- tor-relays - lists.torproject.org

So I am moving my bridge to a new OS and have a few questions?
by Keifer Bly 29 May '20

29 May '20

Hi all, So I am switching my OBFS4 bridge that was here https://metrics.torproject.org/rs.html#details/386E99371B8CD938248940B754F1… >From running on Windows to running on Debian, as the older computer I was running it on, Windows updates started causing it to not boot correctly haha. With some work I was able to get Debian running on the machine. I am wondering, does unattended upgrades as configured here: https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntuUpd… Keep OBFS4 up to date as well? Is it safe to use tor browser through teamviewer from the computer I am running the bridge on? Unfortunately the relay key for the former bridge was lost as the hard drive failed due to a Windows update causing it to crash, do the bridge relay keys have any other relevance than flags? Thanks very much. --Keifer

1 0

How long to bridges last?
by torix＠protonmail.com 28 May '20

28 May '20

Obviously with the 35th of May coming up, new bridges are immediately needed. I was wondering how long a bridge can be up before it becomes known and less useful. Is there a "shelf-life" for a bridge? Or does it depend on which pool the bridge gets put into? --Torix Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

May 29th - Run and use Tor Bridges to bypass censorship and surveillance! (Online)
by gus 28 May '20

28 May '20

Hi, on May 29th 2020, members of The Tor Project will be online to support and explain how to help users in countries that censor the Internet. From 1200 UTC to 2000 UTC, we will teach you how to run a Tor bridge and answer questions about our anti-censorship technology. This event is public and open for everyone! The event will happen via text (not video or audio) on IRC, in the channel #tor-relays on irc.oftc.net. Learn here how to connect to our IRC: https://support.torproject.org/get-in-touch/ More info: https://blog.torproject.org/run-and-use-tor-bridges-irc-meetup ## About bridges Bridges are useful for Tor users living in oppressive regimes, and for people who want an extra layer of security because they're worried somebody will recognize that they are contacting a public Tor relay IP address. A bridge is basically a private Tor relay that helps you hide the fact that you are using the Tor network. To set up a bridge, take a look at the instructions in our Community portal: https://community.torproject.org/relay/setup/bridge/ ## About this event This is our first online event promoting bridges and anti-censorship technology and you can join at any time between 1200 UTC and 2000 UTC. Several members of The Tor Project will be around to answer questions and provide technical support related to bridges and anti-censorship technology. We expect to answer your questions and teach attendees how they can help friends in censored countries, how they can set up Tor bridges, and what else they can do to fight online censorship. ## Learn more - Tor Browser User Manual https://tb-manual.torproject.org/bridges/ https://tb-manual.torproject.org/circumvention/ - Censorship section on Support portal https://support.torproject.org/censorship/ - Community portal - Relay Operators section https://community.torproject.org/relay/ - Snowflake https://snowflake.torproject.org/ -- The Tor Project Community Team Lead http://expyuzz4wqqyqhjn.onion/

1 0

Bridge log indicates missing geoipdb
by nottryingtobelame＠protonmail.com 27 May '20

27 May '20

>If you use Raspbian, that's still a 32-bit OS Insert shocked Pikachu meme. I guess I had to learn that some how, but I have to beat myself up a little for not catching that sooner. I will upgrade. Thank you.

1 0

Bridge log indicates missing geoipdb
by nottryingtobelame＠protonmail.com 27 May '20

27 May '20

Thank you for the reply. I have one on a Raspberry Pi 3B+ and one on a Raspberry Pi 4. I believe both are 64-bit ARM.

2 1

Weird Issue With nyx
by AceOfRelays32 27 May '20

27 May '20

Chowning the torrc file fixed it, and I tried adding myself to the Tor group but that doesn't exist for whatever reason. However chowning the torrc file and then rebooting caused Tor to give my relay a new fingerprint which is slightly annoying. New relay though so I'm not too bothered by it. Thanks! -AceOfRelays32-

1 0

Why is this Middle Relay almost unused ?
by petrarca＠protonmail.ch 27 May '20

27 May '20

I'm wondering why this relay is almost unused: Fingerprint 605EE4375EE4C38215C8949F5808863749FD4F4A ? It's running on a 1 Gbit link and there is plenty of unused bandwidth. The bandwidth is set to 42 Mbps (even prioritized on the internet link). There were no outages for months and the connection is stable and fast. There's also plenty of resources available on the actual router (tor instance). Relay monitoring shows usage average around 0.5 - 1 Mbps only (so around 1-2 percent of the available bandwidth). Consensus Weight is down to only 99. Any idea what could be the reason of the low usage, low Consensus Weight ?

1 0

Weird Issue With nyx
by AceOfRelays32 26 May '20

26 May '20

It would seem my relay is fully functional. Being it has only been up for less than 3 hours though I can't 100% confirm that. Anyways, when I launch nyx to check it's status, I get a permission error from /run/tor/control.authcookie. Chowning /run/tor/control.authcookie and then running nyx solves that issue, however it doesn't persist on reboots. Running nyx as root also fixes it. I wrote an alias to automate chowning and running nyx for the time being, but I'm wondering if there is a better fix.

2 1

Bridge log indicates missing geoipdb
by nottryingtobelame＠protonmail.com 26 May '20

26 May '20

Had the following log entries for my bridge: May 25 11:49:50.000 [warn] Failed to open GEOIP file /usr/share/tor/geoip. May 25 11:49:50.000 [warn] We've been configured to see which countries can access us as a bridge, and we need GEOIP information to tell which countries clients are in. Tried to run sudo apt install tor-geoipdb and got this: The following packages have unmet dependencies: tor-geoipdb : Depends: tor (>= 0.4.3.5-1~d10.buster+1) but 0.4.2.7-1~d10.buster+1 is to be installed E: Unable to correct problems, you have held broken packages. I saw on tor-announce that 0.4.3.5 is out, but it looks like the buster package isn't available yet. I made sure I have the tor repo's in /etc/apt/sources.list and I have the proper signatures as everything validates when I run apt update. Is there a way to resolve this?

2 1

Tor Relay Web Ports
by mnlph74 25 May '20

25 May '20

Hi, I'm running a non-exit relay for quite some time now and I would like to open ports 53, 80, 443 (web ports) to be more useful. How do you handle fraudulent complaints? What is the best approach to this situation? Thank you for your help. Sent with ProtonMail Secure Email.

3 8

Re: [tor-relays] Why does it take 4 days to get the HSDir flag back?
by Roger Dingledine 23 May '20

23 May '20

On Thu, May 21, 2020 at 08:03:03PM +0200, tschador(a)posteo.de wrote: > after an update of tor it always take about 4 days to get the HSDir flag > back while the other flags are set very qick. What is the reason for > this delay? It's because the directory authorities are configured to wait that long before assigning the flag. See the MinUptimeHidServDirectoryV2 option: https://gitweb.torproject.org/tor.git/tree/src/feature/dirauth/dirauth_opti… It used to be 25 hours, long ago, with the reasoning that if a relay hasn't been up for a day, then it's too likely to go away again soon, and this churn causes reliability problems in reaching onion services. We changed it to 96 hours in late 2014, when we saw a Sybil attack (many new relays suddenly appearing) and realized that while they wouldn't become Guards for a while, they would become HSDirs quite quickly, and maybe we want to give ourselves a few more days after new relays appear before they get to become HSDirs. And here are two tickets on doing even more to make it hard for jerks to sign up relays with the goal of cheaply getting the HSDir flag: https://bugs.torproject.org/16538 and https://bugs.torproject.org/19162 And of course the long term fix is to drop the deprecated v2 onion service design, since the v3 onion service design is much better at limiting what an HSDir relay can learn about onion services: https://www.youtube.com/watch?v=Di7qAVidy1Y Hope this helps, --Roger

2 1

Re: [tor-relays] How do I add relays to a "family" and what are the benefits?
by Keifer Bly 23 May '20

23 May '20

1 0

How do I add relays to a "family" and what are the benefits?
by Keifer Bly 23 May '20

23 May '20

3 3

Trouble with opening ports for a new bridge
by nottryingtobelame＠protonmail.com 22 May '20

22 May '20

Hello, I have two low-traffic websites hosted on Digital Ocean. Each one is its own Droplet. I setup a Tor bridge on one and it has been running successfully (20-80 clients / 6 hours or so average) so I know this is possible. Now I am trying to setup a bridge on the second Droplet. I have Tor and obfs4proxy installed. My torrc is as follows: Log notice file /var/log/tor/notices.log RunAsDaemon 1 Nickname whatever ExitRelay 0 ExitPolicy reject *:* BridgeRelay 1 BridgeDistribution moat ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy ORPort 6063 ExtORPort auto ContactInfo <nottryingtobelame AT protonmail DOT com> I am pasting the output of netstat -plunt to pastebin for the sake of clarity and space: https://pastebin.com/30UHP5FD And here is a screenshot of the firewall I created on Digital Ocean and applied explicitly to this Droplet: https://imgur.com/a/jm9ZIQ6 I have rebooted the Droplet, deleted and re-created the firewall, and I'm not getting anywhere. Any assistance is appreciated.

2 1

Metrics site down
by mnlph74 21 May '20

21 May '20

As of this writing... noticed that the metrics site is currently down.. Can someone confirm? Thanks https://metrics.torproject.org/ Sent with ProtonMail Secure Email.

1 0

Tor relay occasionally maxing out CPU usage
by William Kane 21 May '20

21 May '20

Hi there, I am the operator of the following relay: https://metrics.torproject.org/rs.html#details/47E1157F7DA6DF80EC00D745D73A… The relay is running on my Arch Linux server running kernel version 5.6.11. This is my tor configuration file: ORPort 37.157.195.83:38619 ORPort [2a02:2b88:2:1::3239:0]:38619 DirPort 37.157.195.83:44776 Nickname michaelscott ContactInfo ttallink(a)googlemail.com ControlPort 9051 SocksPort 0 CookieAuthentication 1 ExitPolicy reject *:* DataDirectory /var/lib/tor Sandbox 1 Linux kernel boot parameters from grub: quiet mitigations=off Kernel parameters from /etc/sysctl.d set on boot through systemd: kernel.dmesg_restrict = 1 net.ipv6.ip_nonlocal_bind = 1 kernel.yama.ptrace_scope = 3 vm.swappiness = 60 Tor systemd unit (shipped by distribution): [Unit] Description=Anonymizing Overlay Network After=network.target [Service] User=tor Type=simple ExecStart=/usr/bin/tor -f /etc/tor/torrc ExecReload=/usr/bin/kill -HUP $MAINPID KillSignal=SIGINT LimitNOFILE=8192 PrivateDevices=yes [Install] WantedBy=multi-user.target Tor systemd unit overrides: [Service] ProtectSystem=strict ProtectHome=true PrivateTmp=true ProtectKernelLogs=true ProtectKernelModules=true ProtectKernelTunables=true ProtectControlGroups=true NoNewPrivileges=true RestrictSUIDSGID=true RestrictAddressFamilies=AF_INET AF_INET6 ReadWritePaths=/var/lib/tor Occasionally, the CPU usage hit's 100%, and the maximum throughput drops down to around 16 Mbps from it's usual 80 Mbps. This happens randomly and not a fixed intervals which makes it pretty hard to profile. No abnormal entries in the log files. I found ticket #24857 in which someone describes a similar behavior, but on _Windows_. https://trac.torproject.org/projects/tor/ticket/24857 Is this also an issue on Linux? In that case, setting DirCache to 0 should fix the issue, however that would mean that, according to the manual, I would no longer be able to mirror directory information. If anyone else encountered the same problem and found a solution, please let me know. Best Regards, William

3 9

Tor relay - hardware upgrade and "Observed bandwidth" not changed
by lilyus＠pm.me 19 May '20

19 May '20

Hello, I recently upgraded the hardware of my Tor relay and the "Advertised Bandwith" did not change. https://metrics.torproject.org/rs.html#search/pelote :9001 > Bandwidth rate: 1024 MiB/s > Bandwidth burst: 1024 MiB/s > Observed bandwidth: 5.46 MiB/s :9101 > Bandwidth rate: 1024 MiB/s > Bandwidth burst: 1024 MiB/s > Observed bandwidth: 4.62 MiB/s My Internet provider allow: - 1 Gbit/s download - 600 Mbit/s upload The relay new hardware is "NUC8i5BEK" - Intel(R) Core(TM) i5-8259U CPU @ 2.30GHz - 8GB DDR4 SDRAM PC4-19200 - Samsung SSD 950 PRO 256GB nvme System: - OpenBSD 6.7 - tor-0.4.2.7 Relay configuration is done with https://github.com/nusenu/ansible-relayor No IPv6 (yet). Do I have to wait for something like "The lifecycle of a new relay" ? https://blog.torproject.org/lifecycle-new-relay Regards, Lilyus

1 0

warn message in notices .log after reinstallation of the relay (and restore of torrc and "keys" folder)
by David Strappazon 19 May '20

19 May '20

Hi, I had issues with my bridge who is running on a Raspberry pi 3+ so i've decided to completely reinstall it. First i saved my torrc file and my "keys" folder from /var/lib/tor. First thing i did after a clean install of the server was to copy and paste my torrc file in /etc/tor/ and the files "ed25519_master_id_secret_key" and "secret_id_key" in the keys directory. Anyway after starting Tor i had the following messages in notices.log: [warn] http status 400 '"looks like your keypair has changed?...etc...etc... i decided to completely replace the content of the keys folder by my backup but i still have the same message. When i go to Tor relay search i see my bridge with two different identities and both are offline ( one of the hashed fingerprints is the right one). Anyway if i run "nyx" i can see that Tor is working, reachable from the outside and some circuits are built. I suspect i make a mistake with the "keys" but i'm a little bit lost. Can you guys help me please ? Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

tor relay on windows 10
by Станислав 19 May '20

19 May '20

4 6

consensus page 'down'
by Paul Geurts 19 May '20

19 May '20

it seems to me that the tor consensus page has not been updated since: Consensus was published 2020-05-14 19:00:00 UTC rgds. Paul

3 2

EOL 1938EBACBB1A7BFA888D9623C90061130E63BB3F FallbackDir
by Anders Burmeister 18 May '20

18 May '20

FallbackDir 1938EBACBB1A7BFA888D9623C90061130E63BB3F Expired rest of the family happily up and running. /anders

2 2

Relay keeps crashing (raspberry)
by David Strappazon 18 May '20

18 May '20

Hi, I've been running a bridge since october without issue. But two days ago i realized that my raspberry keep craching like every two hours or so. Nothing changed. I'm running kali linux (re4son kernel) on a raspberry PI 3 +. The logs don't show anything. Sometime on screen i have a thermometer icon but when i check the temperature in real time it is never over 60°C. I have updated and upgrading everything: same problem. My power supply looks ok. Any idea of what i should check or do to fix the problem? It worked very well for months. does saving my "key" and reinstalling everything could help? any tips would be welcome. regards, David Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 3

Does this mean upgrades are working?
by Keifer Bly 18 May '20

18 May '20

Hi, upon configuring unattended upgrades, I am getting this on testing. Does this mean the upgrades are working properly? How will running upgrades every day effect my uptime? Thx. unanttended upgrades.PNG <https://drive.google.com/file/d/1jcm_STo87waEKMpxztdajQWXV4Enk89d/view?usp=…> --Keifer

3 3

OVH Service
by mnlph74 18 May '20

18 May '20

This is for Tor Relay Operators with OVH A couple of hours ago, I availed a VPS from OVH just to try it out and it's been 10 hours now and my payment was validated and the order is still being processed, is this a normal waiting time for the order to be delivered? Thanks for the help. Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 2

Re: [tor-relays] Does this mean upgrades are working?
by Keifer Bly 18 May '20

18 May '20

This output does mean it will do this automatically correct? Thx On Sun, May 17, 2020 at 10:29 AM Matthew Smith <matt(a)offtopica.uk> wrote: > > Keifer Bly writes: > > How will running upgrades every day effect my uptime? Thx. > > When an update to Tor is available, it will be applied and then your Tor > daemon will be restarted. It will affect your uptime, but all of your > relay's flags (like fast, stable, ...) will still be there when it comes > back online. > -- --Keifer

1 0