- tor-relays - lists.torproject.org

Re: [tor-relays] First (positive) experiences with a Tor Relay on Raspberry Pi3
by fr33d0m4all 11 Apr '16

11 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 > From: Yawning Angel <yawning(a)schwanenlied.me> To: > tor-relays(a)lists.torproject.org Subject: Re: [tor-relays] First > (positive) experiences with a Tor Relay on Raspberry Pi3 > Message-ID: <20160410182830.2be8c166(a)schwanenlied.me> Content-Type: > text/plain; charset="utf-8" > > On Sun, 10 Apr 2016 17:52:20 +0000 fr33d0m4all > <fr33d0m4all(a)riseup.net> wrote: >> I've just moved my Tor relay installation from my alix1.c >> embedded system (500Mhz CPU with 256Mb ram) which was able to >> offer only 4Mbps (100% CPU utilization) to a new Raspberry Pi3 >> (quad-core 1.2Ghz 64-bit cpu with 1 GB ram). Some days ago I've >> seen some messages on the ML about Pi2 performance (if I remember >> well) and I'd like to share my first experiences with Pi3. I have >> only 20Mbps connection in the uplink direction, so I'm offering >> about 15Mbps for Tor relay and I've just seen that it is able to >> offer 14Mbps with 40% of a single core utilization.. In >> conclusion, I think that a single relay on Pi3 can offer about >> 30-40 Mbps, and if you run 4 tor relays on the same Pi3 you can >> offer more than 100Mbps which is definitely not bad for such a >> small system. The only drawback is that you need to find a good >> way for keeping it cold, since after 1 hour of 1 core at 100% >> I've reached about 70?C with heatsinks on the CPU. > > If you build tor against OpenSSL 1.1 on that target you will get a > massive increase in performance due to support for the ARMv8 > hardware AES acceleration. > > This requires 0.2.8.x from the maint-028 branch (or master if > you're brave) since I recently fixed tor (again) to compile with > this version of the library, but the changes will be in the next > 0.2.8 release candidate. > > Regards, > Thank you very much Yawning for the news, I didn't know about that! I'm running stable 0.2.7.6 from the Jessie repo, I hope the new ARMv8-AES-enabled version will be out "soon" in the repo (but I don't think it will happen soon, at least for the stable branch, right?) BTW, I can't offer more than 14 Mbps, which are about 75% of my upload BW, so I can live for a while without AES acceleration :) You're work is really appreciated! Best regards, Fr33d0m4All _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________ -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXCsoWAAoJEBAfMWrzDuy05b8P/iHlAaKeVV4kOjujdENZs2Y1 xppzTRALgQcF+f2617j54zVO3gx9p/FkwEgt2ltqqJH8oSpaONBet6BBIrWL60/0 RUG0SYhtLJKAz722ou5XnP18a+ISt6Jq/peZuBxL5SBwjFg8SM1ibIpFpQlqrWNm 108KqF1TLEUEaRL99QO4lXNSDqTgdp0QzOZ3mkuXcorEgSDtcvtfMSwjUyVsGfVS t2JjYiZNGX36o1h0V3cFzN5pcELK/wkXVktxL0GRpJ3bTsoy5yfz+04QG9qFL6SL 4S/AAZ0GWObR+ZaRDY8Fo4X9PVTwN1qLhnXBhknUKeRl0K5u0ANOPvspxt5YpVaj K7Xb3tcVv958QyN6OIGNySUZh2TZ/7zzfgPj8rk4fWpwkZ2TxC0inLqUNTZrxY1W 9jbXTstp8HCWMYJ/aCO220+iyOFGXv0AeBsk5sr+onbkJxccIC4X8pYtm8DeocdZ +q+rIIJ+KcrJNtDLU/7LM4NhzEkTBfDQnFy3Vy5c68I0N39w3tjYyiNx/4JdoX+L vrLcTOZ09Mavfjbrcww27w1Aixlw0HU0aYlY8dHc5fJcHyc/en6Os9GDEGBpXCNh eptNWIlsNxuk9Pbeipb/1GxQt5X2GyAVoITqpBA7u0TO9vr0V+ZvlyY6Thx7qvpy jo2GqAnJQBfruuSD9ZTo =1lbW -----END PGP SIGNATURE-----

4 3

Re: [tor-relays] Tor Relays Support of tor-relays Digest, Vol 63, Issue 22
by Milica Đekić 11 Apr '16

11 Apr '16

Hi Tim! I've just started researching www.torproject.org website and doing some practical examination of Tor browser. The great feedback from you. Thanks a lot! Cheers. Milica On Mon, Apr 11, 2016 at 2:00 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Re: Tor Relays Support of tor-relays Digest, Vol 63, Issue 20 > (Tim Wilson-Brown - teor) > 2. Re: Tor Weather has been discontinued (Karsten Loesing) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 11 Apr 2016 16:26:46 +1000 > From: Tim Wilson-Brown - teor <teor2345(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Tor Relays Support of tor-relays Digest, Vol > 63, Issue 20 > Message-ID: <4B49C540-F484-476D-B397-13FA5048BA5F(a)gmail.com> > Content-Type: text/plain; charset="utf-8" > > > > On 11 Apr 2016, at 16:19, Milica ?eki? <milicadjekic82(a)gmail.com> wrote: > > > > Would Tor relays work in a dynamic manner switching from one to another > > from time to time? I am at the beginning of my research regarding a Tor > > network and I could use some support from you, guys. I would read a bit > > about entry, middle and exit relays as well as layers of encryption, but > I > > need more realistic explaination how all of these operate in a practice. > > Thank you! > > What have you read so far? > > Have you read: "Tor: The Second-Generation Onion Router"? > http://www.onion-router.net/Publications/tor-design.pdf > > Tim > > Tim Wilson-Brown (teor) > > teor2345 at gmail dot com > PGP 968F094B > ricochet:ekmygaiu4rzgsk6n > > > >

1 0

Re: [tor-relays] Tor Relays Support of tor-relays Digest, Vol 63, Issue 20
by Milica Đekić 11 Apr '16

11 Apr '16

Would Tor relays work in a dynamic manner switching from one to another from time to time? I am at the beginning of my research regarding a Tor network and I could use some support from you, guys. I would read a bit about entry, middle and exit relays as well as layers of encryption, but I need more realistic explaination how all of these operate in a practice. Thank you! On Sun, Apr 10, 2016 at 11:01 PM, <tor-relays-request(a)lists.torproject.org> wrote: > Send tor-relays mailing list submissions to > tor-relays(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > or, via email, send a message with subject or body 'help' to > tor-relays-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-relays-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-relays digest..." > > > Today's Topics: > > 1. Potwin, Kansas (Kenneth Freeman) > 2. First (positive) experiences with a Tor Relay on Raspberry > Pi3 (fr33d0m4all) > 3. Re: First (positive) experiences with a Tor Relay on > Raspberry Pi3 (Yawning Angel) > 4. First Relay (KAW) > 5. First Relay (KAW) > 6. Re: First Relay (pa011) > 7. Re: First (positive) experiences with a Tor Relay on > Raspberry Pi3 (Tom Jorquera) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 10 Apr 2016 10:56:52 -0600 > From: Kenneth Freeman <kencf0618(a)riseup.net> > To: tor-relays(a)lists.torproject.org > Subject: [tor-relays] Potwin, Kansas > Message-ID: <570A85D4.2060107(a)riseup.net> > Content-Type: text/plain; charset="utf-8" > > So this is why 114 Tor exit nodes are apparently operating from Potwin, > Kansas! Figured it was a digital artifact. The article doesn't mention > Tor itself, but the nominal fount really jumps out on TorFlow. > > http://fusion.net/story/287592/internet-mapping-glitch-kansas-farm/ > > https://torflow.uncharted.software/ >

2 1

important DNS tuning for high volume exit relays, fix for Unbound DNS DOS problem
by Dhalgren Tor 11 Apr '16

11 Apr '16

I believe I now understand the cause of exit relay failure when Unbound is the resolver and GoDaddy null-routes the exit. Both to prevent this DOS from taking out your relay if Unbound is running and to maximize DNS performance: with a local instance of Unbound running /etc/resolv.conf should look like options timeout:5 attempts:1 max-inflight:16384 max-timeouts:1000000 nameserver 127.0.0.1 with a local instance of 'named' running /etc/resolv.conf should look like options timeout:5 attempts:2 max-inflight:16384 max-timeouts:1000000 nameserver 127.0.0.1 background material for the above recommendations found at https://trac.torproject.org/projects/tor/ticket/18580#comment:11 https://unbound.net/pipermail/unbound-users/2016-April/004301.html

1 0

First (positive) experiences with a Tor Relay on Raspberry Pi3
by fr33d0m4all 10 Apr '16

10 Apr '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I've just moved my Tor relay installation from my alix1.c embedded system (500Mhz CPU with 256Mb ram) which was able to offer only 4Mbps (100% CPU utilization) to a new Raspberry Pi3 (quad-core 1.2Ghz 64-bit cpu with 1 GB ram). Some days ago I've seen some messages on the ML about Pi2 performance (if I remember well) and I'd like to share my first experiences with Pi3. I have only 20Mbps connection in the uplink direction, so I'm offering about 15Mbps for Tor relay and I've just seen that it is able to offer 14Mbps with 40% of a single core utilization.. In conclusion, I think that a single relay on Pi3 can offer about 30-40 Mbps, and if you run 4 tor relays on the same Pi3 you can offer more than 100Mbps which is definitely not bad for such a small system. The only drawback is that you need to find a good way for keeping it cold, since after 1 hour of 1 core at 100% I've reached about 70°C with heatsinks on the CPU. I just wanted to share my experience with you, hope you find it interesting :) Have a nice week Fr33d0m4All - -- _____________________________________________________________ PGP Key: 0DA8 7293 D561 3AEE A3C0 7F63 101F 316A F30E ECB4 IRC Nick: fr33d0m4all (OFTC & Freenode) _____________________________________________________________ -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXCpLUAAoJEBAfMWrzDuy0KpQQAKG1Su24A3O1keFdPGk2zdzw lwEk+pSvRzfoHfmocv5ia9PQ8ZtBws3QfaxfZOYIA0DxdKVK7Rcs+r0ekL6VtAdp y3HU3SlAoCxFDsHycsPhuXZPmQqU/+OAS0lrzo2KrKk/lN/K+b2YYzLfJ+9SWzE1 kg4dcCnWfQrMsLLK72R9qIjSmDsXDGzzNRq0qM3nDjDmE5GPmMJajSbWsHP12v/q BnA786RdB/CDiFVifGPYsKEuughpJ1ryVSRm3LdmTdIjZ+u/sxz0/TQrmj7idgdr TenFk4rf0NbiLU/7sruNJNYPFHvUMUOC8Xu7wBJU2LTF/8fcjYOaQp2UWch4aGQa nM4tMetvhEmoGxcEmJSsi2CHdLkMZ8G67gfufb7Gmsmd59q0KvRQktPxqnJ0GJIs 20x2PX2qzXX7P4mKL8nO0aX32OP+1xScuSH/85Lu6Nnh1jL+T81QPjk/CUHB86ho gbuGt154KEnMoKx+w3aXrzSKVH5kRMgWhIcbRt/xELWprx2zsxGM+gIOCdLQ/vXi PugDblYL8sa8Uds6cz0fjNsuCBI19X0NlnmGFAbU9qOHEhUzYpuF4VlH7sOkL0n2 HWkJTSIjizjZCS0PDPeaqj3lOtoFJiYcAxef+HnGEI/5dameIBB/MDJyOrf+oRfL 1kNo6Zd5KqJesnljCac5 =pk6h -----END PGP SIGNATURE-----

3 2

First Relay
by KAW 10 Apr '16

10 Apr '16

Got my first relay running for 4 days now :D -KAW

1 0

Re: [tor-relays] NPR story: When A Dark Web Volunteer Gets Raided By The Police
by Tristan 09 Apr '16

09 Apr '16

In this instance, it was local authorities, and the guy bought all-new hardware, so I'd say this specific problem is solved. For future reference, how would we even find these incidents? This time it was on the news, but if it wasn't, nobody would have known. On Apr 8, 2016 12:54 PM, "Green Dream" <greendream848(a)gmail.com> wrote: Who said Tor was against the police? The fact is, in the United States, the FBI and other law enforcement agencies have been known to plant malware, modify hardware, etc., in order to maintain persistent access to machines they wish to monitor. Whether or not you think this is valid in some cases or all cases is really beside the point. The question is whether exit node hardware can be trusted after a search warrant is served and the police are given full and unmonitored access to said hardware. As a matter of due diligence, I'd argue the hardware and OS can no longer be trusted in such cases. _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 2

Re: [tor-relays] Relays by AS Names
by Tor-Node.net 09 Apr '16

09 Apr '16

Hi! Here is a list from ExoticVPS that you can use to search for and contact various VPS hosters: http://www.filehosting.org/file/details/558944/ExoticVPS.ods http://www.filehosting.org/file/details/558945/ExoticVPS.xlsx http://www.filehosting.org/file/details/558946/ExoticVPS.txt (Tab separated txt file) Kind regards tor-node.net

7 9

Private Tor Research Network
by Nicholas R. Parker (RIT Student) 09 Apr '16

09 Apr '16

Hi all, I've got an issue that I'm seeking help with. I'm with a small group out of RIT that's trying to construct a private TOR network for research purposes, but we've hit a bit of a snag. I've worked with both liu fengyun's ( http://liufengyun.chaos-lab.com/prog/2015/01/09/private-tor-network.html) and Ritter's write up (https://ritter.vg/blog-run_your_own_tor_network.html) but when trying to set up authority directories the whole thing really falls apart. Trying to edit the torrc file gives errors where it doesn't attempt to bind to the correct ports and trying to set --dirserver or --datadirectory results in errors that there isn't permission to access /var/lib/tor regardless of the owner of the directory (we've tried leaving it as being owned by _tor, tried changing ownership to root, etc) so we can't get the authority directories off the ground. I'd really appreciate any thoughts Nicholas R. Parker Rochester Institute of Technology 5thYear, BS/MS Computing Security

2 1

NPR story: When A Dark Web Volunteer Gets Raided By The Police
by Greg 08 Apr '16

08 Apr '16

http://www.npr.org/sections/alltechconsidered/2016/04/04/472992023/when-a-d… A Seattle exit node operator is visited by local police over a child pornography warrant... Is this out of the ordinary or is this to be expected when running an exit from your home IP address?

9 17