- tor-relays - lists.torproject.org

(No Subject)
by Admin Platinum Host 14 Jun '22

14 Jun '22

Hi there, I currently own a Tor Relay that has been running since 2022-05-24. A day ago it restarted, which was a bit strange. Recently I found that the Relay has changed to a Guard Relay, which I am pleased about. I was wondering why the restart occurred as the VPS Server has been online since the first start. The Relay is called UKLondonRelay1 with the IP address 80.64.218.62. https://metrics.torproject.org/rs.html#details/B1B1CAD0A73EC5148B06A0A0E819… Any help on this matter would be appreciated. Kind regards, Leon The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.

1 0

[Workshop] Sysadmin 101 for (new) relay operators - June 4th @ 1900 UTC
by gus 14 Jun '22

14 Jun '22

Join us June 4th at 1900 UTC for new and prospective Tor relay and bridge operators on the basic "sysadmin foo" required to contribute to the network! ## Sysadmin 101 for new relay operators So you want to contribute to the open-source Tor network by running a relay or maybe a bridge? The Tor network is the most important tool for evading surveillance and bypassing internet censorship. And Tor relays and bridges are vital to the health and integrity of the Tor network. Millions of users rely on relays and bridges to stay safe, and how you configure and maintain that relay or bridge is critical. Volunteers aren't a nice enhancement. They are a core feature. Running a relay or a bridge raises frequent questions: * Should I run a relay or a bridge? * Should I run a relay or a bridge from a residential/home internet connection? * Which operating system should I run for my Tor node (hint: the one you are most comfortable with securing and maintaining) * More generally, what does it take to keep that relay or bridge operating safely, but both you and Tor users? This workshop will start with a presentation approaching some of the core issues that arise when running a Tor node. The session will move into an "ask me anything" discussion to approach other common and less common questions. The 90-minute event will be geared towards current and prospective Tor bridge and relay operators, particularly those relatively new to running public internet services. Seasoned Linux and BSD Tor operators will be attending the event ready to address the discussion. ## How to join the workshop The workshop is entirely free, and participants need to fill out this registration form. The event will take place on BigBlueButton, an online video conference platform, on June 4th at 1900 - 2030 UTC. You can register here: https://nc.torproject.net/apps/forms/cDLPxryHJcP5kMeW ## Facilitators The workshop will be facilitated by: * George (@gman999) - Tor *BSD Diversity Project member, Serge bridge directory authority maintainer, long-time relay operator and a wide variety of other contributions. * Kushal Das (@kushal) - RPM Tor maintainer and member of the Tor Community team. -- The Tor Project Community Team Lead

2 3

My current node setup
by Nyasaki Server 08 Jun '22

08 Jun '22

Hi to all new ppl that may have joined after the sysadmin101 workshop. I decided to share my setup here in case any newbies are interested and maybe somebody who is doing this for a while longer than me sees any flaws in my setup. Feedback is always welcome! I was tired of using the debian testing for running my node and decided to redo my node with arch because of the fast package updates and rolling release model. Currently my setup consists of 3 servers: Exit-Node: Archlinux with tor, unbound and prometheus running, prometheus is a nice metric collection service that nicely collects the statics that tor exposes. It's a VPS hosted at Terrahost in Norway for 20$ / month with 2 vCPU’s and 4GB Memory. Unbound only resolves requests from localhost, due to a high percentage of DNS timeouts in the past I decided to use this just as backup and resolve everything else via the dedicated DNS server. Tor is set up to expose the metrics to localhost, where prometheus is running. The actual prometheus metrics port is just allowed for 1 IP, thats the one my Dashboard server has. The firewall is set up to allow every port that's listed in my torrc, my non-default ssh port and the IP of my dashboard for the metrics port. DNS: Ubuntu 22.04 LTS (due to oracle clouds small selection of images) with unbound as DNS and prometheus. Hosted at Oracle Cloud via the free tier with 1 vCPU and 1GB Memory. The firewall is open for DNS requests from my node ip, metrics requests from my dashboard IP and non-default ssh port. Dashboard: Ubuntu 22.04 LTS with unbound as DNS and prometheus. Hosted at Oracle Cloud via the free tier with 1 vCPU and 1GB Memory. There's a Grafana dashboard and the Prometheus server running. Again all ports blocked but ssh and http/https are open Image of the Dashboard https://imgur.com/a/fYpRD8O My Node https://metrics.torproject.org/rs.html#details/017342E197B8C575A5C5301CD008… My GPG Key https://keyserver.ubuntu.com/pks/lookup?search=nyasaki.srv%40gmail.com&fing…

3 2

New OrNetStats Section: Largest Bridge Operators
by nusenu 08 Jun '22

08 Jun '22

Hi, OrNetStats got a new section today showing the largest bridge operators by advertised bandwidth grouped by ContactInfo: https://nusenu.github.io/OrNetStats/#bridge-operators-grouped-by-contactinfo This is possible because the Torproject started to publish bridge ContactInfos. The listing only includes operators with at least 50 Mbit/s aggregated advertised bandwidth. AROI support for bridges You can also protect your bridge ContactInfo against spoofing now. The same fields as for relays apply. If you have setup your AROI [1] on your relays already you can simply copy the ContactInfo to your bridges and publish the list of hashed bridge fingerprints under this URL: https://-your-hostname-/.well-known/tor-relay/hashed-bridge-rsa-fingerprint.txt After successful validation your bridges will be added to your operator level pages on OrNetStats. OrNetRadar will also be extended to support bridges. kind regards, nusenu [1] https://nusenu.github.io/OrNetStats/#authenticated-relay-operator-ids -- https://nusenu.github.io

3 3

Error 403 connecting to Sysadmin 101 Workshop
by Eldalië 07 Jun '22

07 Jun '22

Hello there, I'm trying to connect to the Sysadmin 101 Workshop, but after waiting for moderator approval I keep getting the following error (also in the attached image): You have been removed from the meeting User has an invalid sessionToken due to ejection --- 403 Any idea about what's happening here or how to solve it? -- Eldalië My private key is attached. Please, use it and provide me yours!

2 2

Will pay but need someone
by paul＠coffswifi.net 07 Jun '22

07 Jun '22

5 4

[Event] Relay Operators Meetup - May 21, 2022 @ 1900 UTC
by gus 07 Jun '22

07 Jun '22

Hello relay operators, The next Tor relay operator meetup will happen on Saturday, May 21 @ 1900 UTC. Where: BigBlueButton - https://tor.meet.coop/gus-og0-x74-dzn No need for a registration or anything else, just use the room-link above. We're working on the agenda here: https://pad.riseup.net/p/tor-relay-meetup-may-2022-keep Everyone is free to bring up additional questions or topics at the meeting itself. Please share with your friends, social media and other mailing lists! cheers, Gus -- The Tor Project Community Team Lead

5 6

Does Tor work with Intel QAT acceleration
by Andreas Bollhalder 07 Jun '22

07 Jun '22

Hi all I have my first Tor relay up und running. It's currently installed on a little desktop computer with an Intel i5 9500T CPU. My Internet connection is 10Gb/s symetric. From this bandwidth, I would be able to spend a good part for supporting the Tor network. With that little machine, it seems that it would max out at somewhere at ~30 MBytes/s. For my definitive Tor relay hardware, I'm currently researching some options, which would be capable of handling Tor traffic at the rate of 200 to 300MBytes. Even it would be used nowadays, but who knows whats coming in the future and I hope this relay would last 5 years ore so. It looks to me, that with a normal CPU, it's impossible to reach my goal. But then I encountered, that Intel has the Quick Assist Technoloy (QAT) integrated in some of their products (ie. Atom C3xx8). This QAT can be used with OpenSSL as a hardware accelerator for encryption. There also exist dedicated PCIe cards with QAT (ie. Netgate CPIC-8955). Searching the Internet, I couldn't find any information if QAT would be helpful with Tor. But Tor uses the OpenSSL library and this can use the QAT acceleration. Is there anyone who has tried this und can share his expirience? Thanks in advance Andreas

4 6

[warn] Received a bad CERTS cell: Link certificate does not match TLS certificate
by Felix 07 Jun '22

07 Jun '22

Hi all I found a message in the logs: Apr 16 15:07:46.000 [warn] Received a bad CERTS cell: Link certificate does not match TLS certificate -- Cheers Felix

2 1

Debian is not allowing tor to update despite it being listed as a trusted respritory
by Keifer Bly 07 Jun '22

07 Jun '22

7 25

Weird spike in written bytes per second
by Marco Predicatori 07 Jun '22

07 Jun '22

Hi, the graph shows a marked difference between written bytes per second and read bytes per second om 2022-05-19 and 2022-05-20. In any other day the bytes are roughly the same. What might my node have "written" on those two days? https://metrics.torproject.org/rs.html#details/A4E74410D83705EEFF24BC265DE2… Thanks, Marco

3 3

Update on tor issue on my debian
by Keifer Bly 07 Jun '22

07 Jun '22

4 6

Re: [tor-relays] [Workshop] Sysadmin 101 for (new) relay operators - June 4th
by Isaac Grover, Aileron I.T. 07 Jun '22

07 Jun '22

Good morning Gus, For those of us with families and other weekend commitments, will an on-demand replay be made available afterwards? Make your day great, Isaac Grover

3 2

bridge issue
by potlatch 07 Jun '22

07 Jun '22

Hello, I have a bridge [1] that doesn't have any keys in /var/lib/tor/keys! How is that possible and how do I fix the problem? potlatch [1] FB45183DD82D572CA2B2641C1AB0EB0D8CE7B858 Sent with [Proton Mail](https://proton.me/) secure email.

3 2

EOL after changing operatin system
by Fred 03 Jun '22

03 Jun '22

Hey there, I had to change my operating system and started an new relay instead of using the old keys. The new one is runnig fine. Dead relay: 67D1278A974D61104F7273E6266DEF3A5C26F191 T heoor Sorry, Daniel -- Gesendet mit Vivaldi Mail. Laden Sie Vivaldi kostenlos von vivaldi.com herunter.

1 0

EOL 2 x relay
by Anders Burmeister 03 Jun '22

03 Jun '22

Hi Heroes I’m sorry to inform you, that my two relays will discontinue and no longer participating from 28 july 2022. Had a lot of fun here. Fingerprint: EFEACD781604EB80FBC025EDEDEA2D523AEAAA2F Fingerprint: 484A10BA2B8D48A5F0216674C8DD50EF27BC32F3 I wish you all the best Regards Anders

2 1

Relay migration: best practices?
by tor＠nullvoid.me 29 May '22

29 May '22

Hello, I operate a small family of relays, over the 5 years it's been very set and forget and easy to maintain. Over those 5 years the servers have been cluttered with other half completed projects and general mess. I plan on reinstalling the OS from scratch, and understand I must backup the "keys/ed25519_master_id_secret_key" and "keys/secret_id_key" in the DataDirectory. Then copy them over on the new server. The hostname will change but the IP will stay the same. The server I am working on is not listed as a fallback directory server, but has been in the past. Is there any other things I can do to disrupt the damage done to the tor network during this downtime? Especially to any clients using it as a bridge. Thanks,

2 1

Sanity check on NumCPUs
by Thoughts 29 May '22

29 May '22

For a non-exit relay, is "NumCPUs 2" still the recommended maximum? Running on a quad core and recently saw a message indicating I had insufficient CPU power to support the desired number of connections... Thanks, Kevin

6 7

Loss of Guard and HS Dir flags
by Eddie 29 May '22

29 May '22

I currently run 3 relays, across different servers and today I noticed that one has now lost it's Guard and HS Dir flags. What's surprising is that this particular relay has the highest Bandwidth and Consensus Weight of all 3 and has not been restarted for over a month. The stats for all 3 can be found with: OhNoAnotherRelay I know that just running the relay is the important part and caring about what flags it has is a side issue, but I'm just interested in seeing why this has happened. Cheers.

4 7

Bridge operators contact addresses online ;-)
by lists＠for-privacy.net 27 May '22

27 May '22

I happened to see that Bridge operators contact addresses can now be displayed. https://gitlab.torproject.org/tpo/network-health/metrics/relay-search/-/iss… Demo on Tor Metrics for all 'bauruine' and 'ForPrivacyNET' bridges. Thanks to the torproject team. -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

1 0

Question about new log messages after 0.4.7.7 upgrade
by wardz 27 May '22

27 May '22

Been getting these syslog messages occasionally *after* the 0.4.7.7 upgrade on my bridge: -- May 26 21:00:58 torbridge Tor[ ]: Unexpected path length 4 for exit circuit 66 5, purpose 5 [3 similar message(s) suppressed in last 5400 seconds] May 26 16:26:17 torbridge kernel: [ ] TCP: eth0: Driver has suspect GRO implementation, TCP performance may be compromised. -- Anyone know what they mean and if it's something I should be worried about? Calculated advertised bandwidth seems to be about the same. For reference, im running latest Raspbian 64-bit Lite on a Raspberry 4 with latest firmware aswell. driver: bcmgenetversion: 5.15.41-v8+ Sent with [Proton Mail](https://proton.me/) secure email.

2 1

Ext Relay Operators: Please Upgrade to 0.4.7.7!
by Mike Perry 27 May '22

27 May '22

Tor 0.4.7.7-stable contains a very important performance improvement, called Congestion Control. You can read more about this improvement here: https://blog.torproject.org/congestion-contrl-047/ The TL;DR is that users of Tor 0.4.7 will experience faster performance when using Exits or Onion Services that have upgraded to 0.4.7. We have packages in available for Debian, Ubuntu, Fedora, CentOS, and BSD: - Debian: https://support.torproject.org/apt/tor-deb-repo/ - Ubuntu: https://support.torproject.org/relay-operators/operators-4/ - Fedora/CentOS: https://support.torproject.org/rpm/tor-rpm-install/ - BSD: https://lists.torproject.org/pipermail/tor-relays/2022-May/020528.html We would like to have a large fraction of Exit relays upgraded before our next Tor Browser Stable Release, on May 31st. Please let us know if you have any problems upgrading to this release. Additionally, while non-Exit relays do not need to upgrade, they will notice the effects of congestion control. All relay operators who pay for bandwidth by the gigabyte may want to consider enabling hibernation, to avoid surprise cost increases: https://support.torproject.org/relay-operators/limit-total-bandwidth/ All relays may also experience higher CPU usage. If this is a problem, rate limiting relay bandwidth will also help: https://support.torproject.org/relay-operators/bandwidth-shaping/ We also recently fixed an issue with overload reporting in 0.4.6.10 and 0.4.7.7: https://gitlab.torproject.org/tpo/core/tor/-/issues/40560 This should mean that there are far fewer false positives in the overload reporting on https://metrics.torproject.org/rs.html. If after upgrading to either of those versions, you still see overload, please see: https://support.torproject.org/relay-operators/relay-bridge-overloaded/ P.S. There is a known warn bug with vanguards-lite on first startup. It is harmless: https://gitlab.torproject.org/tpo/core/tor/-/issues/40603 -- Mike Perry

5 7

Revisit issue on incorrect time stamps on metrics
by a tor op 21 May '22

21 May '22

Hi I wrote about incorrect date stamps for relays/bridges on atlas/metrics site in December 2021. This has reappeared since some time (dont know for how long). First seen fullt incorrect by years and all times unlogic, first seen later than last restarted etc. Is this a common problem or just some relays? TIA, A tor op

2 1

Introduction
by roelquerimi 18 May '22

18 May '22

Hello the Tor relay operators. Nice to meet you. I'm Roel Querimi, I operate 9 exit relays: 0B1120660999AD1022D08664BE1AD08A77F55E50, 05757E11F488C50E3425F5F7E9319411B4270365, 5D2871217ABD67C2569C49919B46F3DFC6281D63, 983548730C7F3F52170BF2195C85D1423C33253B, 72152AE84ECF44727A9506237A93D63EAFB22B07, 7AE15D809ED86C1F2998B45985A40E7F07F078B6, 5C1B834B2E8D982B82B23D05773C78CC23BB0EB9, 3075E246EE9AAE3EECABF92A9B40A598EC77608E, 92A9547A61E21357CBA0A6E64340BCD5DF29D94F Sent with [ProtonMail](https://protonmail.com/) secure email.

1 0

Tor exit Spain
by potlatch 17 May '22

17 May '22

Hello Paul, I've run exit relays for 15-years. I put the first relay into Albania and followed with the first exit relay in Albania. I lost my two Albanian relays when the Ukraine conflict started. I currently have relays in Moldova (2), Romania, Finland (2), Chile, Estonia, Latvia, Bulgaria. Most are smaller than your server w/Consensus Weight around 8000. Further, I operate bridges in Kazahkstan (3), Finland and Albania. I would like to know a bit more before offering to take your server. Do you have good relationship with IONOS SE? What is physical machine compliment? etc.? I operate out of Seattle Washington and have good communications with the Tor office here. I am retired electrical engineer with time to help Tor and Electronic Frontier Foundation. Hope you find a good operator for your primo relay. I can be contacted directly at potlatch(a)proton.me Stay safe always,potlatch The imagination of nature is far, far greater than the imagination of man. --Richard Feynman Sent with [ProtonMail](https://protonmail.com/) secure email.

1 0