- tor-relays - lists.torproject.org

CPU usage
by kingqueen 08 Jul '14

08 Jul '14

Hi, I'm running a Tor relay on a low cost dedicated server. The tor relay is named kingqueen and it's running on an Intel Atom N2700 dual core hyperthreaded CPU with 2gb of memory, in a data centre with a symmetric 100mbps connection. I have found as time goes on and usage of my relay increases (about 3 weeks now) that the Tor process is increasingly using more of the CPU. TOP shows Tor using over 100% of CPU and the load average is 2 or more. I use the dedi for other, less intensive things (OpenVPN, seedbox, also Owncloud though this falls over). I know that this is sub-optimal and ideally the dedi should be for the relay alone. I was wondering if the CPU usage is standard. I guess it could be, given it has decryption work to be done? Is it high? Is there anything I can do to lower it, other than rate limiting, which I don't want to do? Thank you

7 11

different torrc and fingerprint when rebooted
by Kali Tor 07 Jul '14

07 Jul '14

Hi all, When I installed tor for the first on an Ubuntu machine, ran it when logged in as normal user "tor" using the /etc/tor/torrc. However today I had to reboot the node and when it came back ps showed that it was using a different torrc /usr/sbin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc --hush IN addition, it seem to be running with a different/new fingerprint! The content of /usr/share/tor/tor-service-defaults-torrc is: DataDirectory /var/lib/tor PidFile /var/run/tor/tor.pid RunAsDaemon 1 User debian-tor ControlSocket /var/run/tor/control ControlSocketsGroupWritable 1 CookieAuthentication 1 CookieAuthFileGroupReadable 1 CookieAuthFile /var/run/tor/control.authcookie Log notice file /var/log/tor/log Could it be due to the different "User" that I have a new fingerprint? How do I make sure that the next time I reboot I use the correct torrc at /etc/tor/torrc and the correct fingerprint? Thanks, -kali-

1 1

Re: [tor-relays] Trying Trusted Tor Traceroutes
by Sebastian Urbach 06 Jul '14

06 Jul '14

Dear Renke, Dear list-members, Yes, the TTTT project is alive. Thank you for asking and for your ongoing support. Yes the repo was updated but it is not ready for review yet. We are making changes for the next traceroute round and will ask for testing / testers as soon as it is ready. There is also being worked on a reverse traceroute and we had people at the last tor-dev meeting as well who are trying to figure out what step to do next. Regarding your comment on "Dynamic download of relay IPs". It's just downloading the current list of relay IP instead of using a static list. I don't see any harm in that as one of the participant in the past pointed out to use the latest IPs anyway. Theres a lot of work to do with limited human resources, please stay tuned. We will be back ;-) Hi Sebestian, > Just a quick update regarding the TTTT project. There are multiple GB's > of data to analyse and it is still being worked on. We are also working > on the public script(s) as well. is your project still on-going? I'm asking because your score board was not updated since May (except one test(?) upload in the phase foo-foo) and though the repository updates are interesting (dynamic download of relay ips) they were never approved for usage according to your installation notes. Renke ---------- _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

Re: [tor-relays] UK Exit Node
by Thomas White 06 Jul '14

06 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael, First of all thank you for running an exit. I run a large series of exits in the Netherlands (https://globe.torproject.org/#/search/query=Chandler&filters[country]=nl) and I am a UK citizen. Having experienced many troubles, including server seizures, I decided to move the servers to a jurisdiction I am not living in or plan on living in as if there is legal trouble, you want to put up as many layers as protection as you can. That means even if my node in NL is seized and I could face a conviction (theoretically), because it is not illegal in the UK there is nothing that the government can do to force me over there under the concept of dual-criminality. Furthermore, running a Tor exit at a residential address is a very, very bad idea. I speak from experience here after encountering UK police already and their version of "knock and greet" is at 4am with the door taken off when they don't realise it is an exit node. You want to separate your traffic from that of your exits wherever possible because assuming you were asked in court if you ever used your own exit, it would be conceivable that ANY traffic from that exit server COULD have been yours if you've used or were on the same IP as it. This is of course not the case if you don't use the same IP/residence for your personal traffic. Also, on the topic of blacklisting IPs I find it a bad idea both morally and legally. Most believe morals would dictate blocking child porn/peer to peer is a good act, but this is the same guise governments have used to overextend their reach and so I don't block any traffic regardless of how questionable it is. The second reason is because of your legal liability in the UK as my solicitor has advised me; by blocking one set of IP's you are then accepting control to filter and moderate the traffic of your servers and therefore you don't have the same (full set of) safe-harbor provisions protecting you. It then becomes a trivial matter for law enforcement to come to you and order you block more sites without a court order. So overall, freedom of speech and the right to read are inherently against the idea of blocking content merely because the overwhelming majority of people believe it should be blocked. Freedom isn't free if it isn't totally free. - -Tom On 06/07/2014 08:51, Sanjeev Gupta wrote: > On Sun, Jul 6, 2014 at 3:39 PM, Michael Banks <c(a)starbs.net> > wrote: > >> The block lists are very limited, i.e P2P, lists of known >> blackhats/paedophiles, unallocated IP ranges and most >> importantly: government-owned address and anti-tor addresses > > > True, and I agree with your definition of malicious. > > My concern is that it is not either my place, or yours, to define > what is good or bad for the Random User to visit, _IF_ we are > offering a Tor relay. Our intentions in using this list, in > particular, are not relevant. After all, the Govt of China also > claims to be shielding its users from known bad guys. > > We are against such censorship, so why should we add our own > blocks, without warning, without anyway for the user to even know > we have such a block? > > > > _______________________________________________ tor-relays mailing > list tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQIcBAEBAgAGBQJTuZIYAAoJEE2uQiaesOsL0ycQAKn1kFwjLMVAEvQ8v3hQUvOl dFzDhDLHR+SMUO+K6M8PvwsKHVB1og3jN4UN4hYvzGJl1qOsOhMGaWp6uvAxwJJJ JqjwyCnpHSTdYH2LKVjtKz3o/W00TDl8fJxXt5AfmDNUX9M/MsHieq7U6KPpKWyy K8U0xAxrLyFzaaFVVHjotZzRoCg67IMiLPXx/l6QurD+MCwNG7DWf+aMAgjxTQvJ 5OFQ938hmhAe7bXEkz0uc3zg5C36GOlif42Z7s3kqNMbP//yBBzSnV1dCtggGNqt F/IRMcK8TKkBecC5IlW3E3rHh1lcXH6VmkSKYC6/2KTkYlhdkROM8blGbt4P3kkf EHKmSa6kN0/iwUTdNsoY/duu2P96bWpZ69WFywf95WqRq6I/pwBMs2crN/QQWJ0t qu67OAIb4daBccBtf4XSq5S9W9KWej7cE6tdyoxBxBZlSTkmEljdhtLr5qkahtdL SEVHdY8ko4bFOBNMjZxGl8HKQbE2UlCiF3ErK8IyRGeLBwUlB29OlinaoJrewXud CHrkrNEXrDjePcUerz74Y7sRgtv2yOSKBhF4L/1kVV/govvysz3TuLQjmU9e1rQf alHm4wvRF18Lodlp+AnlKTlmVCP9cklTAsfNVb/TCOyjRmQewHXJd0JFdXpBQD8J x12SnIhToKOq0Q/iQOCF =doV0 -----END PGP SIGNATURE-----

1 0

UK Exit Node
by Michael Banks 06 Jul '14

06 Jul '14

Any tips for UK Exit Node operators on a Residential ISP (BT)? Running a reduced exit policy, informed various teams at the ISP, running PeerGuardian on the server in question (blocking P2P/kiddyporn/hacking related IPs), have a hostname setup tor-relay.itschip.com, planning to leave the thing running 24/7 So far, it's been live on and off (ironing out issues) for the past few days and it's transferred well in excess of 300GB already. Looks like I'm one of the fastest Exit Nodes in the UK c:

6 11

Relay not making connections.
by Lluís 06 Jul '14

06 Jul '14

After reading the documentation and related FAQs I got my TOR relay installed and configured. It is listed in Atlas with the running, V2Dir and valid flags for more than 5 days. However, it receives almost no connections and the following notice appears frequently in the logs: [notice] No circuits are opened. Relaxed timeout for circuit 1331 (a Testing circuit 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. 6 guards are live. [7 similar message(s) suppressed in last 3600 seconds] Can anyone point me over the right track ? Thanks, Lluis

2 2

Trying Trusted Tor Traceroutes
by Sebastian Urbach 06 Jul '14

06 Jul '14

Dear list members, Just a quick update regarding the TTTT project. There are multiple GB's of data to analyse and it is still being worked on. We are also working on the public script(s) as well. Thanks for your ongoing support ! -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat and statesman

2 1

Relays or exits: which is needed?
by michaelball＠riseup.net 06 Jul '14

06 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I'm (hopefully) going to be running a few high-speed Tor servers sometime in the near future. Which type of Tor server (exits vs. relays) is needed the most right now? Thanks. Michael Ball @cryptostone - 0x0BEF5055 -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJTuMmTAAoJEPz+HqEL71BVSK4P/3QLZN0dXoMFgz4//pKzCEsl A0GW/DZEgmVwjo0GVmuvKnxcY+e8w53NQ7nD4XtIJw+KC/VgYnYomjA+JxI8UMWF HkQ3KHuX90YbUTPFD2aJmcj6ZUs99pHjgZblEzPzMxfPWgHXDe09bT7Z1TBGsJg0 JW1aQuo64tF1YPqhh98P7Qqn9mRU7MiWhzJjRUCPsj5CeQO1x/QcXBYP77UGtPe3 y6bpwberzbM6GgDjwdIb61LJScE/5bueApOEmvO6PJ3lMwwnJhrynExmE/nhR/lC bZ7YCwD4ICCuHIv9b0DqBMZDHb5mZuRtqDiUKzFwXX/M3Mj88RtBQemNZXTbvBp4 3cXejN5cPUAOgE2RC93bk40n7oYGkDtQDHu7i7Ed8K3r8yCGDbUt0KZzbHU3/EDQ v2AlFY/UqDR7XTjYMQAPcwG+iHbaHVClMRn9V512sBqMtjliV2ODbqEZYhpUfvTF jMUgNE9vFVmlmIGmxZAbeoktxM+8o3M/coyV5xz9GbkL6ChYFHX5h215LstXqtBk M3dW8GMV48Qsa1zSDGp1aMXTpXZ1gm6h/+SfokEhKYSqcJFbqQIYvjL+V5+DLlZ/ 9Njcg+bAirvQfLIEtSsNQNenmJG5juB/eUs6LZjCbuL2YGbRuVtPMSmmxORQMnXl f/CTUUssfdxwt05GG4cz =kLYH -----END PGP SIGNATURE-----

3 2

Re: [tor-relays] New Tor node operator hibernation question
by pandemicrelay＠hushmail.com 05 Jul '14

05 Jul '14

Thank you for explaining hibernation better. Could there be any issue though since I 'forced' my relay out of this hibernation?

1 0

Re: [tor-relays] gazduire.ro
by icetor.is＠bitmessage.ro 05 Jul '14

05 Jul '14

On 7/5/2014 6:14 AM, Moritz Bartl wrote:> Potentially interesting candidate for Tor exits. Someone on IRC said > they accepted exits. I didn't look at it in detail, it would be > interesting to know if they're just using Voxility or a different data > center/peering. > > https://www.gazduire.ro/ > https://www.voxility.com/ > > One of our bridge servers is located at m247, which are very friendly, > but I don't know if they allow exits, and they're a subsidiary of a UK > company: > > https://www.m247.ro/ > Hi, They do allow exits. 6C36F9ACBA57AC9C10DBC39D330CFA337522E72B The one and only in their network. They are nice and cooperative, never had a problem in > 3 months of continious usage. Only requiremenet is to block port TCP 25 outgoing (SMTP) to prevent email spam. No anti p2p filesharing policy. I don't think they are the same datacenter with Voxility. This is NETBRIDGE group, a group of comapnies running multiple very high profile websites here (like advertising websites and traffic measurement websites for .ro TLD). Their headoffice is in Bucharest, but the datacenter I think it's not in Bucharest, it is in other city (Suceava) some few hundreds KMs distance. Pros: - very srong uptime - good datacenter respecting highest industry's standards - nice ccoopeartion - vmware esxi virtualization - good network speed and quality - unmetered traffic Cons: - non-english version of their website (can be easily fixed); - only accepting visa/mastercard/paypal payments (maybe they can be convinced to go for BTC or WMZ if they are properly educated abut it); I have a good relation with them, Moritz, if you need specific details let me know and I'll update you here. ---Robert

1 0