- tor-relays - lists.torproject.org

Metrics site down
by mnlph74 20 May '20

20 May '20

As of this writing... noticed that the metrics site is currently down.. Can someone confirm? Thanks https://metrics.torproject.org/ Sent with ProtonMail Secure Email.

1 0

Tor relay occasionally maxing out CPU usage
by William Kane 20 May '20

20 May '20

Hi there, I am the operator of the following relay: https://metrics.torproject.org/rs.html#details/47E1157F7DA6DF80EC00D745D73A… The relay is running on my Arch Linux server running kernel version 5.6.11. This is my tor configuration file: ORPort 37.157.195.83:38619 ORPort [2a02:2b88:2:1::3239:0]:38619 DirPort 37.157.195.83:44776 Nickname michaelscott ContactInfo ttallink(a)googlemail.com ControlPort 9051 SocksPort 0 CookieAuthentication 1 ExitPolicy reject *:* DataDirectory /var/lib/tor Sandbox 1 Linux kernel boot parameters from grub: quiet mitigations=off Kernel parameters from /etc/sysctl.d set on boot through systemd: kernel.dmesg_restrict = 1 net.ipv6.ip_nonlocal_bind = 1 kernel.yama.ptrace_scope = 3 vm.swappiness = 60 Tor systemd unit (shipped by distribution): [Unit] Description=Anonymizing Overlay Network After=network.target [Service] User=tor Type=simple ExecStart=/usr/bin/tor -f /etc/tor/torrc ExecReload=/usr/bin/kill -HUP $MAINPID KillSignal=SIGINT LimitNOFILE=8192 PrivateDevices=yes [Install] WantedBy=multi-user.target Tor systemd unit overrides: [Service] ProtectSystem=strict ProtectHome=true PrivateTmp=true ProtectKernelLogs=true ProtectKernelModules=true ProtectKernelTunables=true ProtectControlGroups=true NoNewPrivileges=true RestrictSUIDSGID=true RestrictAddressFamilies=AF_INET AF_INET6 ReadWritePaths=/var/lib/tor Occasionally, the CPU usage hit's 100%, and the maximum throughput drops down to around 16 Mbps from it's usual 80 Mbps. This happens randomly and not a fixed intervals which makes it pretty hard to profile. No abnormal entries in the log files. I found ticket #24857 in which someone describes a similar behavior, but on _Windows_. https://trac.torproject.org/projects/tor/ticket/24857 Is this also an issue on Linux? In that case, setting DirCache to 0 should fix the issue, however that would mean that, according to the manual, I would no longer be able to mirror directory information. If anyone else encountered the same problem and found a solution, please let me know. Best Regards, William

3 9

Tor relay - hardware upgrade and "Observed bandwidth" not changed
by lilyus＠pm.me 19 May '20

19 May '20

Hello, I recently upgraded the hardware of my Tor relay and the "Advertised Bandwith" did not change. https://metrics.torproject.org/rs.html#search/pelote :9001 > Bandwidth rate: 1024 MiB/s > Bandwidth burst: 1024 MiB/s > Observed bandwidth: 5.46 MiB/s :9101 > Bandwidth rate: 1024 MiB/s > Bandwidth burst: 1024 MiB/s > Observed bandwidth: 4.62 MiB/s My Internet provider allow: - 1 Gbit/s download - 600 Mbit/s upload The relay new hardware is "NUC8i5BEK" - Intel(R) Core(TM) i5-8259U CPU @ 2.30GHz - 8GB DDR4 SDRAM PC4-19200 - Samsung SSD 950 PRO 256GB nvme System: - OpenBSD 6.7 - tor-0.4.2.7 Relay configuration is done with https://github.com/nusenu/ansible-relayor No IPv6 (yet). Do I have to wait for something like "The lifecycle of a new relay" ? https://blog.torproject.org/lifecycle-new-relay Regards, Lilyus

1 0

warn message in notices .log after reinstallation of the relay (and restore of torrc and "keys" folder)
by David Strappazon 19 May '20

19 May '20

Hi, I had issues with my bridge who is running on a Raspberry pi 3+ so i've decided to completely reinstall it. First i saved my torrc file and my "keys" folder from /var/lib/tor. First thing i did after a clean install of the server was to copy and paste my torrc file in /etc/tor/ and the files "ed25519_master_id_secret_key" and "secret_id_key" in the keys directory. Anyway after starting Tor i had the following messages in notices.log: [warn] http status 400 '"looks like your keypair has changed?...etc...etc... i decided to completely replace the content of the keys folder by my backup but i still have the same message. When i go to Tor relay search i see my bridge with two different identities and both are offline ( one of the hashed fingerprints is the right one). Anyway if i run "nyx" i can see that Tor is working, reachable from the outside and some circuits are built. I suspect i make a mistake with the "keys" but i'm a little bit lost. Can you guys help me please ? Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

tor relay on windows 10
by Станислав 18 May '20

18 May '20

4 6

consensus page 'down'
by Paul Geurts 18 May '20

18 May '20

it seems to me that the tor consensus page has not been updated since: Consensus was published 2020-05-14 19:00:00 UTC rgds. Paul

3 2

EOL 1938EBACBB1A7BFA888D9623C90061130E63BB3F FallbackDir
by Anders Burmeister 18 May '20

18 May '20

FallbackDir 1938EBACBB1A7BFA888D9623C90061130E63BB3F Expired rest of the family happily up and running. /anders

2 2

Relay keeps crashing (raspberry)
by David Strappazon 18 May '20

18 May '20

Hi, I've been running a bridge since october without issue. But two days ago i realized that my raspberry keep craching like every two hours or so. Nothing changed. I'm running kali linux (re4son kernel) on a raspberry PI 3 +. The logs don't show anything. Sometime on screen i have a thermometer icon but when i check the temperature in real time it is never over 60°C. I have updated and upgrading everything: same problem. My power supply looks ok. Any idea of what i should check or do to fix the problem? It worked very well for months. does saving my "key" and reinstalling everything could help? any tips would be welcome. regards, David Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 3

Does this mean upgrades are working?
by Keifer Bly 18 May '20

18 May '20

Hi, upon configuring unattended upgrades, I am getting this on testing. Does this mean the upgrades are working properly? How will running upgrades every day effect my uptime? Thx. unanttended upgrades.PNG <https://drive.google.com/file/d/1jcm_STo87waEKMpxztdajQWXV4Enk89d/view?usp=…> --Keifer

3 3

OVH Service
by mnlph74 17 May '20

17 May '20

This is for Tor Relay Operators with OVH A couple of hours ago, I availed a VPS from OVH just to try it out and it's been 10 hours now and my payment was validated and the order is still being processed, is this a normal waiting time for the order to be delivered? Thanks for the help. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Re: [tor-relays] Does this mean upgrades are working?
by Keifer Bly 17 May '20

17 May '20

This output does mean it will do this automatically correct? Thx On Sun, May 17, 2020 at 10:29 AM Matthew Smith <matt(a)offtopica.uk> wrote: > > Keifer Bly writes: > > How will running upgrades every day effect my uptime? Thx. > > When an update to Tor is available, it will be applied and then your Tor > daemon will be restarted. It will affect your uptime, but all of your > relay's flags (like fast, stable, ...) will still be there when it comes > back online. > -- --Keifer

1 0

Re: [tor-relays] Does this mean upgrades are working?
by Keifer Bly 17 May '20

17 May '20

This output does mean it will do this automatically correct? Thx On Sun, May 17, 2020 at 10:29 AM Matthew Smith <matt(a)offtopica.uk> wrote: > > Keifer Bly writes: > > How will running upgrades every day effect my uptime? Thx. > > When an update to Tor is available, it will be applied and then your Tor > daemon will be restarted. It will affect your uptime, but all of your > relay's flags (like fast, stable, ...) will still be there when it comes > back online. > -- --Keifer

1 0

Is running an irc only exit relay safe from abuse
by Keifer Bly 16 May '20

16 May '20

4 7

Does this mean upgrades are working?
by Keifer Bly 16 May '20

16 May '20

1 0

Port 853
by mnlph74 16 May '20

16 May '20

I'm running a relay and planning to put an exit at port 853 (DNS over TLS) Is this safe from abuse? Thanks for the help. Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 4

(no subject)
by Станислав 14 May '20

14 May '20

2 2

How Many Mbps Does A Tor Relay Need To Be A Guard?
by Keifer Bly 13 May '20

13 May '20

3 2

So running a new middle relay on ovh
by Keifer Bly 13 May '20

13 May '20

2 1

Recommended router for 200+ Mb/s relay
by Secure Node 12 May '20

12 May '20

Thank you for all response. Old PC can be good, but it's not power efficient ;) Looks like Mikrotik: https://mikrotik.com/products/group/ethernet-routers have quite cheap hardware, but question is - For 1 Gb/s broadband with tor relay (set for up to 250 Mb/s - maybe more in future) - any of this small router will be enough? Example: hEX PoE lite It's powerful enough or I will need something much more enterprise grade? On my current setup with my home grade 1 Gb/s router my relay works quite stable, but with working TOR I can reach speed up to 450 Mb/s (150 Mb/s for relay and up to 300 Mb/s for other services or tests). When I stop relay - I can reach easily 950 Mb/s If I understand it correctly - my router CPU can't handle more packages / connections, currently nyx reporting: Connections (3053 inbound, 4151 outbound, 1 control) which is a lot ;) I really want to avoid using big rack type mount, noisy router with separate PSU. > On Thu, 30 Apr 2020 at 23:07, Logforme <m7527(a)abc.se> wrote: > On 2020-04-29 17:13:49, "Secure Node" <admin(a)securenode.pl> wrote: > >> I'm looking for new router for good price which can handle more >> connections and traffic ;-) >> Can you recommend any specific models? Should I avoid some products >> lines or companies? >> > If you have an old PC with 2 ethernet ports laying around or you can > get > one cheap I suggest you build your own: > https://arstechnica.com/gadgets/2016/04/the-ars-guide-to-building-a-linux-r…

1 0

Exit stops after one year, then again after few days
by ylms 12 May '20

12 May '20

Hello all As written above, I run an Exit (for many years, with the current setup since 04.2019) but on 30. March 2020 it stopped, I was unable to determine any reason. So I installed updates and since there were some Kernel updates I also rebooted the machine. The Exit was back up and ran again till ~36h ago. Same situation again, I have no idea why it stopped. I now activated "Log notice syslog", I think this was in the standard torrc which is installed with the package of Ubuntu 18.04.4 LTS anyway, but there is not entries in journalctl. Only Start/Stop/Reload events are shown in the journal for unit tor.service since 100 day ago. Can someone help me to troubleshoot this problem, could the fingerprint be blacklisted? In this case would the Exit come back up running for a few days as described above? Regards and thank you very much for any support. yl

6 11

Does OVH cloud support exit relays?
by Keifer Bly 11 May '20

11 May '20

4 4

obfs4 bridge port question
by torix＠protonmail.com 11 May '20

11 May '20

I am looking at the post install instructions here after putting up my first bridge: https://community.torproject.org/relay/setup/bridge/post-install/ and thought I would try out the bridgeline for it. Bridge obfs4 <IP ADDRESS>:<PORT> <FINGERPRINT> cert=<CERTIFICATE> iat-mode=0 I have all the parts mentioned in the text except for <PORT>. I have ExtORPort set to auto, so I never picked a port in my torrc. How do I get there from here? TIA, --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 4

bridge down
by Anonforpeace 11 May '20

11 May '20

Apologies for the length but detail is important. My bridge pc's internal power supply had to be replaced, and was down for a week. After the replacement, I restarted the daemon and the tor service. Everything seemed normal except that it's not reachable from outside. No configurations have been changed. The only difference I see is a message in the log indicating that the network speed has changed/slowed down. The forwarded port in the router is the same. The torrc file has not changed. I can surf the web. Literally the only change is the replaced power supply. Any ideas? Thanks

4 5

Re: [tor-relays] bridge down
by entensaison＠use.startmail.com 09 May '20

09 May '20

Hi, On Friday, May 8, 2020 at 7:39 PM, Anonforpeace <anonforpeace(a)protonmail.com> wrote: > I have the port forwarded. I've also noticed that the advertised > bandwidth is only 248 KiB/s on the metrics page. This is a first and > I'm not sure how to raise the bandwidth. Could this be what's causing > it to stay offline?? No. The advertised bandwidth tells you how much traffic you were able to handle in the last week. For bridges the advertised bandwidth doesn't influence how much traffic you receive. If you were offline for a week and your relay is still not reachable from the outside that's the reason why your advertised bandwidth remains low. Can you share the log lines that show your issue? Are you able to run a "normal" web service on that computer that is accessible from the internet? > -------- Original Message -------- > On May 8, 2020, 12:35 PM, Paul Geurts wrote: >> >> Option: Dynamic internal ip address so the FW rule does point to the >> right internal ip address? >> Machine has been off for a week so the lease could be expired. >> >> On Fri, May 8, 2020, 18:19 Anonforpeace <anonforpeace(a)protonmail.com> >> wrote: >>> Apologies for the length but detail is important. My bridge pc's >>> internal power supply had to be replaced, and was down for a week. >>> After the replacement, I restarted the daemon and the tor service. >>> Everything seemed normal except that it's not reachable from >>> outside. No configurations have been changed. The only difference >>> I see is a message in the log indicating that the network speed has >>> changed/slowed down. The forwarded port in the router is the same. >>> The torrc file has not changed. I can surf the web. Literally the >>> only change is the replaced power supply. Any ideas? >>> >>> Thanks

1 0

Question on Unanttended Upgrades
by Keifer Bly 05 May '20

05 May '20

Hello, I am wondering, does using Unattended upgrades on Linux, when relay is configured using this configurator: https://tor-relay.co/ install tor updates automatically when they are released? Does the relay need to be restarted? Thanks very much. --Keifer

2 1