- tor-relays - lists.torproject.org

Stable and fast flags
by David Strappazon 04 Dec '19

04 Dec '19

Hi, How long is it supposed to take to get the stable and fast flags? My bridge is up since 13 days. At the beginning I had both flags then I lost them because of a reboot I think. Since, they never came back. Envoyé depuis ProtonMail mobile

2 2

Re: [tor-relays] New operator
by entensaison＠use.startmail.com 04 Dec '19

04 Dec '19

On Thursday, November 21, 2019 at 7:29 PM, Mario Costa <mario.costa(a)icloud.com> wrote: > >> Il giorno 21 nov 2019, alle ore 15:49, Matt Traudt >> <pastly(a)torproject.org> ha scritto: >> >> Thanks for running a bridge. >> >> Check Tor's logs to make sure it is actually running and doesn't >> report >> issues. Search its hashed fingerprint on >> https://metrics.torproject.org/rs.html and make sure it is listed as >> up. >> Verify you did *not* set 'PublishServerDescriptor 0'. Verify you can >> use >> your bridge from outside your home. I once had a residential ISP >> that >> blocked inbound port 80 but not 443. > This actually made me realize that my home router would not properly > forward ports 80 and 443 from outside. I could connect to my bridge > from the LAN (even using my external IP) but not from outside. I had > to change to a non-standard port, unfortunately, because apparently > 80 and 443 are used by the router’s web GUI even if I disabled > external access to it. That’s a shame because I understand that ports > 80 and 443 are less likely to be blocked by censors. > > However, it’s still not clear to me how I can confirm anyone is using > the bridge. In the nyx log you see messages like 'In the last X hours we have seen X unique clients' (I don't remember the exact wording) Those are the clients that did use your bridge. > When I connect to it, all I see in nyx are OUTBOUND connections and > not even one inbound connection (maybe that’s by design in order to > protect connecting users' privacy, I don’t know). You are probably right. In the past you could see connecting users in nyx as inbound connections without visible IP-address. Now they are not displayed as inbound connections any more. The outbound connections that are needed for these users are still displayed.

3 2

Probabilities
by Vitor Milagres 04 Dec '19

04 Dec '19

What do guard, middle and exit probabilities mean? Say, for example, that the middle probability for a certain relay is 0.15% and the guard probability for the same relay is 0.20%. What does that mean? Thanks

2 1

Accounting limits seem to cause permanent hibernation
by Manuel Wiesinger 03 Dec '19

03 Dec '19

Hello everyone, I configured an accounting limit on my tor relay. 1-2 days after restarting the tor service the relay seems to go into permanent hibernation. Once I restart the service traffic is sent and received as expected, however after 1-2 days it seems to go into permanent hibernation again until I restart the service. The longest hibernation period was for about three month(!). My configuration: Tor 0.4.1.6, on FreeBSD 12.1. (nothing else running on the machine) My relevant settings: AccountingMax 128 GBytes AccountingStart day 00:00 RelayBandwidthRate 2560 KBytes RelayBandwidthBurst 5120 KBytes Logs since the last restart: https://pastebin.com/wk04zDC8 Metrics: https://metrics.torproject.org/rs.html#details/A3BB86337E003A2668E016466EA3… (The peeks in the graphs match the times when I manually restarted the service) Since I experience this 'permanent hibernation' since at least last August, I wonder if it's expected behavior, e.g., caused by the small limit of 128 GB per day, or if it's a bug (possibly related to this one: https://lists.torproject.org/pipermail/tor-relays/2019-October/017862.html ?). Best, Manuel

3 3

Version 0.3 of obfs4 bridge docker image released
by Philipp Winter 27 Nov '19

27 Nov '19

We recently released version 0.3 of our obfs4 bridge docker image. To upgrade to the new image or deploy a new container from scratch, please take a look at our instructions: <https://community.torproject.org/relay/setup/bridge/docker/> Here's what changed in our new version: * We added a new script, 'get-bridge-line', which prints your bridge line. Run it as follows: docker exec CONTAINER_ID get-bridge-line * We improved our setup instructions. As part of this, we added a Makefile that facilitates the process of deploying a container. Here are the new instructions: <https://community.torproject.org/relay/setup/bridge/docker/> * Our new Makefile uses docker volumes to persistently store tor's data directory. This means that you can now upgrade to future docker images (which involves deleting your existing container) while keeping your bridge's identity. * We made tor log to stdout in addition to its log file, so the following command now shows tor's entire log output, and not just the first few lines. docker logs $CONTAINER_ID * The bridge can now bind to obfs4 ports < 1024. * One can now run multiple bridge containers on a single machine. Thanks to thymbahutymba for providing a great template for our Makefile and for suggesting docker volumes. Cheers, Philipp

1 0

MyFamily line commented out but stays valid?
by [REDACTED] 26 Nov '19

26 Nov '19

Hi, when i comment out the MyFamily line with an # in the torrc on one relay it seems to be still handled like before. Hitting x in nyx or waiting a few days or rebooting does not make any change. Is this expected? I expected that relay to show as part of no family now and listed as "Alleged Family Member" on all other relays which still list that fingerprint in their torrc.

5 7

switching ISP and Fallback listing
by René Ladan 24 Nov '19

24 Nov '19

Hi, I might switch my ISP soon-ish from XS4ALL to Freedom Internet so my relay [1] will get a new AS number and IPv4/IPv6 address, how does this impact being listed as a fallback candidate? I'm currently not selected as a fallback. (And yes, I know about fallback needing to be long-term reliable, but this event was caused by the big corporate powers :( ) Thanks, René [1] https://metrics.torproject.org/rs.html#details/4E8CE6F5651E7342C1E7E5ED031E…

2 1

bridge relay search is "wrong"
by David Strappazon 24 Nov '19

24 Nov '19

Hi, My bridge appears down when checking "tor relay search" on smartphone and up when checking the site from a laptop. Is there a reason? does someone already had the same issue? Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 4

Newbie question about bridge
by David Strappazon 22 Nov '19

22 Nov '19

Hi, all I configure a bridge on October the 31th. On the first days I had to reboot it multiple times but few days later I had all the necessary flags, fast and stable include. Now I'm at 9+ days of uptime, I lost the fast and stable flags and the advertised bandwidth is at 792 KiB/s when my bandwidth is configured at 3 MB/s with burst at 6 MB. Of course I haven't seen a single client. My question is: is it normal and part of a relay/bridge lifecycle or is there something wrong? Ps: on metrics.torproject.org, everything is fine. Nothing wrong in my logs either and I can use it when configuring my it in a tor browser. Any opinions or advices would be welcome. David. Envoyé depuis ProtonMail mobile

1 0

New operator
by Mario Costa 21 Nov '19

21 Nov '19

Hello everyone, I have some newbie questions and I hope this is the right place to ask them. I started operating a relay on my VPS for a bit more than a month and everything seems to be going well. I constantly have about 200 outbound and 2000 inbound connections, but in nyx I almost never see any circuits. What does it mean? Do I see circuits only when someone is actually using my relay, i.e. in Tor Browser? To further support the project I decided to run a bridge at home using a Raspberry Pi. How do I know when it is being used? I rarely see any traffic. Sometimes I see one outbound connection in nyx and some circuits open, but I never see an inbound connection to port 80 (the obfs4 port I chose). Why does the bridge have open circuits more often than the relay? I couldn’t find any answers online, so I hope to clear things out here. Regards, m. _____________________________________________________________ GPG fingerprint: 6C3B 0069 30C4 0F16 E5F6 690E 7D2E 100E C3C4 7105 <https://keys.openpgp.org/vks/v1/by-fingerprint/6C3B006930C40F16E5F6690E7D2E…>

2 2