- tor-relays - lists.torproject.org

anyone else with this issue?
by niftybunny 31 Aug '20

31 Aug '20

Daily DDOS love the last 14 days … https://imgur.com/a/rfu0OUA <https://imgur.com/fCsIv6V> even for my standards, thats a shit-ton of sockets … Tor DDOS protection is configured but I get more connections than I can drop … nifty

7 9

ubuntu focal and Tor
by potlatch 29 Aug '20

29 Aug '20

Question: What's with the failure when installing Tor of the "no valid keys" for focal? I've had to back up to ubuntu 18 several times. --potlatch-- Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Hello CypherpunkLabs Tor relays
by nusenu 26 Aug '20

26 Aug '20

Hello CypherpunkLabs, I noticed your set of new relays and wanted to say hi, welcome you to the Tor relay community and give you a few recommendations and pointers especially since you are aiming to run 100 tor relays. The Tor relay guide has a lot of useful information, so you probably want to start there: https://torproject.org/relay-guide Since all your current relays appear to be OVH based I'd like to point out the following quote from the guide: > Try to avoid the following hosters: > > OVH SAS (AS16276) > Online S.a.s. (AS12876) > Hetzner Online GmbH (AS24940) > DigitalOcean, LLC (AS14061) https://community.torproject.org/relay/technical-considerations/ The reasoning behind this, is that those hosters are already hosting many tor relays, and the network dislikes centralization. OVH is the biggest commercially available tor hoster in terms of exit capacity today already. Depending on your per-relay size you might end up running a big fraction of the network and especially big exit operators are encourage to take care of their DNS resolution. Specific guidelines can be found here: https://community.torproject.org/relay/setup/exit/ IPv6 connectivity is also encouraged (which currently none of your relays appear to have). Especially for big operators it is recommended to managed their relays using configuration management (puppet, salt, ansible, ...) and update them regularly. An ansible role for Tor relay operator (I maintain) can be found at: https://github.com/nusenu/ansible-relayor The ContactInfo Information Sharing Specification is a spec about a machine readable ContactInfo string: https://github.com/nusenu/ContactInfo-Information-Sharing-Specification Your site suggests that you (will) run bridges and exits. Combining these two types of nodes under a single operator is generally a bad idea since tor's MyFamily configuration is not supported for bridges, so users might end up using your bridges _and_ your tor exits - which puts them at risk should someone compromise you, please consider running non-bridges only. For strong protections for your long term relay keys you can use tor's OfflineMasterKey feature, especially relevant if your run a big fraction of the network: https://2019.www.torproject.org/docs/tor-manual.html.en#OfflineMasterKey kind regards, nusenu PS: don't forget about your MyFamily setting if you do not choose a solution that manages that for you automatically. -- https://mastodon.social/@nusenu

2 1

IPv6 Support or Uptime?
by Josh Lawson 24 Aug '20

24 Aug '20

I have IPv6 with my ISP, but there seems to be a bug in the firmware of my networking equipment that causes IPv6 to stop working periodically and I have to take my network down and bring it back up. If I do not do this, my relay stops functioning as I have torrc configured to use IPv6 and IPv4. So, my question is whether or not having a higher uptime is more important or having IPv6 support? My relay never goes down when on IPv4 only. I apparently cannot have both until the firmware bug is fixed. I appreciate it!

4 4

Tor bandwidth scanner "longclaw" slow to the US West Coast
by Neel Chauhan 24 Aug '20

24 Aug '20

Hi, I believe the Tor bandwidth scanner nicknamed "longclaw" is measuring relays in the US West Coast worse than other bandwidth scanners in North America. This happens on multiple ISPs, both ones I have and ones I don't. This includes two Tor exit instances on a dedicated server hosted in Los Angeles on Psychz Networks (AS40676): https://metrics.torproject.org/rs.html#details/156AAC3FAD1ACC8906316519DCB4… https://metrics.torproject.org/rs.html#details/A69CEB30328B1E85C6B167FECAF2… And two Tor non-exit instances on a home server in Seattle on Wave Broadband (AS11404), using a symmetrical Gigabit link: https://metrics.torproject.org/rs.html#details/B0F9BA27944FA59E3B1A182208FF… https://metrics.torproject.org/rs.html#details/DB710B14D7329B7289CFCC547F48… The consensus weight values from longclaw are much lower than other North American bandwidth scanners, according to https://consensus-health.torproject.org/. This also affects other relays/ISPs on the West Coast US/Canada, such as Emerald Onion, AT&T U-verse, Sonic.net, and QuadraNet. The same ISPs/hosts in the East Coast aren't affected. This discrepancy in the measurement disproportionately favors European and East Coast US/Canada relays at the expense of West Coast relays, centralizing the Tor network even further than it already was. This wasn't an issue in the past, even as early as a few months ago. It only started appearing around June. Is anyone else hosting West Coast relays having this issue? Is "longclaw" actually measuring bandwidth from Europe? If so, WHY? I got in contact with "longclaw"'s admin and he wasn't too helpful. Best, Neel Chauhan === https://www.neelc.org/

4 4

Blog: How Malicious Tor Relays are Exploiting Users in 2020 (Part I)
by nusenu 23 Aug '20

23 Aug '20

Hi, here is my motivation for working on automated verification of operatorurls in ContactInfo: https://medium.com/@nusenu/how-malicious-tor-relays-are-exploiting-users-in… -- https://mastodon.social/@nusenu

9 16

relayor v20.1.0 is released
by nusenu 23 Aug '20

23 Aug '20

Hi, relayor v20.1.0 is released. relayor is an ansible role that helps you with running tor relays with minimal effort (automate everything). https://github.com/nusenu/ansible-relayor This version contains a bugfix, for corner cases where the newly generated tor configuration would not be used. relayor users are encouraged to update to this release. Changes ------- * bugfix: restart tor instead of reloading it when configuration changed (reloading is not supported by tor in all cases) * make tor_ContactInfo variable mandatory * update tor alpha version: 0.4.3 -> 0.4.4 * add support for FreeBSD 11.4 * increase min. ansible version to 2.9.12 kind regards, nusenu -- https://mastodon.social/@nusenu

1 0

Re: [tor-relays] Tor bandwidth scanner "longclaw" slow to the US West Coast
by info＠backplanedns.org 21 Aug '20

21 Aug '20

Same herehttps://metrics.torproject.org/rs.html#details/29BBD80A1702C7FDEF6557C4… from my T-Mobile 4G LTE device------ Original message------From: EddieDate: Wed, Aug 19, 2020 6:40 PMTo: tor-relays(a)lists.torproject.org;Cc: Subject:Re: [tor-relays] Tor bandwidth scanner "longclaw" slow to the US West CoastNot sure if my relay is similar, but I've been seeing a slow fall in consensus weight and advertised bandwidth over the past few months even though absolutely nothing has changed at my end. Well, apart from me *increasing* the RelayBandwidth settings. Also before I shut my relay down for a couple of weeks late last year, it had, and maintained guard status for about 6 months. Now it yo-yos in and out of guard on a regular basis. https://metrics.torproject.org/rs.html#details/D195E5CE8AE77BAC91673E6CFB7B… Cheers. On 8/15/2020 5:41 PM, Neel Chauhan wrote: > Hi, > > Is anyone else hosting West Coast relays having this issue? Is > "longclaw" actually measuring bandwidth from Europe? If so, WHY? > _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

don't publish detailed metrics about your relays
by nusenu 21 Aug '20

21 Aug '20

Don't publish detailed metrics about your relays. Here is a good example what NOT to do with your relays: http://51.77.135.89:19999/#menu_net_submenu_eno1;theme=slate http://51.75.144.43:19999/#menu_net_submenu_eno1;theme=slate The relay guide has detailed guidelines on what granularity is considered safe. -- https://mastodon.social/@nusenu

2 1

"Our IP Address has changed from" log lines
by torix＠protonmail.com 17 Aug '20

17 Aug '20

Dear list, I get this on just one of my relays - "Our IP Address has changed from xxx toxxx; rebuilding descriptor (source: METHOD=GETHOSTNAME HOSTNAME=xxx). Aug 11 00:33:54.000 [notice] Your IP address seems to have changed to xxx (METHOD=GETHOSTNAME HOSTNAME=xxx). Updating." This is 99% of my tor log. What's going on? Is this normal for a middle relay and somewhere I've set the log level to be too sensitive? My torrc log line: Log notice file /var/log/tor/notices.log # location to log notices, warnings, and errors: But my other relays have the same line. I was looking at this relay because it only seems to connect with the bwauths every few days to a week - now not showing at all. It has stayed at 200 connections for the last 6 weeks as a result. It is currently missing completely from the tor metrics list. But I have no idea if these 2 things are related. I have run it with and without ipv6 with the same results. Any help I would appreciate, --Torix

2 2

Possible to run multiple tor instances from one machine?
by Keifer Bly 17 Aug '20

17 Aug '20

6 5

need help with riseup account
by potlatch 14 Aug '20

14 Aug '20

Hello server operators, I have a favor to ask of someone with a riseup.net email account. I have an account but screwed something up changing passwords. Riseup won't/can't help me fix the problem or issue new access codes. My anonymous email account is useless. This would not be a problem but I travel (pre and post Covid) to countries where I have exit relays. [1-9] Exit relays in some of these countries are problematic--it's why I put them in hard-to-reach places. I would like to re-establish my riseup email account before I travel again. Will someone volunteer to provide me with a riseup access code? Thanks [1] Romania/exit 4061C553CA88021B8302F0814365070AAE617270 [2] Finland/exit 9B31F1F1C1554F9FFB3455911F82E818EF7C7883 [3] Moldova/exit 742C45F2D9004AADE0077E528A4418A6A81BC2BA [4] Moldova/exit B06F093A3D4DFAD3E923F4F28A74901BD4F74EB1 [5] Seattle 2F642EAB773CE94EF218C0CB38604040283F347A [6] bridge 4D5A781282C3FCC3EEE3E63FAE69032BD10F1879 [7] Albania/exit 373BF7A2CD16E86D4C5BEC591A41945C9AED392D [8] Albania/exit D78D1B4489CF4FFB0FD74014BDF2D600D8EE5B05 [9] Chile F120F1B939C7ED8FD62347A800F2B67BE84D84DA Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Cookie Authorization files
by Kathi 13 Aug '20

13 Aug '20

I have no Idea where to go with this, a little help please! :-) I'm trying to set up and operate a bridge. Thank You for any help!! Kathi I get this repeated error message in nyx: specify an explicit cookieauthfile to make it group readable (3 dups) TORRC says: CookieAuthentication 1 CookieAuthFileGroupReadable 1 -- This email has been checked for viruses by AVG. https://www.avg.com

1 0

wrong country in METRICS
by tor-operator-sahara-it 12 Aug '20

12 Aug '20

Hello. I am very new tor operator. For now i have only two relays. And one of them show wrong country in METRICS. I run in Estonia, but it shown as Germany. The same AS has another two relays, both in Estonia. IP-lookup shows Estonia. How change contry in METRICS? Thank you.

3 6

Guard flag got removed after only 48 hours of downtime.
by William Kane 11 Aug '20

11 Aug '20

Please discard the previous (empty) email, it was an error on my end. Today, I noticed that my guard flag has been taken away: https://metrics.torproject.org/rs.html#details/47E1157F7DA6DF80EC00D745D73A… Does this have to do with the recent two, major downtime's of the relay? While I wasn't monitoring the server, the kernel decided (or rather oom-killer did) to reap the tor process for consuming too much memory (keep in mind, this is a virtual machine with only 1GB of RAM which running another daemon consuming about ~92MB's of RAM). I promptly restarted the relay, but the same thing happened again yesterday. So today, I manually set a lower MaxMemInQueues value instead of letting Tor calculate one for me - 640MB's instead of 732MB's. Still, I am confused as for why the guard flag has been taken away - I recently opted in to be a fallback directory mirror, does this have anything to do with it? The relay was stable and online for almost a year, so only 48 hours of downtime shouldn't affect the variables qualifying a relay to become and stay a guard that much? If this is because of the directory mirror thing, then please take my relay out of that pool - I want to stay a guard for a number of reasons - mainly because my host is only hosting about 10 tor relays unlike all the other big hosters that are commonly used - network variety is very important or so I've been taught, especially when it comes to guard relays. If this is a mistake on Tor Project's end, I please ask for it to be resolved - however, if it's the Directory Authorities disqualifying my relay, then there's nothing to be done except to wait. Greetings, William Kane

5 11

why non-exit node becomes last in the circuits?
by tor-operator-sahara-it 11 Aug '20

11 Aug '20

Hello. On Tails: Today i found that my jabber messenger (with server in *.onion) use onion circuit with three nodes, and two times from two exit-nodes were very strange. https://metrics.torproject.org/rs.html#details/92E807AC5E23CCD9FE623EA4DC02… https://metrics.torproject.org/rs.html#details/AC5CECEF6AF649F2A7F047D102FE… They havnt exit-flag. Why it happen?

3 3

This would be better in bold, methinks - IPv6 troubleshooting
by torix＠protonmail.com 11 Aug '20

11 Aug '20

An important piece of mental furniture that I never needed to know until months later when a relay stopped working is right here in Step 7: Check IPv6 Availability of page https://community.torproject.org/relay/setup/post-install/ "If you enable IPv6 without working IPv6 connectivity your entire relay will not be used, regardless if IPv4 is working." This seems to me to be quite idiosyncratic to tor, and easily forgotten - not the first thing I would think about when troubleshooting, nor is the post-install page quite where I would look for help when a relay stopped. As we move more and more to including IPv6 in our relay setups, this will come up more often. But we should at least add bold here. --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Relay dropped all traffic
by Sebastian Elisa Pfeifer 08 Aug '20

08 Aug '20

Hey, so one of my relays [0] dropped all traffic. Tor Metrics says its down for 4 days now, but "last restarted" correctly states today at 19:06. Also, on the metrics page is has the flags Fast, Guard, Running, Stable, V2Dir, Valid and ReachableIPv6, but when I SSH into it and look in nyx, it says there "flags: none". I tried rebooting multiple times. The Log tells me "Aug 07 02:36:12.000 [notice] Heardbeat: It seems like we are not in the cached consensus." I have attached the log with the events since the last restart today at 19:06 Should I just generate new keys? Greetings, Sebastian [0] https://metrics.torproject.org/rs.html#details/A4DEEE8F4467621C0A3CB7F4E25C…

2 2

What is the command to view the tor log file on Debian?
by Keifer Bly 08 Aug '20

08 Aug '20

6 8

Availables ports for obfs4 on Fedora
by I.N.R.I. 08 Aug '20

08 Aug '20

Hi To install Tor I try to set a port for obfs4 The ports 22, 80 and 443 are used I wish to find a free port conpatible with the TCP 127.0.0.1 Or an other adress May you help me pls ? Thanks Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Re: [tor-relays] Tor is showing it's running different versions, and continuing previous thread
by Keifer Bly 08 Aug '20

08 Aug '20

That returns "reading config failed" so no luck. Thanks anyway though! --Keifer On Fri, Aug 7, 2020 at 12:43 PM <tschador(a)posteo.de> wrote: > On 07.08.20 20:47, Keifer Bly wrote: > > > Hi all, > > > > So my relay at > > > > > https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36… > > > > Says it is running two different versions, on metrics it is showing it is > > running tor 0.4.3.5 but when I log into the VPS via SSH it says it is > > running tor 0.4.3.6. It has been like this for a few days now. Something > > is also not allowing me to check tors data logs, when I check my torrc it > > says the log file is /var/log/tor/notices.log, it either just loads a > blank > > file or says the file is unwrite able. This is odd I don’t believe I did > > add any special configuration for this. > > Hi Keifer, > > on Debian you can check: tor -v; dpkg -l|grep "ii ?tor" > For me it shows: > Tor 0.4.3.6 running on Linux > ii tor 0.4.3.6-1~d10.buster+1 > ii tor-geoipdb 0.4.3.6-1~d10.buster+1 > > Next - check: ls -lA /var/log/tor > An my server it shows: > -rw-r----- 1 debian-tor adm 0 Jul 13 21:03 log > > The owner should be "debian-tor" or whatever your tor is running. > use: chown to change file owner and group > and: chmod to change file mod bits > > Good luck! >

1 0

Tor is showing it's running different versions, and continuing previous thread
by Keifer Bly 08 Aug '20

08 Aug '20

Hi all, So my relay at https://metrics.torproject.org/rs.html#details/79E3B585803DE805CCBC00C1EF36… Says it is running two different versions, on metrics it is showing it is running tor 0.4.3.5 but when I log into the VPS via SSH it says it is running tor 0.4.3.6. It has been like this for a few days now. Something is also not allowing me to check tors data logs, when I check my torrc it says the log file is /var/log/tor/notices.log, it either just loads a blank file or says the file is unwrite able. This is odd I don’t believe I did add any special configuration for this. Heads up, on my end the spam emails are coming through again. Cheers. Thanks very much. --Keifer

1 0

The “tor-relay” Well-Known Resource Identifier - IANA registration
by nusenu 08 Aug '20

08 Aug '20

Hi, as already sent to the tor-dev mailing list a week ago I planning to submit a well-known URI registration ( https://tools.ietf.org/html/rfc8615 ) so the verifyurl is at a static place and no longer needs to be specified explicitly. Please let me know if you have any comments. https://nusenu.github.io/tor-relay-well-known-uri-spec/ kind regards, nusenu -- https://mastodon.social/@nusenu

2 1

West Coast US Tor Relays Slow - Low Consensus Weight versus East Coast
by Neel Chauhan 07 Aug '20

07 Aug '20

Hi network-health@/tor-relays@ mailing lists, I noticed one thing: Tor relays on the West Coast US (and Canada) are generally slower than those on say the East Coast and in Europe. I moved to the West Coast this January, but this was not an issue in the past when looking at dedicated servers I had from the West Coast prior to this year. These are two middle relay instances on an Gigabit FTTH connection (Wave G in Redmond, WA): https://metrics.torproject.org/rs.html#details/B0F9BA27944FA59E3B1A182208FF… https://metrics.torproject.org/rs.html#details/DB710B14D7329B7289CFCC547F48… The Consensus Weight often is slower than the Advertised Bandwidth, and isn't ramping up despite having lots of bandwidth. I set RelayBandwidthRate to about 500 Mbps on each instance. This isn't just a Wave G problem, this affects almost every relay in the West Coast including other Gigabit ISPs such as AT&T (AS7018) and Sonic (AS46375), as well as hosting companies and colocation facilities. For instance, my Los Angeles-based Exit relays at Psychz Networks (AS40676) show this issue (however they are new): https://metrics.torproject.org/rs.html#details/156AAC3FAD1ACC8906316519DCB4… https://metrics.torproject.org/rs.html#details/A69CEB30328B1E85C6B167FECAF2… Even Emerald Onion has this issue: https://metrics.torproject.org/rs.html#details/09DCA3360179C6C8A5A20DDDE1C5… What is causing this issue and is there a solution? Is it backbone congestion due to COVID-19? The high load on dirauths? sbws regressions? Can I help fix this issue? I am a Core Tor contributor and am open to also working on sbws. Is there a way to optimize my relays (they run FreeBSD). -Neel === https://www.neelc.org/

2 1

FreeBSD Relays in VMware VSphere
by MacLemon 06 Aug '20

06 Aug '20

Hi! We've been having serious networking problems with a FreeBSD VM in VMware VSphere for several months now. The symptom is that network throughput slowly degrades and packet loss increases until your VM is unable to transmit any meaningful data. (Cannot SSH in anymore, etc. We're talking literally BITS per second bad.) We've been suspecting the vmx(8) networking driver for some time and now there's an update to the driver available in FreeBSD 12.1-p8. So if you're running a Relay on FreeBSD under VSphere, this should fix the issue. https://bsdsec.net/articles/freebsd-announce-freebsd-errata-notice-freebsd-… We hope that our two-in-one FreeBSD relay will be stable and passing traffic again! C3WLittleGem https://metrics.torproject.org/rs.html#details/B1F09810C4F7B9D30F483DCE3891… C3WPhantomStreak https://metrics.torproject.org/rs.html#details/C04850673F655A91F5AD3C06E1E5… C3W Family Members: https://metrics.torproject.org/rs.html#search/family:C04850673F655A91F5AD3C… Best regards MacLemon for the Chaos Computer Club Vienna/Austria

1 0