tor-relays

tor-relays@lists.torproject.org

36 participants
4815 discussions

New Arris TG1672 Cable Modem, relay not reachable...help!
by Kurt Besig 19 Jan '15

19 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been running a middle relay for nine months with great success, however yesterday my ISP, TWC, upgraded my cable modem and everything went south. Then unfortunately there was a firmware upgrade for my Asus RT-N66U router. Perfect storm, now My relay is down, DirPort[80] and ORPort[443] unreachable. The new router admin interface looks like something written in Greek to me and although I've forwarded 443 and 80 there's still no joy. After almost a year of seamless connectivity I may have forgotten some important setup fact, but other than the modem and router firmware update my setup hasn't changed same computer, same Ubuntu LTS 14.04, same Tor 0.2.5.10... Anyone familiar with this Arris TG1672 modem, Assus' latest RT-N66U firmware 3.0.0.4.376.3754, or any general help would be most appreciated.. horizons3 My old IP:76.91.226.105 New IP:108.185.28.227 dhcp -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUvDFDAAoJEJQqkaGlFNDPIroH/1iXuYVs/aktiL8OhsCoKUbd uarWayXPQSh6DXT+OMFSpy/qkE1kQVP3dNqwuaP9GVwxrJ7Qqr6Suhrmlak7Npel 6BvgQGcTwhsGGtI+KiS4IyVAjjkPcltXOyHCgOELeE8tBjyWsaYuoRJkI48CnZM9 GE+dWy2MXribEZ75IpCl3/qmE1vqdSU4LONtqfMNZ+buFkCp5BhQ5QkiRH+qpOBG tbEuV2CK+2smlWOnK84v0bqfgcj08iWGOOSMu3+Cwc+8j2XI4fi2qMfsbfrq9Qqp spwOhlTtafxJvgf57ul5gY5Vdo9HH5OtZYBwd+SjVGOE0f4qNgXjqRxostKRSmE= =XGLP -----END PGP SIGNATURE----- --- This email has been checked for viruses by Avast antivirus software. http://www.avast.com

5 5

How to get NAMED Flag
by webmaster 18 Jan '15

18 Jan '15

Hello people out there, whats the actually procedure to get a NAMED Flag? -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.17 (MingW32) mQENBFHMmT8BCAC0smvU7Bq1ABxAhvBRn7d4ekkk95aCE4TTQo4wy1z/rGLhQfdt dhiD+Vy61vGrsdK3ei5sW6rBvX2m8+YmBi+8AAgSiZmS0JM3Zz3cmTi5oh0D/yM8 4aDj7wQYfJyzSmYN8InAQ5eA77lwIdqG27kR9wga2szeJwCnWReta0R+7YFkpUW+ zUlf4SWcUx5SmBsaiELQpm+Qcn+fyopo12RX6YVmoNPBvN2nDXDnRhUCKGc+0xhD UrBpCHrApK6sTnMsD34ClCLTL2L1gckQ0AsQqY3PJlx3R8kIJxlmr6R3WnjPMIG0 lqrukB9PcOrHM1MZXK1gK6AtypHBN98lr8Z9ABEBAAG0KndlYm1hc3RlciA8d2Vi bWFzdGVyQGRlZmNvbi1jYy5keW5kbnMub3JnPokBPgQTAQIAKAUCUcyZPwIbIwUJ CWYBgAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQcN1vxvRQl+0SEwf+KXjf YtiSUSVS11uqeQ/8g46NwmNa91P3toZvEd7vhLSbjnL9bi/vApzNnUTGT3VP4/NA dg9SbR4qKlSr8T+YikRMV3tiuiVq8m7g00qM9y8MIomwJTounz8VdO/aJXFSOxAK Bb6ElREADspCzr2qSZCnozWUzbd+b8owbGeRRq3e33Aa5Nlm/xDRxGDWANbaIA8q Gkibvy3vWEwrxiwsakvHGaEZnPEtlNm3M1xcmFAuyl73qzUMkLN0u9E/2igo4EB5 EdMb5Ab5hfWdljxBqJr0tsvMfSK4VkzMCbKYkTqHZIRPQnhiSBE6Yo1Q6RCl/Hht bkvU4RA0J+NkXMZljrkBDQRRzJk/AQgA0HojJnK0uhEkAnbmszYsf477DV+LD02s ZEAlLGhJlf9qYaDiPMPwaZ3nK8/PYKzPpBWfHgRQP97rLHPIVJYl3BHDa/nWeZ2b e/HzYhpX0djbK9qe6W/CTfGbXmC/y+4dDGB8dvtTAW3JILm7xEdwiWtywozEVy7V lnMK4JQvlfOh+3XO6qv71FXyuRkObvkYzqvxUYHewtvvObcVxXHP0C0O6LB44iAW 2boZVVuiHdudnyNAezJajPMUT8SnI0bwL6+0TgnHL4cKNUEPQljIrrvi+9nCkq7V uBtnsYtyoo2reoxmCbX/Z1zZsxdUcKpeJHlc5AypyN8DUJ+APJ9NnwARAQABiQEl BBgBAgAPBQJRzJk/AhsMBQkJZgGAAAoJEHDdb8b0UJftOY0H/1TChmQrJC/qzefW PK7EqFlBg3TIEXdu8JHjF42ZOgzQRfp7E2wWzEx0Y45lNXMs6Yg15hWCEDaUDF6F 5WZKNrP8xIldyR9Aw7fyKqjZ9UuKovqofHsCiaSO7nWzGM6GF3nBDNI9NcFve/wN wggyjAbohOJrJGal3N0HlG3cakqjEmjBe1gQEMC0ZPlWstb/cqqr49TNPrRmQc4P SyGffh8Xqhw94m1LDBXFEaYe7AxjNk1sPAVfO1rOdLF6GOun/UwgbhDQX/Rb9C3t AhjSgyFEiR/gfrUZ7R6SY51qOUf1lN5ZN85C/x27XoZWYlsNaH3Ei6nG+yeswBMk ZRMbezQ= =Med3 -----END PGP PUBLIC KEY BLOCK-----

2 1

weather torproject buggy?
by elrippo 17 Jan '15

17 Jan '15

Hy all, i wanted to list my relay on weather.torproject.org. When i submit, i get a 403FORBIDDEN [CSRF verification failed. Request aborted] What does that mean? Kind regards, elrippo -- We don't bubble you, we don't spoof you ;) Keep your data encrypted! Log you soon, your Admin elrippo(a)elrippoisland.net Encrypted messages are welcome. 0x84DF1F7E6AE03644 -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.11 (GNU/Linux) mQINBFH797MBEAC0Y0NeI7lmDR9szTEcWuHuRe0r/WjSRC0Nr5nXsghuMcxpJ3Dd BOBimi4hdMMK4iqPVMwNw6GpKYR3A9LHHjbYRXHUKrJmB+BaJVyzJXN5H6XvxTTb UfX+DaXAGJW/G+3cBB3qm/QaU8QGkBKfXq0DLTaTGPkGKxEAldj/8onGZhawdJs+ B92JrW+S2HDh15pIuXzSqe7eCcIOdvvwfWe0fJi2AraA7LYGpxP6GcC/b9JJpbq5 Y6DfE2Aun9ZK3iHqURyrms0Whbv1CgmUahL2MVYCsTsXwe0GwlAxxKvjXAiXuo+R 9wO5wsXvVVSVNqsk9Yqi+wYzdPKndTU0GyxSApQHroF+cxaZ8Lk0xloj18+LdCSs e5IiTSXH0MMsDdWWdHlrgk+bgDG+0Gu3ne4vMwGdKO7AhYgQW/ueMy4RnkG/nsV9 jry5BO4gGAI1Ij8KvqUzEnvJFGE3ptJogU+zazWWDUWmL3ecKb3aDRlJFnZ3kJ5h q8GolZVjpk99V+4B5WVRPXdej/p5J19tXycK/jdNmr4oC8NyUhIpe8xHELnfoB4z +rxiTx+KMnW0rY8EQg8O2ixEYt5my90IwQkxcxIxextVrqjJjYn8extc2/v8yGzI KmTEJxdADB5v/Jx4HiLHNDSfBUb8gfONCkNSTYvTcSwTjWzHOkXeE/9ZbQARAQAB tD5lbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0ZWQpIDxlbHJpcHBvQGVs cmlwcG9pc2xhbmQubmV0PokCOAQTAQIAIgUCUfv3swIbLwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AACgkQhN8ffmrgNkT8+BAAoAXBqu4/O2Cs5FSWWZpzgScNEgq7 uHhOKeYmRfgKlOUPoYlPB1DBqdOAXSKb9OvsmyOvpoGnqijB7aAJBoyQYW/OCQgd U8L4eTCf4yRZnfFLdgskcPfN1p0Rs/yinGEooBJFtYa7mT6J0UTW2JjCLZK2AFCW oF+KBu5JICXGBXigb2ZbX1jWjxP5H1RidQw6HF5z4z34SjLWAOOeZ8B/Xfz6Fs0s IAuLu2O4HE4DI8Qu196LhSVHHgr3uMTkvN1t5nKwyjrRQztwXXk9qIomII3ydNYb BYAGdWNNMfLb1kmDwC5wQHAFvSP1aiMF3aKAY+gl2wXSGO6JqM0SteJS3dytIljI kzu0atc9HuGs/HDQgdmpAS4WU2YefEr/WieltSiAKlwuC+3wg+CONJ6TE1vgNDU/ axerttb0jq7UQb/nAp05bsrB7XH1Vs+1ON9lUPEfWRmwQcrVK5JUrUWa/4tA/UeM XvFcPFtFluGTlLewgJIqcvjPXFwpbDZprXJsMkwew/A6B6n3+0sbgf7p3QSGkVbi dwQAymTbHdYqLnbcnKZhjto3Wjw1J5QB2wuiRYlpjV3i7AWTGlqoSTOWCCV+HamQ qeFYNYAWNFx3+J/oi7xDi8t9bHVNA205equ+y2sj3G5uGJ6LSHQ8AXp9uOipUUvU 1MJN0yLXr9PIwvi5Ag0EUfv3swEQAL0+MnxHGrTjSYdfdua4SBpmytDONM1EngeY s+WyaC/760MughKbaysI/nK2LB1vnwEY7f3NM4fxBx8u2T7VBm6Ez6Fs23Bb8Rkz f97bPSdxCmg64GPHfLA9uwTIXcYS+MpI86WOf6eWY0rRpf7Y9Nl7YoUNvzOyUPqc ggdcnHce8zYv7A/WS8flZDm8tVFPsHrQDEwNMws7ZhiNnHkeZeRJrvCuB7oEVich O/ROYoA5o6NozWYQbjxe1f6Yur4Q10qgVcxVnyLFJSbg6vZSzL7KYh3Z5iBOzPHt 7cwEDrW8W4Kl2Qj8rhJ4Wxs94CAtua7IXK44sVZWQbyHcOXRikgGMZKkEZzVCQa5 KD1u1ZrcBCyuMAir0hsmS3jhCUwpiE2c3SRk8O8CgixhTcBk0X/k9ZFu3Hbi1JMB FLzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN LTcdovZuWtC0s8/jrx+zv/AA4FAGYU9OVl+YL9ybFX8gSdMEcixyzQcKfiFBjpWv 5iFrwIuDlaXMcheyrhc9aGOxfx44OXc505+VjO/1Q/8EOWlJ6UwOi6GMkj5T+RFJ MDyP0UixS7dt6wTuD5t6PRuyWWxZswgrbL9hjwGFr154Z19TWeNWc23pWtUvQJos UCxl2nFHABEBAAGJBD4EGAECAAkFAlH797MCGy4CKQkQhN8ffmrgNkTBXSAEGQEC AAYFAlH797MACgkQJEPd69lQ0evA+Q/+M7lSFlrQWiRsFqDjh+kTJc+0OEBCvnfo N2KPyXXbfc//qup55PfEygE6C60zvrlv3WE33GZ5GS5MLuDMP82b+a5Yt16NQU7L WtAg1g0S0BvazW+28TgnfO8bhbGaFeE9ccw3xLmlbwZQ3f3LtMKdwFIROiG6hvAs 9U54QYti3tv9DowRYYWpdr0Ga8RqeGNtCKc0v2opy51MpzKWjwUW0i3XlSlyY8Lj 1KT8PyznNPw32nYpmDizz+0OUJNnn/kT+GnFoR3DJnFosTOrnxFJp+N+nejMp/gW r9NM0/E7H+P53IiytBOt5/0vsOaCFGdYGhKEjmJi3dHS4Xk1ObD1mjdD1YDOlWWU 3Md6BDHd4W7Q8gT7oQfTIMLd3HzV+WNPIdocPLBaeA/tRD8Pg5CCmncAmSub4F5T An7FlnACtSOv3cIWQ0TymS42DihDaJ5d1RvNzKw+zHYdPvf471JFZR3TDhkPbLIr 9czR7kbpnXRwchgwXQn306NVWf37TgA8wpbnFTazZ38iOeqcb9oKprqnbgEdr3PN OhKSlMTkzAqf3MEi2Fyua4BADMhS3oBwCRgDTlt6wquEytpNSlZaHnyiyIgOpekF Uy5K3w8NhHqeifRPrNb/UcCbXtXz+puqIEZHMenpv6FRlTTKpdoHoVXSkp1TPMGN /VaCiLbP4Z3xEw/9EbAJJkhmmx1Qw3ueoqc4h1MmhUtIdxSZ/oA9SjwlnY++zvaZ 6w1wTS4P+OUkETNDtItdpxXMJ9qfSy9voAQc2K43WMZCCmpPJYSdqaZZNPFj+Ne8 6FNtNKuUkXREybpHwlVAXnHzInmFOOM9RAmF70r3zEmKt77W1ztBLo2o9X79gPgL u9ThgrH6Oc2k46n+9nc3joccr7miiX/bp976DNWcWdOYThiSSOCb8Zw9/Zs935i1 wUVkYTj24tmBH4H5ov9ib7RPmU21ru458RbUKG0ONAqBtAHNyXHzUnXsrke+D4VW MI06YcXSk8YeYgQ8GxgHQc+W2bb8LIbKN1hEYJ0wzM62vKR2/Oiwuf8lXutIKTuz +v7Vj1PQd66DGHsxtWRaWnr1c54JTL2wICHJYKFH4grp7864+GL/uQ1O/Z/XxVku E1JQ/AnwBGU1M1S6otwWGWVRjzEzQtxsfcCEPvV/9td3FIFQAbGTPb+48XFU+TY9 8AlcXBlDzXq7c5f8Evn/oSIsZDt63K4HNTmMGqOTl/p1aA0e4eyX76LczY06rDP5 GMSNs+AHmYgZiS4RYhRUIvS9uLXMnnDAMYst0SDl2orDUUeHBTzu0rchyknBZMGP p5wQuWQ9CFlV+dj3UYbrBwC1lTkAMXRG2vlhA0V0TZqos7A5D4VHgSUQQjE= =otlL -----END PGP PUBLIC KEY BLOCK-----

2 2

Linode, DigitalOcean
by Dave Warren 16 Jan '15

16 Jan '15

I've got a number of servers on Linode and DigitalOcean that could potentially be candidates for relays or bridges as they have a fair amount of otherwise unused resources. However, I wonder if there are enough people running non-exit nodes on these providers due to their large scale, such that more doesn't really help due to the lack of overall diversity of the network. Thoughts about whether running a few Tor relays in these environments is worthwhile? Neither is friendly enough to run exit nodes, at least as far as my purposes go. And to be clear, my goal is to utilize and share some otherwise unused resources, not to buy new servers to dedicate to Tor. While we're also debating sponsoring or operating exit nodes, they will be on dedicated servers in Tor friendly environments. -- Dave Warren http://www.hireahit.com/ http://ca.linkedin.com/in/davejwarren

2 1

Re: [tor-relays] building Tor against LibreSSL 2.1.1 fails with "undefined reference to `EVP_aes_128_ctr'" error
by teor 15 Jan '15

15 Jan '15

> Date: Fri, 21 Nov 2014 07:22:10 -0800 > From: Seth <list(a)sysfu.com> > > I'm trying to build tor-0.2.5.10 from source against LibreSSL 2.1.1 on a > FreeBSD 9.3x jail system. > > It fails with this message > > ----------------------------------- > > CC src/tools/tor-gencert.o > CCLD src/tools/tor-gencert > src/common/libor-crypto.a(aes.o): In function `aes_new_cipher': > /usr/local/src/tor-0.2.5.10/src/common/aes.c:100: undefined reference to > `EVP_aes_128_ctr' > *** [src/tools/tor-gencert] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > *** [all] Error code 1 > > Stop in /usr/local/src/tor-0.2.5.10. > > -------------------------------------- > > Has anyone has any luck building Tor against LibreSSL? > Yes, on OS X, but it wasn't easy, and it didn't bootstrap for me due to SSL errors. Others have had more luck, but mostly on Linux AFAIK. Do you perhaps have a system-installed OpenSSL 0.9.* which is lacking EVP_aes_128_ctr? See https://trac.torproject.org/projects/tor/ticket/13817 for a similar failure, due to the following issues: configure --with-openssl-dir= detects the wrong bin/openssl if "$OPENSSL_DIR/bin/openssl" isn't in the path before all other openssl executables. configure --enable-static-openssl requires LDFLAGS="$OPENSSL_DIR/lib":$LDFLAGS to link properly, at least on OS X. If you do run into runtime SSL errors, see this bug: https://trac.torproject.org/projects/tor/ticket/13816 teor pgp 0xABFED1AC hkp://pgp.mit.edu/ https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 http://0bin.net/paste/Mu92kPyphK0bqmbA#Zvt3gzMrSCAwDN6GKsUk7Q8G-eG+Y+BLpe7w…

4 11

new relay - large variation in consensus weight
by Abhiram Chintangal 14 Jan '15

14 Jan '15

Hello all, I am running a middle relay on a digital ocean [1] for roughly about a month now. While the process has been fairly straight forward, in the last few days I have noticed a large variation in the relays consensus weight. Right now it is close 1000 a few days before it was 300. Is this regular behaviour? Cheers! -- Abhiram Chintangal [1]: https://atlas.torproject.org/#details/3045303283D4EAF74C8FA053054C691BB451A…

1 0

You relay isn't getting indexed by Authorities?
by Dedalo 13 Jan '15

13 Jan '15

Some months ago I started running another tor relay (middle relay) and something happened, My relay wasn't getting indexed by any authority, neither wasn on atlas. A friend recommended me to make some tests, the problem was the ISP had blacklisted 6 Authorities, but to figure out this I had to make some tests... I made a very simple script which tests if your isp has blacklisted any authority or if you have a problem with your DNS... https://github.com/Dedal0/TorAuthoritiesScript Just run the script in the vps before you setup a relay to avoid indexing problems... The script makes a simple test but is efficient in most of authority cases. Regards, Dedalo -- twitter: @SeguridadBlanca Github: Dedal0 Blog: https://blog.dedalo.in

5 4

Extreme Overclocking / Relay Performance
by Thomas White 13 Jan '15

13 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Having discussed this with my partner earlier today, I am curious as to what knowledge the community might have on overclocking a CPU or using other speciality hardware to create an ultra fast Tor relay. I am aware of what IPredator have done but I feel confident better can be done. Has anyone looked into FPGA's at all or know what features, other than AES-NI enabled CPUs could bring big performance boosts? T - -- Activist, anarchist and a bit of a dreamer. Mirror & Keys: http://bbbbbb6qtmqg65g6.onion PGP Keys: key.thecthulhu.com Current Fingerprint: E771 BE69 4696 F742 DB94 AA8C 5C2A 8C5A 0CCA 4983 Key-ID: 0CCA4983 Master Fingerprint: DDEF AB9B 1962 5D09 4264 2558 1F23 39B7 EF10 09F0 Key-ID: EF1009F0 Twitter: @CthulhuSec XMPP: thecthulhu at jabber.ccc.de XMPP-OTR: 4321B19F A9A3462C FE64BAC7 294C8A7E A53CC966 -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJUspxJAAoJEFwqjFoMykmDAIEP/28IkrYhjvcnF2jPrt4AL7St 0uXbnTlWbe7KcbnDykXoKGoHwS5jYY7kK9wUo/wKxjxW8MjBlMQdbBiyrpGmc+CY Zk5LyfGkWpSG36KM1L4euK7DMOB5vucFwh4qdt4MEWcB5RZvO2BsuADiMqKQ+Ysz lcdnAmZuFlt+FxoS0O76FEpmahPoVKB5rC8i+pvRxRW14sliIJqVB3JKuE4SA66e 4bT+AGw6btddMO+uW6tDEJeib+fjkvcmCFKMcElr7YcUisJMQrxe8l/CxfrO2WvK nvlt0UMbg2WpPNVueW3uk//fKCZJJryOlo0fx3Mjg/DLAG6to9g0oBE1jQ740Qmz 0pzkxLodQ+FqnJONUgx+QY0spK4gUHXpBEv0lbKqzLSuhK47Nqd3KGd1eRPcpU// NM1tLXosYLHkaLnM98Cz6Bw1cxfMuO36KzLPXEuH2+6hhYTA4mABc4itAA6iRvw4 Ck8ohAlc6KYWqGL64nvOtIPUDYpQPkwLTClVf7PxJZP/CPaNTyI2fOuxM2ObW5Ca qGiCOPzvG1BtzP52IlGF3yfB9+711DvpgnUH4l/jS4KP4jsM2uFte/Z7DuRJXWi4 O0xfnZtqI4lWnNGV6RsbC8avJCrvou3XrWvMSzmU7AaEBQY0UoOK8eRXv/Em/Pv6 sQCc5pBSZgNQMTgunvxE =lX1H -----END PGP SIGNATURE-----

2 1

Re: [tor-relays] Reminder: don't run transparent proxies at exits
by teor 12 Jan '15

12 Jan '15

> Date: Mon, 12 Jan 2015 01:04:58 -0500 > From: grarpamp <grarpamp(a)gmail.com> > To: tor-relays(a)lists.torproject.org > >>> On Fri, Jan 9, 2015 at 10:26 PM, Drake Wilson <drake(a)dasyatidae.net> wrote: >>> eric gisse wrote: >>> Plus the logic starts to get warped when you wonder "So do you BadExit >>> every node that runs on an ISP that caches traffic?" >>> <snip> > > As far as http caching, it would be relatively fine IF the cache > truly did good practice, and IF the site truly did good design > for the cache to follow. However those two necessary truths > are often false, whether by AND or XOR context. So to be > true, a cache shouldn't be deployed, but in the interest of > bandwidth they are, more commonly at small end-tier user > access ISPs (including exits) for that purpose. > > I'd suggest best practice is for > - users to use https to bypass > - caches to insert their tagline in http headers so > users can bitch to the owner. > - Tor exits? Well, they're volunteer paid diversity, so which is > more valuable to you? The IF's above, or TCP truth at > potential cost to diversity? > > I prefer TCP truth, but if I was a constrained operator > I'd do my best research into setting up a quality cache. > Provided caching images of ill repute on disk were not > an overriding concern. > <snip> I can imagine two strategies to avoid caching images on-disk: 1. Use an in-memory cache 2. Don't cache images While these strategies might not technically/legally offer much more protection (IANAL): 1. If the cache disappears as soon as the machine shuts down, it's much harder to prove the possession of anything illegal. (However, the proxy headers, live imaging, or an insecure/subverted server might give away what was being cached.) 2. And if images aren't being cached, while textual material could still be illegal, it's less likely to be specifically targeted by law enforcement. In my opinion, if you use HTTP over the internet, you are essentially consenting to caching, inspection, or worse. And most people know that by now. And if you use HTTP over Tor, you should be much more aware of this. teor teor2345 at gmail dot com pgp 0xABFED1AC https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 teor at blah dot im OTR C3C57B23 349825DE 929A1DEF C3531C25 A32287ED

1 0

Re: [tor-relays] Simulate High Tor Load
by teor 11 Jan '15

11 Jan '15

Hi, chutney can be used to setup a large test tor network running solely on a single machine, with no outside network access required. The tor/src/test/test-network.sh script will configure an entire test tor network and verify connectivity from each client through the network. This works best with tor 0.2.6.2-alpha due to some bootstrap speed improvements, although with larger networks you may need to use --delay to increase the bootstrap time. I suggest you start with --flavour basic-min, and move through the sizes to --flavour basic-100 (my machine can barely run basic-100). You can also manually modify the amount of random data sent while verifying connectivity (look for "Octets" in chutney's TorNet.py). It would be nice if this amount was configurable (patches gladly accepted). It would also be nice if these connections were done in parallel, but I don't think that's the case (clarification or patches gladly accepted). teor > Date: Sun, 11 Jan 2015 14:18:01 +0100 > From: webmaster <webmaster(a)defcon-cc.dyndns.org> > > Hi Julien, > > thats exactly the setup I'm actually using. I use my relay as a client. > From my point of view it seems that the relay is used as a entry point > (without guard flag) in this constellation (correct me if I'm wrong). > > Torsocks could solve my problem. > > My goal is to examine the influence of a high traffic load on my relay > to perhaps adjust my server settings (number of open file descriptors, > ...). > > > >> Am 11.01.2015 um 13:05 schrieb Julien ROBIN: >> Hi, >> >> If you are on a dedicated high Bandwidth server you can maybe use your relay as client, an idea could be to open a lot of "wget" commands. >> >> sudo apt-get install torsocks >> usewithtor wget URL >> >> But it's not guaranteed that the selected circuits will be super-fast (first reason to open lot of wgets simultaneously) >> >> Of course, doing that you consume some useful bandwidth for users (but if it's quick, after all you're a Tor user like another!) >> >> And it's not totally the same that relaying data as server, since it's using the client part of the tor process (but starting from here, I cannot help you anymore since I don't know what is written in the code ;) >> >> So if anybody have another better idea >> Something that would generate a full customized circuit for example, or reduce the amount of used hop for the test. >> >> It already exists "EntryNodes" and "ExitNodes" commands for your torrc file, but no server can be used as EntryNode if it's not Guard already, and I'm not sure that some "MiddleNodes" command exists. >> >> >> Last things, you can also make you machine's CPU working hard on a lot of threads simultaneously, and watch if Tor is suffering or not (like "too many circuit creation request!" in the log). >> >> Or make some tests with Iperf for high bandwidth load in parallel ("iperf -s" on a fast machine, "ipers -c Ip -t TimeInSeconds -p port -P ParallelsTcpConnexions" on the other machine - this one will send data (chains of 1234567890123...) to the server) >> >> Good luck ! By curiosity, I'm interested also, but I would understand if this kind of easiness in creating bandwidth statistics and degraded path (for analysis, for example) is not really sought by developers. >> >> Best regards, >> Julien ROBIN >> >> >> >> ----- Mail original ----- >> De: "webmaster" <webmaster(a)defcon-cc.dyndns.org> >> ?: tor-relays(a)lists.torproject.org >> Envoy?: Dimanche 11 Janvier 2015 11:59:12 >> Objet: [tor-relays] Simulate High Tor Load >> >> Hey Folks, >> >> is there a common procedure for testing a tor server for a high load? >> >> Thanks in advance >

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-relays