- tor-relays - lists.torproject.org

Re: [tor-relays] Hardware specs for Tor Relay
by Sebastian Urbach 26 Mar '15

26 Mar '15

On March 26, 2015 8:59:45 PM yl <tor(a)yl.ms> wrote: Hi, > Hello, > I clicked myself a cheap vserver 20 days ago and it runs Tor since then. > I mainly did this to play a bit with the relay, try around and so. I > took over another relay a while ago, an exit, I don't want to try around > on that. > > It runs well, I got about 4,4 TB data up AND down since then, I have it > running with 20-40Mb/s on a 100Mb/s connection (according to the hoster > 100Mb/s), it runs as a non exit. CPU load it pretty high all the time > according to arm it's about 80-100%, but with htop I can see that only > one core of the CPU is busy, the others are not. > > I figured that the CPU is so busy because the vserver doesn't have > AES-NI, which I confirmed by some command I run (forgot the command). Did you ask them if you can get it ? I had a VPS a while ago and they said "we disabled that for compatibility reasons" but if you want it we will turn it on. And they did it for free :-) > > So I thought I might wanna move that relay to another server, maybe at > the same hoster to get higher data transfer. > > What hardware specs do you have and is my assumption correct with the > AES-NI being one part of the bottleneck? It is the no. 1 bottleneck from my experience. I still hope that we are going to see the crypto-multithreading feature at some point in the future. -- Sincerely yours / Sincères salutations / M.f.G. Sebastian Urbach ----------------------------------------- Religion is fundamentally opposed to everything I hold in veneration - courage, clear thinking, honesty, fairness, and, above all, love of the truth. ----------------------------------------- Henry Louis Mencken (1880 - 1956), American journalist, essayist, magazine editor, satirist and critic.

1 0

missing tor-0.2.5.11 package for armhf wheezy
by jensm1 26 Mar '15

26 Mar '15

Hi there, I'm running a relay on my NAS at home and just realised that it's still running on 0.2.5.10. So I went and checked the deb.torproject.org repository for wheezy and found that the tor package hasn't been updated for the armhf-architecture (for the other archs it's fine). Funny enough, the tor-geoipdb package has been updated to 0.2.5.11 which broke it for me, since it depends on tor 0.2.5.11. I hope that's the right place for this, otherwise please point me to where it belongs, thanks!

1 0

Undiagnosable Crashes in Relays
by skyhighatrist 25 Mar '15

25 Mar '15

Hello List, I am wondering if anyone has had their relay randomly crash in the past week or so. Three of mine (I run 6, nonexits) have fallen over. One of them ~5 days ago, one of them ~4 days ago, and one of them earlier today . The logs indicate everything was operating normally, and the only reason I noticed they had crashed was when I was checking what bandwidth globe.torproject was measuring for them it said some were down. The affected relays are as follows: AC9803701F9EE18194D40B38E47CE4C68CF2F567 73067CD4ADD8A294BDA913DF45B63190A52B5F9F D76252B1A6E9F01FC6772CFFB651056A2B54F92B I have no idea why they all fell over, the last thing in the logs was the usual "current status" output with some traffic measuring, seemingly immediately afterwards, the process killed itself for no reason. All of the affected relays are on DigitalOcean droplets. I intend to launch more on EC2 in the near future, however, would like to know if anyone else has experienced relay instability issues over the past few days incase its something nasty like a denial of service attempt or something. Nothing on the boxes indicates any kind of compromise, just the usual bruteforce activity from the usual actors. I have decided to start writing a "Shitty Monitoring System" to copy logs down to my local box every hour or so and HUP tor at the same time as a kind of countermeasure incase its simply a resource use issue or something, however, would love to know if anyone else has been having similar issues lately. Regards, .d

5 8

Public Tor Socks port
by yl 25 Mar '15

25 Mar '15

Hello, I wonder what is the reason not to offer the socks port publicly to users as an entrance point to the tor network? Assume you run a tor exit or relay on a public server and you enable the socks port and listen on 0.0.0.0 or so and accept all incomming connections. Then you post the socks port publicly. What are the reasons not to do so? Thanks yl

3 3

Tor-Tshirts
by Nchinda Nchinda 24 Mar '15

24 Mar '15

Is there still someone at Tor Weather managing tshirt distribution? I've been running a two fairly large relays for a couple months, although I also wouldn't mind paying for an official tor shirt. My email to Tor Weather went unanswered. https://atlas.torproject.org/#details/C1CFB375BED9D7506569E07B01753BC67EE87… https://atlas.torproject.org/#details/CAB78BF9BD73536DCB55E5BC98D5F3AAB45CF… Nchinda^2 -0.1743*kg^6 m^4 mol s^-14 Computer Scientist the light flares at this node

7 9

Help finding relay bottleneck
by James Murphy 24 Mar '15

24 Mar '15

I'm running the relay https://globe.torproject.org/#/relay/18EAAF7CB6C2ABE8583841D305C06A509F8C1C… and am getting substantially lower rates than expected after almost 3 months. I'm on a 1Gbps down/1Gbps up line but my middle relay is just barely creeping upwards of 5Mbps. This is NOT a problem of less bandwidth after receiving the guard flag, and I have read the lifecycle of a new relay documentation. I cannot find the bottleneck in my setup and was wondering if there are any good tools I could use to find where it is. I've read https://www.torservers.net/wiki/setup/server and https://wiki.archlinux.org/index.php/tor for tips on speeding things up, but nothing has proven successful. Things I have considered: CPU usage: hovers around 5-10%, using NumCPUs 2 Mem usage: 195 MB (10%), using DisableAllSwap 1 Using AvoidDiskWrites 1 to avoid SSD stress Rate/Burst limits at 20MB (160mbps) Using dd if=/dev/urandom of=rand bs=64M count=16 iflag=fullblock to create a 1GB file I test copying this file to/from another machine on my LAN using scp 100% 1024MB 28.4MB/s 00:36 to copy to the relay (307 Mbps) 100% 1024MB 53.9MB/s 00:19 to download from the relay (431.2 Mbps) Okay so not full 1Gbps speeds, but still an order of magnitude higher than the 5Mbps my relay is using, so the problem doesn't look like it is the router or gigabit switch on my LAN. I've also raised the maximum number of open file descriptors for the debian-tor user. In /etc/security/limits.conf I added debian-tor soft nofile 65000 debian-tor hard nofile 65000 I'm not sure if this worked because (even after reboot) sudo -u debian-tor bash ulimit -Hn returns 4096. I would say that is the problem, but looking in /proc/torPID/fd and doing ls -l | wc -l returns 1591, so I'm not hitting the limit of 4096. In any case, if you know why my limits.conf doesn't appear to have taken effect, let me know. I've also added other optimizations from the torservers wiki. My /etc/sysctl.conf is http://paste.debian.net/162765/ Thanks for the help, James Murphy

5 7

Ideas for the further development of TorServers
by Jens Kubieziel 23 Mar '15

23 Mar '15

Hi, during our relay operators meeting in Valencia as well as in IRC/XMPP we were discussing the future way of TorServers. Some of you had some good ideas and I started to put them into a list. TorServers will try to apply for funding this year as our current funding will expire or has expired. So we plan to integrate some or all of the ideas into our application and help you as relay operators. The current version of the list is at <URL:https://pad.systemli.org/p/ukMTrpwf6Yzv>. I'll add some more text in the next days. Feel free to add some comments, ideas, wishes etc. -- Jens Kubieziel http://www.kubieziel.de Ich würde gern leben wie ein armer Mann mit einem Haufen Geld. Pablo Picasso

2 2

Re: [tor-relays] Tor Cloud/AWS relay set up but no Tor installed
by SiNA Rabbani 22 Mar '15

22 Mar '15

Hi allicoder, The images on Tor Cloud website have not been updated for a while. The project is lacking someone that can keep it up to date. I tried to take on the responsibility but so far I have failed to dedicate the necessary time. Sorry for the bad experience. As far as the specific problem with the Cloud image itself, there is a script that is supposed to install the relay on first boot. See /etc/rc.local. You can also find that script here: https://gitweb.torproject.org/tor-cloud.git/plain/ec2-prep.sh There are a couple of issues with the script itself that I noticed immediately: 1) the harcoded pgp key is expired 2) the debian experimental repository is returning a 404 W: Failed to fetch http://deb.torproject.org/torproject.org/dists/experimental-precise/main/bi… 404 Not Found [IP: 38.229.72.16 80] If you wish to do some trouble-shooting, try to get these commands to run without any errors: sudo apt-get -y update sudo apt-get -y upgrade sudo bash /etc/ec2-prep.sh bridge Finally, now that you have a running image and ssh access, you can just follow the Tor relay installations here: https://www.torproject.org/docs/debian.html.en I apologize for the inconvenience and thank you for running a relay. All the best, Sina "Be the change that you wish to see in the world." - Mahatma Gandhi ----- On Mar 21, 2015, at 11:10 PM, aredocilla(a)gmail.com wrote: > Hello, > > I've been trying to set up a tor relay on AWS using the free tier using the > instructions in various places (e.g. https://cloud.torproject.org/, > https://www.fak3r.com/2012/08/11/howto-run-a-tor-node-in-the-cloud-for-free/) > But sshing in from my PC shows clearly that not only is tor not running, it's > not even installed! > > ubuntu@ip-172-31-28-207:~$ aptitude show tor > Package: tor > State: not installed > Version: 0.2.5.11-1~precise+1 > Priority: optional > Section: net > ... > > ubuntu@ip-172-31-28-207:~$ ps -ely | grep tor > ubuntu@ip-172-31-28-207:~$ ls /var/log > alternatives.log auth.log btmp dist-upgrade dmesg.0 dmesg.2.gz > fsck landscape mail.err news udev unattended-upgrades wtmp > apt boot.log cloud-init.log dmesg dmesg.1.gz dpkg.log > kern.log lastlog mail.log syslog ufw.log upstart > > Has something changed, and the images no longer include tor on start-up (I made > sure I followed the gist of the cloud.torproject.org steps, given that the > interface has changed significantly; even went to the previous page from the > linked one to check that the AMI thing mentioned tor)? I've noticed various > people have posted online saying it's not safe to run Tor on cloud services - > has the image been deleted because of this? I wanted to try it anyway because > the main torproject website still says in several places that running a relay > on AWS is A Good Thing. > > Or did I just do something wrong? > > Best wishes, > allicoder. > > -- > PGP key available on request > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Tor Cloud/AWS relay set up but no Tor installed
by aredocilla＠gmail.com 22 Mar '15

22 Mar '15

Hello, I've been trying to set up a tor relay on AWS using the free tier using the instructions in various places (e.g. https://cloud.torproject.org/, https://www.fak3r.com/2012/08/11/howto-run-a-tor-node-in-the-cloud-for-free/) But sshing in from my PC shows clearly that not only is tor not running, it's not even installed! ubuntu@ip-172-31-28-207:~$ aptitude show tor Package: tor State: not installed Version: 0.2.5.11-1~precise+1 Priority: optional Section: net ... ubuntu@ip-172-31-28-207:~$ ps -ely | grep tor ubuntu@ip-172-31-28-207:~$ ls /var/log alternatives.log auth.log btmp dist-upgrade dmesg.0 dmesg.2.gz fsck landscape mail.err news udev unattended-upgrades wtmp apt boot.log cloud-init.log dmesg dmesg.1.gz dpkg.log kern.log lastlog mail.log syslog ufw.log upstart Has something changed, and the images no longer include tor on start-up (I made sure I followed the gist of the cloud.torproject.org steps, given that the interface has changed significantly; even went to the previous page from the linked one to check that the AMI thing mentioned tor)? I've noticed various people have posted online saying it's not safe to run Tor on cloud services - has the image been deleted because of this? I wanted to try it anyway because the main torproject website still says in several places that running a relay on AWS is A Good Thing. Or did I just do something wrong? Best wishes, allicoder. -- PGP key available on request

1 0

Re: [tor-relays] IPv6 HiddenServicePort
by teor 21 Mar '15

21 Mar '15

> On Fri, 20 Mar 2015 17:24:11 -0400, Manas Bhatnagar <b.manas.88(a)gmail.com> wrote: > > Hello, > > Hi, I'm looking for some support with accessing a hidden service that is > listening on [::1]:11001 > I am able to connect to the listener locally but the hidden service > doesn't seem to work. any ideas? > The time on the machine is accurate and connections to other hidden > services succeeds. > > Thanks, > Manas I suspect we're going to need some more specific information about what's failing before we can help. It would also help to know how much experience you have configuring hidden services. I'm sorry if I've pitched this at the wrong level, but I just want to start by making sure we have the same setup in mind when we talk about hidden services: Direct Connection: Client connects to [::1]:11001 client -[TCP/IPv?]-> server Hidden Service Connection: Client connects to foo...abc.onion:12345 via a local tor client socks proxy, which connects to a tor hidden service over onion routing, which connects to [::1]:11001 client -[socks/TCP/IPv?]-> tor client ---[onion routing/TCP/IPv4]---> tor hidden service -[TCP/IPv6]-> server Does your configuration match this? Can you answer the following questions about what you see? (It might help to answer them in order, stopping when you find the first error.) Configuration: - Are you using a testing, a private, or the public Tor network? - How is the hidden service configured? (please send us the hidden service torrc) Alternative Configurations: - What happens when you have the server listen on IPv4 rather than IPv6, and change the hidden service to connect to IPv4? - Can you connect to: -- Other hidden services on the same (globally routable) IP? -- Other hidden services in the same tor instance? Observed Behaviour: - Does the hidden service bootstrap fully, without errors? (arm and logs will help here) - What error do you get when you try to connect to the hidden service? -- Does the tor client fail to find a descriptor or introduction point for the hidden service? -- Does the hidden service tor instance refuse connections? -- Does the server refuse connections? -- Is the server accepting the connection but failing to respond? -- (You'll need to look in the client and hidden service logs to find out.) That should be more than enough :-) teor teor2345 at gmail dot com pgp 0xABFED1AC https://gist.github.com/teor2345/d033b8ce0a99adbc89c5 teor at blah dot im OTR C3C57B23 349825DE 929A1DEF C3531C25 A32287ED

1 0