- tor-relays - lists.torproject.org

Re: [tor-relays] tor-relays Digest, Vol 61, Issue 41
by stealth＠nym.mixmin.net 28 Feb '16

28 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 28 Feb 2016 13:49:20 +0000, you wrote: > > > Message: 2 > Date: Sun, 28 Feb 2016 12:02:13 +0100 > From: Tim Wilson-Brown - teor <teor2345(a)gmail.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Network Bandwidth Fine Tuning > Message-ID: <A09CFFB4-5ACA-44B4-B813-7DC0B30A4C06(a)gmail.com> > Content-Type: text/plain; charset="us-ascii" > > > > On 28 Feb 2016, at 02:14, stealth(a)nym.mixmin.net wrote: > > > > What processor is on your VPS? Here is my lscpu output: root$ lscpu Architecture: i686 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 8 Vendor ID: GenuineIntel CPU family: 6 Model: 58 Stepping: 9 CPU MHz: 3300.152 BogoMIPS: 6600.30 Virtualization: VT-x > How fast is it? See above > Does it have AES-NI? I believe so. Here's the output from: grep -o aes /proc/cpuinfo aes aes and here's the output from: grep -ml -o aes /proc/cpuinfo aes > Is your OpenSSL compiled optimised for your processor and for the encryption that Tor uses? > I am using the OpenSSL that was compiled for my version of Mixmaster as I am running a middle remailer on the same VPS. It is OpenSSL: 1.0.1e > How much RAM does your VPS have? 512KB > > Have you read the torservers.net Tor tuning advice? Yes I have made several modifications to my RelayBandwidthRate and RelayBandwidthBurst. I have also modified my AccountingMax number. Here's the pertinent information from my torrc file: RelayBandwidthRate 50 MB # Throttle traffic to 100KB/s (800Kbps) RelayBandwidthBurst 80 MB # But allow bursts up to 200KB/s (1600Kbps) AccountingMax 100 GB > (And similar articles?) Any additional links would be welcomed. > > Tim > > Tim Wilson-Brown (teor) > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJW00AMAAoJEH1gNwhiMDZu2wYQAImPETHwRvlxrlAclulMlB+n WwPB/fMSjiVwA9Rllb7w8NvSbf2Tu9FmeGoYOUDYTWuq93RsUuQFtVvcw3MXkzBR X/TXAdP9WSDlNiOZajaRNR1hcYQJ0gJqJ9/6oyC1XoDNTK7bcE3FOY5ui10M+fFL rXgM/qBmu+toaqA2vL4DKp3eFYMYDgVmesQLEI6edUvHjK4+itdV9pRwXAvQaFjJ M7We374Siw6izM6cJqXtW3XytUCfIbVyzL+Al93fEJnJDaO5V3kIlHDkjcWJn9ev Ogvg1/zZouwfFFJfC1p29NTsEzy8aF+w3obtq6NWQ0/pzTXJ/sPYIE21EHRIuMJo J2Rk9YPVwp5ckIKH48Eg6jdGjNCI6rs59hhNJfvismvJES+NjgLoqJ+Y59ZnhMjr q4rUssRxyzDFqDdBM60llXfTOh0qEFeHDkeBMfR+F4TJH8SZeEBXW3kyFnG6TH6R D/BoV9ItHi7qXiP9zDIMHTSCz7NNJ210uVdHbMUkMH1He+5bB/auCNRcjXmPwbYg kwbzJlgumSSd4kKufEnvC9KQComniYph90yDr8pOBnCE5E/o8+yVfB7XmTLidNEG Ii/xhSKpdt+E7wQX3ISR2pbJ73tk+FaSd2iPVK0jPWab/zoGqVzZr41VFAWi8n6S tuuLxJ5Lum3gu7EH6M0X =h78g -----END PGP SIGNATURE-----

2 1

Hidden Service on several relays + same .onion
by Pierre L. 27 Feb '16

27 Feb '16

Hey all, Thinking about having fun with hidden-service webhosting on few relays. If I'm not wrong : Host DNS name .onion of a server is stored in the file /var/lib/tor/hidden_service/hostname, there's another file private_key... So my idea is to host the same website on 2 relays with different WAN IP, fingerprint, etc....... But if I copy those 2 files "hostname" + "private_key" on 2 or 3....... relays, will it be ok ? With this set up, if 1 relay is down, the 2nd can be reachable with the same .onion DNS name ? Will this failover method work, or will be it a mess with 2-3 relays with the same .onion name ? Do someone have tried this ? Thx all!

2 2

Notices.Log Message
by stealth＠nym.mixmin.net 27 Feb '16

27 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Can someone explain the message below regarding bw_accounting and the lack of a master identity key in my notices.log file? [warn] Failed to unlink /var/lib/tor/bw_accounting: No such file or directory Feb 26 10:04:02.000 [notice] It looks like I need to generate and sign a new medium-term signing key, because I don't have one. To do that, I need to load (or create) the permanent master identity key. Feb 26 10:04:02.000 [notice] Your Tor server's identity key fingerprint is 'stealth A290A9E71ADFC2FB1C80E64EF851A4B905450105' Tor Version 0.2.7.6 (Installed today) Debian 7.0 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJW0N8pAAoJEH1gNwhiMDZuSl0QAKeE6APr57XI44RJxKEV/zLC 75DQRZCqdsQh5ReQ+qODFvZ/t+on+/XTFBm7gX0Lit2ylEQEyvmUQpXRWwl4pEH0 ZZh2EGND1phHqn7v2wmlWruEWor+ittYyYp4o2a8RIj4Ed07XEnIcTfTX0WzXXBE khj/FPDnzG60CceYld1ZLFhBuYLCl3gjG0RY9HJFh+rXfsrlrvSSuEYOzOgWdlCW +Ethj62CKEXAkaJDMziR0pLXHbkH5rUqIaI0v8F0C6BrrNzwvydWgnaQjZ0z2OpW CW2O6BCgLsLqmHZThl9QAuqGSPN9v4hTez8fR0S58lvf2865jwrsaK3lWm2JSuOU rUxeS46z9qdJdKu/EuB0TbtNU5A+eYIzUuI9Rn6KkslndxywvnVVLLa0yilM8VOR aHIDSa7UzVDFmqqs1um+xeCWZU1y/f2z2WHyBcNO8/TYZ46z6R5pQ/egpPkiROhc ZvduYSeXaWjhUW1xWHZS8At7/P5+MGkfMXj10RWY4Qj2KvQprxgDqj2ar8n4/XCm 61l74W4ybDdyntm+8uNcXFufiRVmHJYf0YtJnXR/a44LR/XyiCh/DWBOlp3dqH8/ arVvpmKae6CDnG+Rk1giu48Uj8CaP60vq6pzO8wbpezB/P3r/KN15g4P3u+5XmfV ye92npDkwAyshyjAJJue =ngF/ -----END PGP SIGNATURE-----

2 1

Nyx Project Ideas
by Damian Johnson 27 Feb '16

27 Feb '16

Hi wonderful relay operators. It's GSoC season again, where students can be funded to make open source projects like Tor even better! Nyx (previously known as arm [1]) has been my main focus this last year and is inching ever closer to release. For those unfamiliar with it, Nyx is an ncurses monitor for Tor relays providing a bandwidth graph, event log, connections, config editor, and more. Rather than add new features my work has focused on making Nyx simpler and faster, but GSoC provides us an opportunity to do even more. So I'm curious - what do you want from an ncurses monitor? The answer may be 'keep it simple'. Feature creep does us no favors. But if there's a good fit I'd love to mentor a project that makes your lives even better! I'm not overly fond of the ideas I've had so far... * Windows support. This poses a few challenges. [2] * When running multiple tor instances on a single system connect to them all, aggregating the information. So anything come to mind? Cheers! -Damian [1] https://www.atagar.com/arm/ [2] https://trac.torproject.org/projects/tor/wiki/doc/arm#Windows

3 3

Re: [tor-relays] tor-relays Digest, Vol 61, Issue 30
by stealth＠nym.mixmin.net 26 Feb '16

26 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sat, 27 Feb 2016 00:20:38 +0500, you wrote: > > --Sig_/PllBt_/1sHfmWgs/aS1Ks.r > Content-Type: text/plain; charset=US-ASCII > Content-Transfer-Encoding: quoted-printable > > On Fri, 26 Feb 2016 18:24:57 +0000 (GMT) > stealth(a)nym.mixmin.net wrote: > > > > [1] https://packages.debian.org/wheezy/tor > > > [2] https://www.torproject.org/docs/debian.html.en > > > > > Thanks for the links above. I have updated to 0.2.7.6. I had a > > hickup initially trying to launch arm as user debian-t. I had to > > kickstart it with just arm and then I killed the program and > > launched it again as user debian-t and it launched. > > The username is debian-tor. Not sure where you're getting "debian-t" from, = > if > from "top", then it might be simply cut off there. > > --=20 > With respect, > Roman > Yes you're right about the debian-tor user name. I was in a hurry when I typed the last post. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJW0L/sAAoJEH1gNwhiMDZue1cP/R0Z8Cyn2nERoYWB6qngccoq 6cpAIgdunSLJeT8VvvL6iTwXiIPpy9GqrrloGegHuRrWgPkiood1EmhvNi9cajWQ RRitQVmhCZ9MV7qzMOyGXFZ+J97TgviKeWG+jVJbRSOvqiY88im5InlJhR7smc2f OUaYpwMpm7l6+chSewmy7hRVHLb7jfvWgej8eJc8EJsDAmwnozNrjStqpndRinCn 9gkqzkZEiug1uXJXRS4ZQa3rk087Q9SQkjdYvlI4XfjiQKDKWVMkddDMRpYbo8iR RrKTd01m2i8M2xiG4vDPI+U4T3oOr/6F8XTyvyaz2oziXZDVuRTg9JbDS0a0/wQ8 duiKUpDSNwwrW7+ruS0oJcFD45s5P1GVed9rhDpkDq1KKMF+oNmy/K/vo3uPOLtI lRtVXFq0gsBviZQ3ad+C6epTgMPpF3Yf3Lkpf8vW2jHdypzv3zNZGXfnzzvMVq6d CEGf+/+5C/3N3ZPw4f03tEU2uUzIOCc0E5xYrPktUwRYxn8QNTd39Oc92/deErzH 3kMxY9n42/YEeI0NG/0W8MO1hOQAk1OffbsGfvuZLItPi7LXZY68wEhm6oGDdzI8 alHqXoFHOIMDlnMFNEEpsPg3f5VhE2UtsYUu6JOBHUEQAVHPHavKIPa6UqdCvy8n ER8eCLuvRGpfpe8Hbudt =eEZc -----END PGP SIGNATURE-----

1 0

Light Bandwidth Monitor (like Munin)
by Pierre L. 26 Feb '16

26 Feb '16

Hey all, May be RPi users... and others linux users! I'm looking for a light bandwidth graph software producing html files, to monitor and graph up/down eth0 bandwidth used on my RPi Tor relay. Something like "munin" or "cacti", but I remember this one was very heavy on a RPi v1... It was taking tooo much time to collect/treat/graph :s Which one are you using on your RPi's ? Thx all for your answers !

5 5

Re: [tor-relays] tor-relays Digest, Vol 61, Issue 30
by stealth＠nym.mixmin.net 26 Feb '16

26 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 26 Feb 2016 04:39:26 +0000, you wrote: <snip> > > Message: 3 > Date: Thu, 25 Feb 2016 22:27:36 +0100 > From: Tomasz Nitecki <tnnn(a)tnnn.pl> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] Stable Flag Question > Message-ID: <56CF71C8.6000007(a)tnnn.pl> > Content-Type: text/plain; charset="utf-8" > > Hey, > > On 25/02/16 20:41, stealth(a)nym.mixmin.net wrote: > > I'll monitor things and see if anything changes, but I'm more > > concerned that my cronjob is not working. I also did a "service tor > > reload" to see, if anything changed and I still show 0.2.4.27 as my > > Tor version via the arm program. > > Aren't you running an older release of Debian (wheezy)? You can check it > by running 'cat /etc/os-release'. Your tor version seems to be equal to > the one available in wheezy repository [1]. > > In order to get a more recent version of tor, you should add torproject > repositories (wheezy version) to your apt sources. Comprehensive > tutorial, on how to do that, can be found at [2]. > > Anyway, you might also consider upgrading to the latest Debian release > (jessie). > > > Regards, > T. > > [1] https://packages.debian.org/wheezy/tor > [2] https://www.torproject.org/docs/debian.html.en > Thanks for the links above. I have updated to 0.2.7.6. I had a hickup initially trying to launch arm as user debian-t. I had to kickstart it with just arm and then I killed the program and launched it again as user debian-t and it launched. Not sure what the issue was there. Now I hope my cronjob works at the next update. Time will tell. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJW0JWxAAoJEH1gNwhiMDZuiRIP/13REHWzwvvtfqOa/8czNQSz FP6aPCrCQaAraGp3dYEWIdKgdHMC6k4icdDWR8zKCdAkVMpfSTWnivLF/ZuY9l4u qQplHRONI+r7s6nng2iYcFGCTl/+tCBZxHbjCrv6GPRQLcVCyWOg5/PhUqZOTEaq cfI9hHjscArnwbVRE9DWfZbj+zTlDENM6pvngtqHPTl5V84gcxcZysddOXyqz6Q6 UKRX6tAUvj7/vdLDyEinBLb9o4SLgsEfkANm/OTsOD6+33Zv7iWdxf5k1sMDuYcv FtKSoL2ZbN2VMmDGdKA895uN4gkiUhWJ5fCktBDnAbeJUN+DOHUU8muuN4DgxjH0 YhTHy/+44l1aMQU9oWBdoJrhIvnAz0aYni0iy9URGPDoTZb92zOVlIJyKayGKLwy TOAZyKB3fI6tcRn1+H5QljitX2kxMCwEO7PU9WaWadPcMnqmhNB+9dFBLyxPSM0S BhgfPHVT/HNDBDdLc9xrvJr9XvNJ/Q5D1O9NLnKKpF5iEHyFq9pGsvan3TRYcnA1 tsmJkLSCSOeV/t9xUaSg/Unhp34TqoTO2e0lKl3D4Fa8toBSS2h7MXM/Rv74hdK9 9po7Ez8YcirfWv34voKofZkN503lrxt2lz+bxzFiCDcofWIVOEMWf3AG0O8mCVi8 pqvMbCIOfOkk2htEVLZz =XzOu -----END PGP SIGNATURE-----

2 1

Feedback
by torserver＠datakanja.de 26 Feb '16

26 Feb '16

Hello, i have been running a new relay for a short time period now and would like to bring to your attention the issues faced, that finally led me to refrain from keeping this up any longer: * Documentation was ok (on torproject.org) and the installation (using deb on ubuntu) was easy. * It took quite some time to understand the implications (opening ports in the router, hazarding security to my computers, as i was - to this date - relying on the routers firewall working) - This job of mine basically got delayed until later, when i would have learned, what is needed in that respect. * Next, i noticed a frequent (daily) behavior of the Tor server dropping traffic to around zero. Inspecting this, let me to understand, my provider was disconnecting me and reassigning a new IP on a daily basis, which took some time to propagate. Even worse: It did not propagate on its own, i needed to restart the tor service to reinitialise... * Asking in the online channel, i was guided to change my "Nickname" torrc config to match the dyndns entry corresponding to my server. * But this never made it to the directories, thus forcing me to manually restart Tor on a daily basis in order to force the changing IP address into them. * Finally, i was told, this behavior would be disruptive to the network, i therefore brought the service down for good, wasting the bandwith, i was willing to spend, for the near future. :-) * Ok, otherwise, i would have to pay additional fees to rent a server off-site with a permanent IP, but that would be giving more, than what was easily affordable, as my machine is running 24/7 and the connections open anyway. Thus Tor doesnt seem to be able to absorb the kind of bandwith, i was willing to share long time. This is leaving a sad taste on me, who is pretty much interested in privacy, anonymosity, which led me to avoid the mailing lists with a durable email-address. But just using a read-only one wouldnt allow me to post to the list. That is why i created this one temporarily, just to let you know about my experiences... NewTorKidOnTheBlock (this was the name of my Tor relay)

8 10

Re: [tor-relays] Stable Flag Question
by stealth＠nym.mixmin.net 25 Feb '16

25 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 25 Feb 2016 18:41:28 +0100, you wrote: > > > > On 25 Feb 2016, at 18:30, stealth(a)nym.mixmin.net wrote: > > > > Signed PGP part > > I just recently had my Stable Flag removed from my middle relay. It > > appears that my stats have gotten better over the past few days, so > > it's not clear to me why the stable flag was removed. Can someone > > explain how this flag is enabled or not enabled? > > > > Relay Name: stealth > > Fingerprint: A290A9E71ADFC2FB1C80E64EF851A4B905450105 > > Looks like some of the authorities couldn't reach your relay ("Running") last time they checked, and the majority doesn't think it's "Stable" (based on uptime). Perhaps this is because it was restarted recently. > https://consensus-health.torproject.org/consensus-health.html <https://consensus-health.torproject.org/consensus-health.html> > > Perhaps it's because you changed your address or orport on 2016-02-18. > https://onionoo.torproject.org/details?search=A290A9E71ADFC2FB1C80E64EF851A… <https://onionoo.torproject.org/details?search=A290A9E71ADFC2FB1C80E64EF851A…> > (Bug #18050 could cause this, it's fixed in master and 0.2.7, and we're considering it for 0.2.6.) > > Give it time, and enough authorities should believe your relay is stable. > > Perhaps you could consider upgrading it from 0.2.4? > > Tim Tim I have a cronjob that has this command: 0 0 * * * apt-get update -y &> /dev/null && apt-get install tor -y &> /dev/null If there is a new version of Tor and am asking that it be installed. My cronjob is not working, if it's not picking up the latest version of Tor. Can you recommend a change to my cronjob? I just installed this relay about 5 days ago and created the script two nights ago, so I'm not sure what you mean by "Perhaps it's because you changed your address or orport on 2016-02-18". I'll monitor things and see if anything changes, but I'm more concerned that my cronjob is not working. I also did a "service tor reload" to see, if anything changed and I still show 0.2.4.27 as my Tor version via the arm program. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJWz1U5AAoJEH1gNwhiMDZumawQAKeFuwwembr+VsMNH065yhzP +KNbFPzMM9PscX1qv5e3UBhFOI5Rk8vEJkBFxwdEjk2G4sIXD3Y/zNL3+nbTn6VF WcyzlimRNgTBlG4E5t+l3e13aZiLs/9eyUV3LsuchjeGxavno+G0/JKaiWgvrNV9 L6mkVCvRlHj2gcA3h0G4FEV/K+oSSOtD/ZfzL5jVtgS3T2iZuYPb6Z7Mc71bFuUD bgjTmYf6VavbBnqnSdfO8QI0MsNap9M5rBjqlU42J4LwBDW4oMNKjR6F1lkVYdFm 5nGZbMN2dFqSNgxvVIAzTZfNeksnTTmWkm0g3IrHlR3n3GfyC01xOHKap9NAoW6Y dO15zsYcWlYiOWkDCsx067Jn3XqEVtBJl0XERy5WZxFFFDr3Y+LHprN3aySH0bGz EfcIxKwdbpRWygDUnm8Ur22dDl2jVajun5XgQtjesodQjuHQa5oi4kB9m7t7/ThI trqJXwtB1GwQ+OWAR3d8RcjXt8O7ygJwRuk2PXlIfvY3owLOu1j11uDBrV+/HuEP sGKC+tqjEM7wS/rfAose9U7JnjVbb4iUQg3h7f7/ZmkZh1yp76ZixC3yDSAXZJfs wJQGItJcm2xPCHa/ZUhDi0qsDwLND33deJ+ihkqR+FaAn2RjvVbkVAtgZdPF5S+4 vriUnYrcvIRk1Ajx6f9a =r6HX -----END PGP SIGNATURE-----

3 2

Stable Flag Question
by stealth＠nym.mixmin.net 25 Feb '16

25 Feb '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I just recently had my Stable Flag removed from my middle relay. It appears that my stats have gotten better over the past few days, so it's not clear to me why the stable flag was removed. Can someone explain how this flag is enabled or not enabled? Relay Name: stealth Fingerprint: A290A9E71ADFC2FB1C80E64EF851A4B905450105 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (MingW32) iQIcBAEBAgAGBQJWzzIwAAoJEH1gNwhiMDZu82oP+wWsR+7M8pOqNtF+lJZ15sGk 7sBPulmb57s1wwBmpbbvCtIalPwRffAOsB3ilwJyohlXAuLWWS6Aeo/s94CHVzE5 V9t2ZUIWvx0nEd8csrGBNJ+AfMDt1KwdJF1gFr+efFhXAbH2ARdQZgKGv6Mye5cf 161OLW+a8hRT3+i9+AeTdYLLz40QSCuWIuspaoPGcORE5LFykhrx63cI/XYnJRJW LsnW3EKitXJw1jib+Bh5afegB2PimzGpA6vMcWRSEiufYkgN+ndfN0lGQyYgji2y /h+FDdYovUGGnt5EBy33Z3Ch4YRYbci95QDzXEMsgxiBesBMZNoz5cbjO7WjOTl/ rh3kfMamMswI+mSZqwU1Wp9xIyBQwJB86KOKdSoaAjA/8nbxiAB8ImY/AOfCyRN3 faQ7SKbV/b3PbAVMXHa1WorJ1wy0xgvru6UTUljE83qZVsmenmgENwn3nz8t3Gqs fRTuDzV3ysEq8o/os41Md914oGFknZRVa7undami9WGmNqtJ0Ck5zPHxOmiQm2nX FSuUUvNvl4hDv+54ZHhD9nPT/LdQY7wQmegJ+I6YM9//Ab2ccZoyGcXzjQMXqkiw 9EPBDen7bSMW2+YJWG0H6emlj0t7VPmkf5jW6/q7YlWV/ak/jwtYa6TqpTRtKgoq /3xpaM9q+XiHFQsS53Me =3iAz -----END PGP SIGNATURE-----

2 1