- tor-relays - lists.torproject.org

Monitoring a Tor-Relay - Telegraf / InfluxDB / Grafana ?
by petrarca＠protonmail.ch 08 Dec '18

08 Dec '18

I was thinking about setting up a monitoring of a Tor-Relay using Telegraf, InfluxDB and Grafana. Although I did read quite some documenation about it already I thought it might be good to check for possible experiences made here before spending (wasting) too much time trying it out myself. Questions I could not answer yet myself include e.g. - What will be the performance impact of running Telegraf on a Tor-Realy (CPU, disk, I/O,...)? - What happens if the InfluxDB (running on another system) is not reachable (maintenance, outages) - is the data lost or buffered somehow? - I would like to also keep see old/historical data but not as granular as more recent data - is there any way to boild down old data, e.g. to only keep hourly data for data older that a month etc.? There are an overwhelmingly number of monitoring possibilities (munin, collecd, monit, nyx, RRDtool, Cacti, Monitorix, Nagios, Zabbix,...) out there and one could easily spend days if not weeks with reading and testing. So any kind of shared experiences, hints or tips are more than welcome. .

3 2

Re: [tor-relays] Monitoring a Tor-Relay - Telegraf / InfluxDB / Grafana ?
by Olaf Grimm 08 Dec '18

08 Dec '18

For a tor relay that is not neccessary. After I thought about this in the past I decided it so after local watching. Now I use "htop" and "bwm-ng", "nload" and "nyx" via SSH on the remote server. You can use the website "uptime monitor" if you want to get a mail after server crash or other network errors. My preference is the tor monitoring network https://metrics.torproject.org. Why you want to use a big monitoring solution? If your tor relay is a second paylod on the server this ist ok, but this is not the right discussion channel here. Olaf Am 08.12.18 um 10:01 schrieb petrarca(a)protonmail.ch: > I was thinking about setting up a monitoring of a Tor-Relay using Telegraf, InfluxDB and Grafana. Although I did read quite some documenation about it already I thought it might be good to check for possible experiences made here before spending (wasting) too much time trying it out myself. > > Questions I could not answer yet myself include e.g. > > - What will be the performance impact of running Telegraf on a Tor-Realy (CPU, disk, I/O,...)? > - What happens if the InfluxDB (running on another system) is not reachable (maintenance, outages) - is the data lost or buffered somehow? > - I would like to also keep see old/historical data but not as granular as more recent data - is there any way to boild down old data, e.g. to only keep hourly data for data older that a month etc.? > > There are an overwhelmingly number of monitoring possibilities (munin, collecd, monit, nyx, RRDtool, Cacti, Monitorix, Nagios, Zabbix,...) out there and one could easily spend days if not weeks with reading and testing. So any kind of shared experiences, hints or tips are more than welcome. > > . > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] Who is permanently checking my bridge relay?
by teor 05 Dec '18

05 Dec '18

Hi, > On 4 Dec 2018, at 21:27, tschador(a)posteo.de wrote: > > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. > The ip is 66.111.2.129 and the period of the connects are 21 min 21 sec, > e.g.: > > Dec 4 10:32:00 SRC=66.111.2.129 > Dec 4 10:53:21 SRC=66.111.2.129 > Dec 4 11:14:43 SRC=66.111.2.129 > Dec 4 11:36:04 SRC=66.111.2.129 > Dec 4 11:57:26 SRC=66.111.2.129 > Dec 4 12:18:52 SRC=66.111.2.129 > > https://metrics.torproject.org/rs.html#search/66.111.2.129 gives no match. > > Any more experiences with other bridges? A few years ago, I opened a ticket to randomise authority reachability testing: https://trac.torproject.org/projects/tor/ticket/13928 But we triaged it out with the comment: My rationale for redlining it during triage was that the best place to do unpredictable-order testing is probably in a successor to torflow. (sbws is a successor to torflow, and it does randomise the testing order.) Are there any good reasons to randomise the order of authority tests? One good reason is that it breaks patterns in the authority checks, so relays really do need to be up all the time to be listed as reachable. T

1 0

IP addresses on the list
by Charly Ghislain 05 Dec '18

05 Dec '18

We have seen ip addresses posted on this list recently. They were coming from the logs. I think it would be nice if the software powering this list could scramble all ips in message bodies. At least having to reformat them in order to avoid that filter would give the poster some time to realize if it is a good idea to post it in the first place. I am also questioning myself whether addresses should be printed in log files altogether. Maybe even with the unsafe flag on - at least for released versions. If one wants to know which ip is connecting to her bridge, she can use whatever network capture software already existing. Any opinion? Thanks, Charly

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Charly Ghislain 04 Dec '18

04 Dec '18

If it wasn't, would posting the ip address of a client connecting to a bridge in here compromise her anonymity and/or allow one to firewall/blacklist her traffic? Im assuming one could guess the ip address of the running bridge based on the poster email address. On Tue, Dec 4, 2018 at 2:57 PM <tschador(a)posteo.de> wrote: > On 2018-12-04 13:15, George wrote: > > > tschador(a)posteo.de: > > >> I wonder who is permanently connecting/checking(?) my Tor bridge relay. > > > > > > That's the bridge directory authority. > > Ok, thank you. > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >

4 5

Fwd: Throughput of each circuit
by marziyeh latifi 04 Dec '18

04 Dec '18

Hello,I have two questions about tor's relay: 1-How can I calculate the throughput of each circuit in a relay?I mean that how can I calculate the number of cells that are sent from circuit queue to the output buffer per second in each relay? 2-What is the difference between circuit and channel in relays? I'm looking forward to hearing from you! thanks! Marziyeh

3 2

Re: [tor-relays] Who is permanently checking my bridge relay?
by Logforme 04 Dec '18

04 Dec '18

On 2018-12-04 16:33:33, tschador(a)posteo.de wrote: >Furthermore it was clear for me that fix periods of 21 min 21 sec >couldn't be a normal client. Missing more information about bridge >directory authority … >From https://blog.torproject.org/new-bridge-authority: "The Bridge Authority is a simple but essential piece of the Tor Network. Unlike the other directory authorities, the Bridge Authority does not get a vote in Tor's consensus protocol. Instead, it serves to aggregate relay descriptors which Tor Bridges send to it, checking their cryptographic validity and testing that the Bridges' ORPorts within these descriptors are reachable" The last part is what causes the connections you see

1 0

Re: [tor-relays] Who is permanently checking my bridge relay?
by George 04 Dec '18

04 Dec '18

tschador(a)posteo.de: > Hi all! > > I wonder who is permanently connecting/checking(?) my Tor bridge relay. That's the bridge directory authority. g -- 34A6 0A1F F8EF B465 866F F0C5 5D92 1FD1 ECF6 1682

1 0

UbuntuCore relays
by nusenu 02 Dec '18

02 Dec '18

Roger Dingledine wrote: > Btw, all of these UbuntuCore relays are from snap packages run by Tor > enthusiasts Do you indeed mean "all"? Since there have also been other hypothesis about at least some of these "UbuntuCore" relays in the past (see bad-relays ML archive from 2017-11-13), it would be great if you could elaborate on how you came to that conclusion. thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

tor irc
by deadcow＠tuta.io 01 Dec '18

01 Dec '18

i needed som fast help i tried IRC .... started well and when iv got help a= nd pasted the whole torrc file ... bot kicked me out i cant log in ive got = this answer deadcow sets mode +i on deadcow -NickServ- This nickname is registered and protected.=C2=A0 If it is your n= ickname, you may -NickServ- authenticate yourself to services with the IDENTIFY command.=C2= =A0 You are -NickServ- getting this message because you are not on the access list for = the -NickServ- deadcow nickname. * #tor-relays :Cannot join channel (Need to be identified and verified to j= oin this channel, '/msg NickServ help' to learn how to register and verify.= ) how do i get back to the chat ? ive never used irc :( anyway tha question was about bridge. i've started but i have no logs and dont know what is wrong. VPN is off. end of torrc #Bridge config RunAsDaemon 1 ORPort 9001 BridgeRelay 1 ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy # For a fixed obfs4 port (i.e. 9002), uncomment the following line. #ServerTransportListenAddr obfs4 0.0.0.0:9002 # Local communication port between Tor and obfs4. Always set this to "auto"= . "Ext" means # "extended", not "external". Don't try to set a specific port number, nor = listen on 0.0.0.0. ExtORPort auto #Set your bridge nickname and contact info ContactInfo deadcow(a)tuta.io <mailto:deadcow@tuta.io> <mailto:deadcow@tuta.io <mailto:deadcow@tuta.io>> Nickname deadcow something is wrong but what :) thx for help --- Google, Facebook, The government and others are spying on your emails! DO YOU LIKE IT? If not, CHANGE! Securely sent with Tutanota. Claim your encrypted mailbox today! https://tutanota.com

2 1