- tor-relays - lists.torproject.org

Running on a Raspberry Pi
by William Denton 14 Sep '19

14 Sep '19

I'm reconfiguring things and decided to move a relay from an old laptop to a Raspberry Pi. I tried it on a Pi Zero W, which is very cheap but also pretty slow, and it just didn't work. Now I'm trying it on a Pi Four (which has four CPUs and two gigs of RAM) and so far it's working, though it's not moving as much traffic as on the laptop. There I was doing about 25 gigs a day, and so far now I'm doing about four or five with the same configuration. Anyone else running a relay on a Pi? It's cheap and pretty easy to set up, even if it turns out not to be an enormous contribution to the network. Bill -- William Denton :: Toronto, Canada --- Listening to Art: https://listeningtoart.org/ https://www.miskatonic.org/ --- GHG.EARTH: http://ghg.earth/ Caveat lector. --- STAPLR: http://staplr.org/

5 5

Re: [tor-relays] Running on a Raspberry Pi
by nottryingtobelame＠protonmail.com 13 Sep '19

13 Sep '19

If you're having any heat issues with the Pi 4, may I suggest the aluminum heatsink case from flirc.tv? It took my average temps down about 10°C. Beautiful case, great price for what it does. -------- Original Message -------- On Sep 13, 2019, 8:00 AM, wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > Today's Topics: > > 1. Re: Running on a Raspberry Pi (William Denton) > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 12 Sep 2019 19:50:22 -0400 (EDT) > From: William Denton <wtd(a)pobox.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Running on a Raspberry Pi > Message-ID: <alpine.DEB.2.02.1909121945030.14928(a)shell.miskatonic.org> > Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII > > On 10 September 2019, ronqtorrelays(a)risley.net wrote: > >> From what I have read about the Pi 4, heat is a big issue. If you're not doing >> something to cool it, your CPU speed is likely being throttled due to >> overheating. > > I'm not doing any cooling except for not having it in case. I'm in Canada, and > with winter coming I can leave it hanging inside a window, and that'll cool it > down some. > > The speed on the relay has picked up to about a quarter of what it was (so about > six gigs a day), and I'll wait and see if it continues to increase, and then > maybe fiddle with the config. > > So, if a Pi is cheap to buy and easy to use and maintain, I'm happy to use it > for a relay, even if it's not a major contributor to the network. > > Bill > -- > William Denton :: Toronto, Canada --- Listening to Art: https://listeningtoart.org/ > https://www.miskatonic.org/ --- GHG.EARTH: http://ghg.earth/ > Caveat lector. --- STAPLR: http://staplr.org/ > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > ------------------------------ > > End of tor-relays Digest, Vol 104, Issue 15 > *******************************************

1 0

ORPort
by Anonforpeace 12 Sep '19

12 Sep '19

Hello: Hope someone can help me. I'm trying to configure a bridge and I've followed all the instructions and I've chosen several ports and none of them are reachable. I've used the test site that Tor lists on its site. "Your server has not managed to confirm that your its ORPort is reachable." Each port I list on the test site says unreachable. What am I missing? The instructions are pretty straightforward. Thanks

4 6

Short Research Survey
by Anon-research 12 Sep '19

12 Sep '19

Dear Tor relay operators, We are a team of researchers at MIT, and we would like to ask Tor relay operators to participate in a short and anonymous survey (no personal information or IP address collected). This study is focused on the importance of providing anonymity by volunteers in various contexts, and will take no more than 5-10 minutes to finish. You can learn more and take the survey at this link: https://mit.co1.qualtrics.com/jfe/form/SV_6W3YXSCnqMVGPs1 Your input is very valuable to our study, and we look forward to your feedback. Please feel free to email us at anon-research(a)mit.edu if you have any questions. (Our survey platform unfortunately uses JavaScript. We apologize for being unable to switch it off. We would be grateful for your participation if you are comfortable taking the survey.)

3 2

Re: [tor-relays] Running on a Raspberry Pi
by nottryingtobelame＠protonmail.com 10 Sep '19

10 Sep '19

My primary relay runs on a Pi 3B. 903CA67D0DEB74CFBB01432840A26CB8C6C18FDF. According to the logs, it's sending and receiving a total of about 130 GB per day. A Pi 4 should definitely be able to handle it. Pi Zeroes had a conflict with the name of the CPU architecture and so Tor apparently never worked quite right on them. I'm not an expert, but my guess is that the relay just had to reset its advertised bandwidth and has to build back up again. Hope this helps.

1 0

FW: Lots of spam on new tor exit node.
by email-group＠tor.bband.net 10 Sep '19

10 Sep '19

I have recently setup a new tor exit node but since about an hour of setting it up it has been almost maxed out with spam. https://metrics.torproject.org/rs.html#details/4AFECB973C2268D5074D8DEDAF0BD B604C89ED50 How can I combat it? I turned the node off for about an hour from about 6.30am GMT but the user reconnected. From the looks of it they are connecting through the tor network. DNS logs are looking like it is targeting illicit Russian drug forums almost all with .biz domains.

3 3

What could cause a huge clock skew (9 days) across Tor restarts - anyone else experienced something like this?
by s7r 08 Sep '19

08 Sep '19

Hello, I'd like to hear if anyone else experienced this and has an idea of what the cause might be. I did not oped a ticket about this yet because I am not sure there is a problem in Tor, and it eventually healed by itself. The relay was running just fine. Server had an accurate time before upgrade and time service ntp was running. I only did an upgrade to Tor from the latest nightly build and of course it does a service stop -> upgrade -> service start. After Debian finished installing the new Tor, I did as usual: check the log file to see that all is OK and circuits were built and descriptors published, etc. I saw this: The log before restart was reporting: Sep 06 21:03:16.000 [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. Sep 06 21:03:17.000 [notice] Delaying directory fetches: We are hibernating or shutting down. Sep 06 21:03:46.000 [notice] Clean shutdown finished. Exiting. [skipped boring part intentionally] Aug 28 07:40:07.000 [warn] Our clock is 9 days, 11 hours, 20 minutes behind the time published in the consensus network status document (2019-09-06 23:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings! Aug 28 07:40:07.000 [warn] Received ns flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 9 days, 11 hours, 20 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. Aug 28 07:40:07.000 [warn] Problem bootstrapping. Stuck at 0% (starting): Starting. (Clock skew -818406 in ns flavor consensus from CONSENSUS; CLOCK_SKEW; count 2; recommendation warn; host ? at ?) Aug 28 07:40:08.000 [warn] Our clock is 9 days, 12 hours, 20 minutes behind the time published in the consensus network status document (2019-09-07 00:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings! Aug 28 07:40:08.000 [warn] Received microdesc flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 9 days, 12 hours, 20 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. Aug 28 07:40:08.000 [warn] Problem bootstrapping. Stuck at 0% (starting): Starting. (Clock skew -822006 in microdesc flavor consensus from CONSENSUS; CLOCK_SKEW; count 3; recommendation warn; host ? at ?) and then Sep 06 21:04:50.000 [notice] Starting with guard context "default" ...proceed to normal start and everything as usual from now... So, Tor had the time Sep 06 21:03:46.000 before restart. After restart, it thought it had Aug 28 07:40:07.000 and then Aug 28 07:40:08.000 and then it healed and reported Sep 06 21:04:50.000. This is kind of odd. What could be the reason for this? The server is just a Debian machine that runs Tor and nothing else. Thanks!

3 4

Re: [tor-relays] Operator straw poll: Reasons why you use Tor LTS versions?
by starlight.2018q2＠binnacle.cx 07 Sep '19

07 Sep '19

My relays track current stable, though I prefer going slow updating unless a major CVE/TROVE lands. LTS is beneficial for many reasons and, from the enthused developer perspective perhaps best viewed as "necessary evil." Rather than thinking about killing LTS, is better to think about ways to campaign for and facilitate rapid migration to a latest LTS release when very important features arrive. Possibly this translates to early retirement via blacklisting of the eldest version.

1 0

Tor exit relay in Finland still being attacked
by potlatch 05 Sep '19

05 Sep '19

I had TorExitFin [0] down for a few days hoping the non-Tor Iranian intruders would wander off. I restarted it today and before NYX could come up there were 257 Iranian IPs present (nicely automated!). The IP addresses range over all of the IP addresses allotted to Iran so their usage must come from a high authority to get that kind of access. NYX communications page showed that none of these had hashed fingerprints. At the same time 3 IPs came up from other countries with fingerprints. Should I leave this shut down for the security of the network? -potlatch [0] 9B31F1F1C1554F9FFB3455911F82E818EF7C7883 Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Low-bandwidth relay
by John Williams 05 Sep '19

05 Sep '19

I've been running tor on my openwrt-based home router (along the lines of 'anonabox'), and I configured it as a non-exit relay, because I thought why not - every little helps, right? I set a very low bandwidth limit, but it was using most of the configured bandwidth, so I figured it was helping. A few days ago I got an email saying my tor version was EOL, so I upgraded from version 0.3.2.10 to 0.4.1.5 (which required upgrading openwrt). Now tor is still working fine for me, but I don't see any network traffic when I'm not using it, so it is evidently not routing any third-party traffic any more. I don't see any errors in the log. Is this (a) expected behaviour because the previous traffic was just a bug in the old version of tor, or (b) an indication that there is something wrong with my upgraded installation? Any suggestions about where I should look would be welcome. I'm considering reconfiguring my system to be a bridge instead of a router, but I would prefer to sort out any possible problems with what I've got now, before making further changes.

2 1

end-of-life relays will be removed from the network eventually
by nusenu 04 Sep '19

04 Sep '19

Patches [1] are being prepared to remove Tor relays running end-of-life versions of Tor eventually. Affected relays as of 2019-09-03 16:00 UTC #relays 1276 CW Fraction 13.25 % Guard 16.91 % Exit 2.19 % Want to know if your relay is affected? Here is a list of affected relays (updated daily): https://nusenu.github.io/OrNetStats/eolrelays The Tor Relay Guide has instructions to help you stay on maintained Tor releases. https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… [1] https://trac.torproject.org/projects/tor/ticket/31549 Tor people are sending out emails (cc'ing network-health): https://lists.torproject.org/cgi-bin/mailman/listinfo/network-health -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 1

Re: [tor-relays] Status of "new" defect #30767 Custom obfs4 bridge does not work on Tor Browser for Android
by nottryingtobelame＠protonmail.com 03 Sep '19

03 Sep '19

Ah, thank you for the reply. Well, I will continue to donate to and support the tor project whenever I can.

1 0

Status of "new" defect #30767 Custom obfs4 bridge does not work on Tor Browser for Android
by nottryingtobelame＠protonmail.com 02 Sep '19

02 Sep '19

I hate to be that guy, but I was wondering if there is any progress on resolving this defect? I'm sure it's not a front burner type of problem, but it would be nice to be able to use the Android app as intended. Using Orbot/Orfox as a backup feels like a poor workaround when there's an official Tor browser app. If I'm being impatient, just let me know - I'm not familiar with what's normal during this process. Thanks in advance.

3 2

Fast flag - wrong speed in dir-spec.txt?
by [REDACTED] 30 Aug '19

30 Aug '19

Hi Torproject, as far as i can see my relay currently can advertise 560 KiB/s. That are 573,44 KB/s. 43C7BC2E17FB26B204EC0BD9AA784E4736979087 Following your dir-specs it should get the "Fast" flag if it can provide more than 100KB/s. https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2595 At my other relay i already saw it providing 562 KiB/s and it got the "Fast" flag. A9DB853547A6459AB5190E62BF2F7B8F068FEB0A It seems the limit is above 560 KiB/s? If i remember it right then i already read somewhere that the requirements are now higher than 100 KB/s so i guess your documentation is wrong? Am i missing something why my relay with 560 KiB/s dont get the "Fast" flag?

3 3

Please test bandwidth and resiliency of greyponyitnyc002
by Conrad Rockenhaus 30 Aug '19

30 Aug '19

Hello, I was wondering if Rob would be willing to perform speed measurements on this node, it’s. 20 vcpu running CentOS 7 with manually compiled Tor against OpenSSL 1.1.1 on a 30Gbit link. I know it’s not going to see all of that bandwidth, it’s meant as a high powered VM platform because my intention is to start giving VMs back to the guys on my old infrastructure, and hopefully setup a “Torservers” type arrangement down the road, since this is hosted on unique ASN and addresses. Thanks, Conrad Rock Rockenhaus Greypony IT Consulting (254) 292-3350

1 0

3 questions
by niftybunny 29 Aug '19

29 Aug '19

Hi there, 1. anyone with any new news about the Darknet law in Germany or where you could ask for information? 2. Whats up with Torflow, still linked from Tor Atlas. As far as I can see it was last updated over 3,5 years ago? 3. So what happened to the new measurement? I can see a big spike https://metrics.torproject.org/bandwidth.html <https://metrics.torproject.org/bandwidth.html> and now its back to normal? Same with a lot of my relays, traffic doubled/tripled and now its the same or worse. niftybunny

2 2

Why is my Tor bridge relay not getting any traffic?
by Hikari 29 Aug '19

29 Aug '19

Hello everybody! I used to run a Tor bridge on Windows at home, where I have a 300/150 Mbps ISP. This Windows has memory leak and crashes after some hours, ad I believe that was making my bridge never get traffic. A few weeks ago I moved it to a Ubuntu server, also at home. I use uptimerobot.com to monitor if its port is reachable from outside and healthchecks.io to monitor if traffic entering from its local SOCKS port is reaching check.torproject.org. It's always up and reachable. But nyx reports it's rarely getting any traffic, and its bandwidth never surpasses 1KB/s. Its log heartbeat reports very little download and upload and always claims to has seen 0 unique clients. But how come, if my healthchecks.io monitor's curl call uses it every few minutes? metrics.torproject.org reports correct dates and uptime. Advertised Bandwidth is 58KB/s, way above what nyx reports. Flags are Fast, Running, V2Dir, Valid. What might be wrong? Or is it normal for a Tor bridge relay be this idle? This is my torrc removing identifiable data. |## Configuration file for a typical Tor user ## Last updated 9 October 2013 for Tor 0.2.5.2-alpha. ## (may or may not work for much older or much newer versions of Tor.) ## A handle for your relay, so people don't have to refer to it by key. Nickname MyNick ContactInfo mycontact ## Entry policies to allow/deny SOCKS requests based on IP address. SocksPort 9031 #SocksPort ::9031 #SocksPort 0.0.0.0:80 #SOCKSPolicy accept 192.168.* ## Send all messages of level 'notice' or higher to /var/log/tor/notices.log Log notice file /var/log/tor/notices.log ## Send every possible message to /var/log/tor/debug.log #Log debug file /var/log/tor/debug.log ## Use the system log instead of Tor's logfiles #Log notice syslog ## Uncomment this to start the process in the background... or use RunAsDaemon 1 ## The directory for keeping all the keys/etc. By default, we store ## things in $HOME/.tor on Unix, and in Application Data\tor on Windows. DataDirectory /var/lib/tor ## The port on which Tor will listen for local connections from Tor ## controller applications, as documented in control-spec.txt. ControlPort 9051 ## If you enable the controlport, be sure to enable one of these ## authentication methods, to prevent attackers from accessing it. CookieAuthentication 1 ################ This section is just for relays ##################### # ## See https://www.torproject.org/docs/tor-doc-relay for details. ## The IP address or full DNS name for incoming connections to your ## relay. Leave commented out and Tor will guess. Address hikari.mydomain.com ## Required: what port to advertise for incoming Tor connections. ORPort 80 ## Uncomment this to mirror directory information for others. Please do ## if you have enough bandwidth. DirPort 9030 # what port to advertise for directory connections ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy #ExtORPort 0.0.0.0:8000 ExtORPort 9041 ## Uncomment to return an arbitrary blob of html on your DirPort. Now you ## can explain what Tor is if anybody wonders why your IP address is ## contacting them. See contrib/tor-exit-notice.html in Tor's source ## distribution for a sample. #DirPortFrontPage /etc/tor/tor-exit-notice.html ExitPolicy reject *:* # don't run as an exit node BridgeRelay 1 # bridge PublishServerDescriptor 1 # published on bridge directory DB BridgeRecordUsageByCountry 1 # it's nice to see the country codes of users you are assisting #BandwidthRate 512000 #RelayBandwidthBurst 512000 #RelayBandwidthRate 512000 CellStatistics 1 PaddingStatistics 1 DirReqStatistics 1 EntryStatistics 1 ExitPortStatistics 1 ConnDirectionStatistics 1 HiddenServiceStatistics 1 ExtraInfoStatistics 1 #If non-zero, try to write to disk less frequently than we would otherwise. This is useful when running on flash memory or other media that support only a limited number of writes. (Default: 0) AvoidDiskWrites 0|

6 9

attack on my Finland exit/backup directory [9B31F1F1C1554F9FFB3455911F82E818EF7C7883]
by potlatch 28 Aug '19

28 Aug '19

I still haven't been able to rid myself of the Iranian servers revealed on the NYX connections page. I don't know their purpose but they slow the relay by about 85%. I have dropped them in the iptable input chain, restarted the VPS, but they show up after a day or two in spite. Today there were 121 of them with a large range of IPs. There have been as many as 1400 in a single day. None have identifiable hashed fingerprints. I've enclosed a couple attachments of my input table (partial) and the NYX connection page (also partial). Can anyone enlighten me regarding this situation? I will probably dump the exit relay if I can't fix this intrusion. Thanks people!! -potlatch Sent with [ProtonMail](https://protonmail.com) Secure Email.

2 1

Re: [tor-relays] Why is my Tor bridge relay not getting any traffic?
by Hikari 28 Aug '19

28 Aug '19

Thanks. It's been a few weeks I moved my relay to Ubuntu. I changed my Nickname and ContactInfo when I did that, so my fingerprint is new. Why is it on email bucket? Am I able to move it to bridges.torproject.org? On 27/08/2019 08:14 PM, Philipp Winter wrote: > On Tue, Aug 27, 2019 at 03:03:37PM -0300, Hikari wrote: >> Hello. Here's my fingerprint ------------ > > Your bridge is in the email bucket. It may not be requested as often as > over moat, but give it some time and you'll eventually see users. > > Cheers, > Philipp >

1 0

Improving throughput on weak CPU?
by Jochen 27 Aug '19

27 Aug '19

Hi there, I'm the operator of the following two exit nodes: https://metrics.torproject.org/rs.html#search/family:94C268630BEDCB64E7F888… My CPU is an Intel C2750 (8 cores total), which supports hardware accelerated AES yet a single process still maxes out at only ~150mbit/s. To get the most out of the machine and my single IPv4 address, I simply ran another relay which works fine, and now I'm averaging at around ~315mbit/s. Is there anything else I can tweak to improve throughput without having to order more IP addresses? I'm running Arch with stock 5.2.9 linux kernel. That being said, true multi threading would be much appreciated and would help people like me a lot :-) Regards, Jochen

4 4

AvoidDiskWrites
by [REDACTED] 25 Aug '19

25 Aug '19

Hi Torproject, i think about enabling AvoidDiskWrites 1 on all my relays and not only on my Pi because the prices for the VPS are anyway cheap as f*ck so i think saving the provider a few disk writes is a nice deal. In the manual it is described as: *AvoidDiskWrites* *0*|*1* If non-zero, try to write to disk less frequently than we would otherwise. This is useful when running on flash memory or other media that support only a limited number of writes. (Default: 0) ... which is not a very informative description on how it changes the behavior of Tor. I didnt found any more explanation about it. I would like to understand what Tor is NOT writing to disk anymore if set to 1 or what Tor IS writing to disk if set to 0 and if changing that have any effect for Tor users. As a relay operator i couldnt really see any difference enabled or not. Kind regards

3 2

tor relay ipv6
by armik900＠gmail.com 23 Aug '19

23 Aug '19

hi.in relay stopped working ipv6.address is correct all pings, including tor to the servers, but relay does not work.before that it worked perfectly 2 months.

6 12

Tor Relay - RelayBandwidthRate vs. RelayBandwidthBurst
by petrarca＠protonmail.ch 22 Aug '19

22 Aug '19

I'm struggling a bit with the two config options for RelayBandwidthRate and RelayBandwidthBurst - what I currently have in my torrc config file is: > ... > RelayBandwidthRate 8 Mbit > RelayBandwidthBurst 12 Mbit > ... My assumption was that on average the Relay would consume 8 Mbps max. but over a shorter period of time also up to 12 Mbps in case needed. What I see (historical monitor data at 10 s intervals for the past 6 months) is that the bandwidth usage never exceeds 8 Mbps. I can also see the consumption to be levelled out at 8 Mbps for minutes or hours so it looks like there would be a need for more bandwidth. My question: why can't I see the bandwidth usage going above 8 Mbps and making use of the allowed burst? Btw, I'm typically using the latest stable tor, currently the relay is on 0.4.0.5. Any comment welcome!

2 2

Very high CPU Load and low Traffic since Sunday
by Tim Niemeyer 21 Aug '19

21 Aug '19

Hello I've noticed a reduction in tor traffic about 50% since Sunday. The cpu load stayed almost same. The amount of TCP Sessions increased from ~34k to ~65k. Also the abuse rated about network scans got increased since Sunday. Does anyone knows what's there going on? My guess is that since Sunday anyone uses Tor for extended network scans, which results in a very high packet rate. Personally I've no problem with some network scans, but this is a bit annoying and I asked myself if this is still a scan or more a DOS. https://metrics.torproject.org/rs.html#search/family:719FD0FA327F3CCBCDA0D4… Kind regards Tim

7 7

Emerald Onion's new relays
by Christopher Sheats 20 Aug '19

20 Aug '19

Hello, Beginning this Wednesday, 2019-Apr-03, Emerald Onion will be starting 40 new uncapped and unfiltered exit relays using HardenedBSD in Seattle. We will turn on 10 new relays per day and be monitoring performance. In tandem, we will be publishing our updated edge routing and Tor relay configurations on our Github. We'll also publish an updated transparency report (spoiler: zero new requests). This work is part of our efforts to saturate our new unmetered 10Gbps transit link in the Westin data center. There we peer with the Seattle Internet Exchange with a separate 10Gbps connection. We'll be using our existing IP scopes: 2620:18C::/36 23.129.64.0/24 We are in the process of creating an RPKI ROA for our prefixes, and we are still rebuilding our DNS resolver (thanks nusenu for the feedback). These things will be completed before we turn on the new relays. If you donated to Emerald Onion (a 501(c)(3)) nonprofit), thank you! We'll be naming the relays accordingly. We will still accept new donations for relay naming rights-- email me directly for more information. Lastly, and If you're unaware, I spoke about our work at DEFCON 26: https://www.youtube.com/watch?v=cs6a1i4Owic Cheers, -- Christopher Sheats Executive Director for Emerald Onion Email: yawnbox(a)emeraldonion.org Office (& Signal): +1-206-739-3390 Website: https://emeraldonion.org/

12 20