- tor-relays - lists.torproject.org

300mbps FreeBSD Tor relay on HPE MicroServer Gen10 (AMD X3421)
by Neel Chauhan 02 Jan '19

02 Jan '19

Hi tor-relays@, I have a Tor middle relay NeelTorRelay2 hosted on a 50 megabit symmetrical Verizon FiOS (FTTH/GPON) connection. The server used is a HPE MicroServer Gen10 (AMD X3421 quad-core version, 8GB DDR4 RAM). This relay can be seen here: https://metrics.torproject.org/rs.html#details/D5B8C38539C509380767D4DE20DE… My relay runs FreeBSD 11.2 and Tor runs in a "jail". I am using AESNI and Tor is configured to use OpenSSL cryptodev. Here's the situation: I will be moving apartments in a few days, and Verizon is upgrading my broadband speed to 300 megabits symmetrical. I plan to use this extra bandwidth for Tor. Right now, I set my RelayBandwidthRate to my line speed (yes really!), and plan to increase this setting according to my new speed. I know that Tor is not optimized for multicore CPUs, and that's the reason why I am posting here. My question is that can Tor work on the HPE MicroServer Gen10 with the AMD X3421 (or one with a similar computer of any brand with a similar performance CPU, whether desktop or server, Intel or AMD) with all 300 megabits to a single instance or would I need two instances (each at 150 megabits each)? Looking at my top usage, I average at about 20-30% CPU usage on my 50 megabit relay. Also keep in mind that: * I am using my own router instead of Verizon's and I plan to keep doing so * I want to keep using FreeBSD on my server and do not want to run Linux * I would prefer to have a single instance, but can use multiple if I have to * When I move, I will upgrade my server to FreeBSD 12.0 * My server supports hardware accelerated AES and SHA. I am using this on FreeBSD with the aesni kernel module and Tor with "HardwareAccel 1" and "AccelName cryptodev" Thank You, Neel Chauhan === https://www.neelc.org/

7 9

Re: [tor-relays] 35C3 Tor Relay Operators Meetup
by 35C3 35C3 01 Jan '19

01 Jan '19

> Hi, I have only my smartphone at the moment. It would be great if you swap the rooms. Thank you added a second slot on the first day/night: 2018-12-28 00:30 Room M3 I did NOT replace the first slot in the smaller room (2018-12-28 16:30) because the second slot is a bit late to avoid collisions with ie "It Always Feels Like the Five Eyes Are Watching You" - Kurt Opsahl https://fahrplan.events.ccc.de/congress/2018/Fahrplan/events/9951.html https://events.ccc.de/congress/2018/wiki/index.php/Session:Tor_relay_operat…

3 3

Security issue
by dns1983＠riseup.net 29 Dec '18

29 Dec '18

Hello, Do I have to worry about those many warns on my log file? [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending) I found some old posts on this warn, but I don't understand if it is a security issue and what I have to do to fix this. Someone could tell me if there is something that I can do to fix this and improve security of my Debian -derived machine? Thanks Gigi

2 2

New exit relay help
by dns1983＠riseup.net 28 Dec '18

28 Dec '18

Hi, I need to install some additional software, to make the "DirFrontPage" work? I loaded an html file on my tor directory, uncommented the diretive "DirFrontPage /path/html-file", but It doesn't works and I don't see anything related to it in the log notice file. What I am doin wrong? I don't know how to solve the problem, can you help me please? best regards Gigi

5 6

Dec 2018: 24 new relays with fishy fingerprint patterns in Aruba and "INTERNET CZ" ASN
by nusenu 26 Dec '18

26 Dec '18

these 24 relays have a rather distinct signup and fingerprint pattern usually seen for onion attacks: +------------------------------------------+---------------------+--------------+--------------------+-------+------+----------------+---------+-------------+---------------------------------+ | fingerprint | first_seen | nickname | as_name | hsdir | exit | IP | or_port | tor_version | contact | +------------------------------------------+---------------------+--------------+--------------------+-------+------+----------------+---------+-------------+---------------------------------+ | 38D26817234F6B271E6A6DED306188BC09D1AA41 | 2018-12-19 13:00:00 | Escalibur | Aruba SAS | 1 | 0 | 185.8.50.23 | 9001 | 0.3.4.9 | NULL | | 38D2A1B04D004A61D2A9599EB5EC06FE42C463F7 | 2018-12-20 10:00:00 | delecat3d | Aruba S.p.A. | 0 | 0 | 195.231.66.172 | 9001 | 0.3.4.9 | NULL | | 38D2B873966A1C392E427CD1417BC7BB0E84B058 | 2018-12-17 08:00:00 | HGSTdisks | Aruba SAS | 1 | 0 | 94.177.226.229 | 9001 | 0.3.4.9 | coreproccores(a)gmail.com | | 510FEC23762319FEEAB3B65AF4592BE21515A7C4 | 2018-12-17 10:00:00 | tM666 | ArubaCloud Limited | 1 | 0 | 185.43.209.232 | 9001 | 0.3.4.9 | NULL | | 510FEC475B2B286A1886A22B333A1CCDEE8F0117 | 2018-12-16 15:00:00 | yeeboyd | INTERNET CZ, a.s. | 1 | 0 | 185.33.144.210 | 9001 | 0.3.4.9 | NULL | | 510FED6000FFEE2B451782DB0E82C2CCA8DF2332 | 2018-12-18 11:00:00 | takeAsit | Aruba SAS | 1 | 0 | 94.177.226.7 | 9001 | 0.3.4.9 | NULL | | 6688CD00E32D45DDC25FE0F4AE31EEB460DC02EF | 2018-12-20 12:00:00 | DoeRelay | Aruba SAS | 1 | 0 | 185.8.50.62 | 9001 | 0.3.4.9 | mrmrsdoehere gmaiil _ dot COM | | 6688E3150DC2898DDBD98D8AB70C078ECA468945 | 2018-12-19 10:00:00 | reltor | Aruba S.p.A. | 1 | 0 | 195.231.66.103 | 9001 | 0.3.4.9 | tripinonuyou gmail com | | 6688F26C215F92A0EF8B0C94B03FA160E22C4E75 | 2018-12-21 11:00:00 | Unnamed | Aruba S.p.A. | 0 | 0 | 80.211.253.155 | 9001 | 0.3.4.9 | NULL | | 8F29FDC9C2F85E5E9CC3F56E81B2A3D9CCB031FB | 2018-12-16 15:00:00 | SedS0K | Aruba S.p.A. | 1 | 0 | 195.231.66.240 | 9001 | 0.3.4.9 | seds0kkkk(at)gmail(dot)com | | 8F2A173B990CAE8CB61BEFDC61F9B8C047977667 | 2018-12-18 16:00:00 | FreeW | Aruba SAS | 1 | 0 | 185.8.50.73 | 9001 | 0.3.4.9 | NULL | | 8F2AE6EBB163B9B0BC64C0EE689946CE7A36B3F1 | 2018-12-17 18:00:00 | nobobyno | Aruba S.p.A. | 1 | 0 | 80.211.253.176 | 9001 | 0.3.4.9 | smpuffy_AT_mail.pl | | 9E9DA7C5060BEAB9860F120CCA5646ECBC92382B | 2018-12-19 09:00:00 | NextDoorBar | Aruba SAS | 1 | 0 | 94.177.226.250 | 9001 | 0.3.4.9 | NULL | | 9E9DAED63FE72C571753C03B2DF7C956AF02897A | 2018-12-18 12:00:00 | Unnamed | INTERNET CZ, a.s. | 1 | 0 | 185.33.144.110 | 9001 | 0.3.4.9 | NULL | | 9E9DE2E42485FBE95DAC35138EFE372A24D64D21 | 2018-12-17 22:00:00 | LiteMoka | Aruba S.p.A. | 1 | 0 | 195.231.66.108 | 9001 | 0.3.4.9 | juseppo2199()at()gmail_com | | A380D254B25878C74087C5D74C692D0241CBD6F0 | 2018-12-20 22:00:00 | AnonHappyBox | Aruba SAS | 1 | 0 | 94.177.226.230 | 9001 | 0.3.4.9 | anonanon55a_@_secmail_dot_net | | A380D347759DA5CBDC5BCBC4B51318A0C8567B53 | 2018-12-21 15:00:00 | Pendium | ArubaCloud Limited | 0 | 0 | 185.43.209.100 | 9001 | 0.3.4.9 | strangzapsl AT gmail DOT com | | A380E80F9C6405332C8113C02B566120B8099B06 | 2018-12-19 18:00:00 | volt220 | INTERNET CZ, a.s. | 1 | 0 | 185.33.144.204 | 9001 | 0.3.4.9 | spensr555oh _AT_ gmail _ dot_cm | | BE27A8DA5463AE0B32A4BAEC4214C0CD00F70DC3 | 2018-12-18 14:00:00 | Minicana | Aruba S.p.A. | 1 | 0 | 80.211.253.249 | 9001 | 0.3.4.9 | __Valentino404()gmail_com | | BE27E56E8D6B9D3B84120804CA1C3564DA70827D | 2018-12-19 22:00:00 | Bestrddd | ArubaCloud Limited | 1 | 0 | 185.43.209.236 | 9001 | 0.3.4.9 | no please | | BE27F22046D89A1EAD690C9C291F7AE85B9025DA | 2018-12-20 15:00:00 | Unnamed | INTERNET CZ, a.s. | 1 | 0 | 185.33.144.196 | 9001 | 0.3.4.9 | NULL | | E7D8A8B5FA3CA3B668F12B5D46AB0DE94B9A9C1D | 2018-12-16 22:00:00 | Unnamed | Aruba SAS | 1 | 0 | 185.8.50.188 | 9001 | 0.3.4.9 | NULL | | E7D8B9141E5EF11526D34DC231DD32297BC3F904 | 2018-12-19 16:00:00 | FlashGordon | Aruba S.p.A. | 1 | 0 | 80.211.253.88 | 9001 | 0.3.4.9 | sinsincytyATprotrityDOTnet | | E7D8F1E61D068E7681EE81D6AFC7862FEB29D261 | 2018-12-18 20:00:00 | Andersen | ArubaCloud Limited | 1 | 0 | 185.43.209.114 | 9001 | 0.3.4.9 | NULL | +------------------------------------------+---------------------+--------------+--------------------+-------+------+----------------+---------+-------------+---------------------------------+ If you are an .onion operator I'd like to encourage you to switch to onion services version 3 so we can start dropping onion version 2 services eventually. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

Metrics show Relay down
by Darek Kramin 25 Dec '18

25 Dec '18

hi, I did started 2 days ago tor relay. when I set daily accounting was ok and now with weekly set of GB relay is listed down. It is a glitch or my misconfiguration. Relay is named dasBoot at IP 46.175.238.8 brgds darek -- Cpt D.Kramin +48 505 135145

1 0

35C3 Tor Relay Operators Meetup
by 35C3 35C3 23 Dec '18

23 Dec '18

Hi nicoo, since you organized the tor relay operators meetups during the last few years at the CCC I was wondering if you will continue with that this year as well? If so, it would be great if we could get - a slightly bigger room than we had last year - a room with a beamer (Roger will not be there this year as he previously mentioned) The 35C3 wiki is not available yet. thank you!

2 2

Extreme Exit Policy
by John Ricketts 21 Dec '18

21 Dec '18

All, I am considering only allowing ports 53, 80, and 443 only. Discussion? John Ricketts Quintex Alliance Consulting

8 13

Re: [tor-relays] consensus-health.html and fallback dirs
by starlight.2018q2＠binnacle.cx 21 Dec '18

21 Dec '18

Ran the script: output is attached to this message for anyone interested. Live-network test results will vary by time and by the location of tester. Attached run was made over Tor itself using 'torsocks'. I was bit by having disabled the unencrypted DIR port for one day recently as an experiment. >Felix zwiebel at quantentunnel.de >Sun Dec 16 10:03:33 UTC 2018 > >>> I wonder how we can come from 116 running fallbacks to 155 within >>> one week (without a new release) > >Am 16.12.2018 um 08:01 schrieb starlight.2018q2 at binnacle.cx: >> The cause is >> >> https://gitweb.torproject.org/tor.git/commit/?id=78e177d622f5f3b24023d04458… > >Ah, great! This makes sense. It's a transient to the list update. > > > >> https://trac.torproject.org/projects/tor/ticket/24803 > >The upcoming one seems to be: >https://trac.torproject.org/projects/tor/ticket/28795 > >-- >Cheers, Felix >

2 1

Advice for new exit relay
by dns1983＠riseup.net 20 Dec '18

20 Dec '18

Hi, excuse my bad english. I would run an exit relay on a virtual server. For now i run just a non exit relay on my own mini server. I don't like too much do not have full control on the server, but, for me, it is the only way to run an exit relay. How do I know which service allow me to customize WHOIS records, so I can put my email address on report abuse section? Could you suggest me some providers that offer unlimited monthly data too? Regards Gigi

2 4