (too many abuse mails :( ) Promocode: LOWENDBOX https://lowendbox.com/blog/september-hosting-vps-coupon-round-up/ I do not get any money from it, just to let you know, DigitalOcean is already big in the Tor network but its free money :) Markus _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

list of bridges
by Ivan Semenov 15 Sep '16

15 Sep '16

Hello, can I get some vanilla bridges pls

2 1

tomhek - the (new) biggest guard relay operator
by nusenu 14 Sep '16

14 Sep '16

Hi Tom, thank you for operating so many relays with such a perfect MyFamily configuration, you have become the biggest (known) guard relay operator on the tor network as of 2016-09-09 and once all your new relays will gain the guard flag your guard fraction will increase even further. https://raw.githubusercontent.com/ornetstats/stats/master/o/main_guard_oper… Unfortunately all your relays run in the most used guard capacity ASes, please consider choosing other ISPs as well when adding more relays to increase diversity. (A more diverse network should be considered more resilient to attacks and outages.) Considering digital oceans traffic pricing, I'm also wondering why DO is so popular? https://www.digitalocean.com/pricing/ regards, nusenu tomhek relays: +--------------+---------------------+-----------------+----------+ | nickname | as_name | IP | FP | +--------------+---------------------+-----------------+----------+ | DinoaurTor16 | OVH SAS | 5.39.76.158 | 0CD23887 | | DinoaurTor17 | OVH SAS | 5.196.73.86 | FA55B57C | | DinoaurTor18 | OVH SAS | 5.196.73.88 | 5959E696 | | DinoaurTor20 | ONLINE S.A.S. | 163.172.29.81 | E44B773C | | DinoaurTor19 | ONLINE S.A.S. | 163.172.211.135 | 5AD8B42D | | DinoaurTor24 | ONLINE S.A.S. | 163.172.29.9 | C61D1EA1 | | DinoaurTor21 | ONLINE S.A.S. | 163.172.38.173 | FB733C67 | | DinoaurTor22 | ONLINE S.A.S. | 163.172.38.175 | FBFE4534 | | DinoaurTor23 | ONLINE S.A.S. | 163.172.28.159 | 52E8508F | | DinoaurTor10 | Digital Ocean, Inc. | 45.55.162.210 | 434E2796 | | DinoaurTor14 | Digital Ocean, Inc. | 95.85.21.196 | CECA079E | | DinoaurTor12 | Digital Ocean, Inc. | 95.85.41.239 | 611CBC19 | | DinoaurTor9 | Digital Ocean, Inc. | 45.55.162.189 | 8F73A7FF | | DinoaurTor15 | Digital Ocean, Inc. | 188.166.58.190 | 2F479358 | | DinoaurTor3 | Digital Ocean, Inc. | 46.101.245.10 | C41F60F8 | | DinoaurTor2 | Digital Ocean, Inc. | 95.85.41.114 | 9B99C72B | | DinoaurTor5 | Digital Ocean, Inc. | 178.62.26.219 | 317E00F4 | | DinoaurTor13 | Digital Ocean, Inc. | 178.62.211.195 | 0DB81001 | | DinoaurTor11 | Digital Ocean, Inc. | 188.166.63.60 | B12A4EF2 | | DinoaurTor6 | Digital Ocean, Inc. | 45.55.159.232 | B70CFA35 | | DinoaurTor1 | Digital Ocean, Inc. | 178.62.12.24 | FCB6695F | | DinoaurTor4 | Digital Ocean, Inc. | 178.62.26.186 | F78F391C | | DinoaurTor7 | NULL (manual: DO) | 138.68.66.236 | CE91251C | | DinoaurTor8 | NULL (manual: DO) | 138.68.74.104 | FEA0CDB9 | +--------------+---------------------+-----------------+----------+ OVH, ONLINE SAS and DO are all within the top 4 guard capacity ASes: +------------+--------+---------------------+ | guard_prob | relays | as_name | +------------+--------+---------------------+ | 17.028 | 579 | OVH SAS | | 16.380 | 312 | ONLINE S.A.S. | | 9.678 | 373 | Hetzner Online GmbH | | 9.339 | 485 | Digital Ocean, Inc. | +------------+--------+---------------------+

18 36

Tor path selection upon failure
by Liu, Zhuotao 13 Sep '16

13 Sep '16

Hi Folks, There have been some technical reports about how to deal with the problem when a botnet uses Tor as its primary C&C channel. In this case, the CPU of some relays is exhausted, causing circuit creation failure. I am wondering currently how a client reacts when its circuit creation fails? Does the client simply resend another create cell or it will re-select new path instead? Thanks

2 2

RPM distro users: Make sure you are using EPEL repo to get the latest tor packages
by nusenu 13 Sep '16

13 Sep '16

Make sure you switched to EPEL's tor packages if you used torproject's RPM repository in the past. EPEL provides the latest tor version (currently 0.2.8.7 [2]), former torproject RPMs are no longer updated at all [1]. The migration to EPEL packages includes some manual steps, like filesystem permission fixing (EPEL uses another username for the tor system account). Deprecation trac ticket: [3] [1] https://lists.torproject.org/pipermail/tor-dev/2016-June/011070.html [2] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1b53e559ba https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-1dc5947199 [3] https://trac.torproject.org/projects/tor/ticket/19501

1 0

Weird traffic spikes?
by tmbates12 13 Sep '16

13 Sep '16

Right now my relay is set at a maximum advertised bandwidth of 12MB/s, over time as the traffic has increased I've noticed that the traffic would increase a large amount and then my consensus weight would drop on its own over time, and then the traffic would drop drastically, is there any reason as to why it does this every once in a while? Here's the Atlas link: https://atlas.torproject.org/#details/ABF5C38A93F2D7E77A226871AB0ADB052279B…

1 0

How to include files into torrc?
by Ralph Seichter 11 Sep '16

11 Sep '16

Hello, is it possible to include files into torrc? Something like this: # /etc/tor/torrc ORPort 443 # Policies are kept in separate file for readability Include /etc/tor/policies I checked https://www.torproject.org/docs/tor-manual.html.en but could not find anything. As an alternative, one can of course generate torrc from other files, but I'd rather use an include feature, if available. -Ralph

7 8

British Airways website blocking non exit relays IPs?
by Pascal Terjan 11 Sep '16

11 Sep '16

I haven't been able to access BA website from home for the last few weeks. I have failed to get any other answer on the phone that to try using Internet Explorer or to wait for things to maybe get fixed. Twitter support was not more helpful. I am now wondering is this is because I run a (non exit) relay. Can anyone confirm if they also have the problem? http://ba.com/ Error is: The requested URL was rejected. Please contact our support team on Telephone: (+44) 0344 493 0787 option 3 (calls charged at local rate within the UK) Daily 06:00-20:00 UK time. Please quote support ID 13240401227540154825

10 16

Re: [tor-relays] [tor-relays-universities] Legal issues relevant to UK
by Jens Kubieziel 09 Sep '16

09 Sep '16

X-Post from tor-relays-universities@ I ran some relays at Geman universities in the past. I guess my experiences won't help here. Maybe someone on tor-relays has experience with running a relay at an UK university, so I send this mail to tor-relays@ too. * Duncan Guthrie schrieb am 2016-09-01 um 01:09 Uhr: > I'm hoping to run a Tor relay here at a University in the UK. > Is there anyone here who might have some experience with this in the > past? I have been researching legal issues but information is > extremely sparse (mostly relating to the DMCA). All I can really work > out is that the issues relating to ISPs apply more generally, and more > strictly to a Tor exit node operator. > What protections, if any, exist here in the UK for a Tor exit node > operator? > > Thanks, > Duncan > _______________________________________________ > tor-relays-universities mailing list > tor-relays-universities(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays-universiti… -- Jens Kubieziel http://www.kubieziel.de Die meisten großen Taten, die meisten großen Gedanken haben einen belächelnswerten Anfang. Albert Camus

3 2

experiences with debian tor 0.2.8.6 package from deb.torproject.org
by tor relay 08 Sep '16

08 Sep '16

Hi, I'm running a relay on debian jessie using packages from deb.torproject.org. I want to share the problems I had so others are aware of them when upgrading their relays. While upgrading from 0.2.7.6 to 0.2.8.6 via apt-get, I did a tail -f syslog to make sure I notice problems during the upgrade. (I expected a simple restart of all running tor instances) I use debian's multi instance systemd service file. When upgrading, all running tor instances are stopped (not restarted, as expected) syslog shows: Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. Clean shutdown finished. Exiting. (problem is reproducible) Side note (unrelated to the upgrade but also relevant for the debian tor package from deb.torproject.org repo): Stopping the default instance stops all instances due to /lib/systemd/system/tor@.service: [...] PartOf=tor.service ReloadPropagatedFrom=tor.service How about using the same way as the RPM maintainer does - so one can enable the default instance without affecting all others? PartOf=tor-master.service ReloadPropagatedFrom=tor-master.service

7 31

Which OS gives usually the best performance for a relay?
by Farid Joubbi 08 Sep '16

08 Sep '16

Hello, I am thinking of setting up a new relay. I know that the hardware in the server is going to be the bottleneck, not my Internet connection. I have a problem deciding on which OS to use for the relay. A few years ago when I had a similar relay going, I had it running on OpenBSD first. Then I changed the OS to FreeBSD and the performance got about 20% better. I have no idea if this would be the case today too. So I think that maybe it's either FreeBSD or Debian that would be "best", but I have nothing concrete to base that decision on unless I try them both. I am going to use a Via C7 board in this specific case. So I suspect that it's the maturity of the VIA drivers in the OS that is going to make the difference. Still I would like to know how to think in similar situations in the future even for other hardware. Has anyone any concrete experience of the tor relay speeds on different operating systems? I don't want to start a flame war of religious beliefs, but I suspect that OSes differ in how optimized they are for different tasks. Thankful for any constructive input on this. Regards, Farid

5 5

Tor and Diplomatic Immunity
by Kenneth Freeman 08 Sep '16

08 Sep '16

Do embassies and consulates run Tor nodes? AFAIK no studies have been done on this, but diplomatic immunity and Tor would seem to be a match made in Heaven.

7 10

Re: [tor-relays] tor-relays Digest, Vol 68, Issue 22
by daniel boone 07 Sep '16

07 Sep '16

3 2

Re: [tor-relays] tor-relays Digest, Vol 68, Issue 21
by daniel boone 07 Sep '16

07 Sep '16

3 2