- tor-relays - lists.torproject.org

Metrics falsely showing my relay as offline
by Eddie 19 Aug '22

19 Aug '22

I have 1 relay (40D13096BBD11AF198CE61DEE4EAECCE5472F2E7) that according to the metrics is always bouncing between online and offline, sometimes multiple times per day. The logs show it running the whole time and when the metrics also show it running, the uptime continues to increase correctly. This hasn't always been the case, as the history shows this didn't happen prior to around June based on the guard flag usage. This relay is hosted at AWS if that makes any difference. Should I care about this, because the relay is running correctly. It's just that it never gets the stable (long running) and guard flags any more because of this yo-yo effect, which I'm sure is affecting how the relay is allocated circuits. I do have another relay (E823B5F000835A669E902EBAE5ECCB9A324F46C9) that sometimes exhibits the same issues, but to a much lesser extent. Like it will show offline (maybe) once a month for a very short period and any flags lost are quickly regained.

2 2

[New Initiative] Tor Weather: Improving the Tor Weather
by Sarthik Gupta 18 Aug '22

18 Aug '22

Hello everyone, As we all know, nodes are the building blocks of the tor-network. More often than not these nodes require some maintenance, which could be in the form of software upgrades, troubleshooting issues, rebooting the relays in case of failures, etc. As of today, if any relay disappears from the tor-network, no one will know. Tor-Weather aims at solving this by creating a notification service which relay operators can subscribe to in order to get various types of updates for their relays. The tor-weather service will offer a plethora of notifications options for the relays. These include, the node being down, running on EOL/Outdated version, losing a flag, ranking in top 20/50/100, etc. These notifications can be subscribed & customized by the relay operators to fit their needs using a web-frontend. Folks interested in the project can refer this <https://lists.torproject.org/pipermail/tor-dev/2022-May/014734.html> thread in the tor-dev mailing list for regular updates. Suggestions are always welcomed! Please reach out to us in irc (#tor-dev) for any ideas, questions, or suggestions you might have. Thanks, Sarthik Gupta

4 6

easy way to test my exit policy
by Tom Yates 18 Aug '22

18 Aug '22

i've been grumbled at in a way that makes me want to validate my exit policy before dismissing the grumble. is there any easy way to check that, as a tor client, i can't make an outbound connection from my tor server to a particular port on a particular server? i suppose i'm asking if there's a tor-aware telnet, or equivalent. how do people test their exit policies? -- Tom Yates - https://www.teaparty.net

2 2

tor relay over wifi
by andrew reid 17 Aug '22

17 Aug '22

hi i am running a tor relay on an old phone over wifi. is this a bad idea ?

1 0

Have you experienced DDoS?
by Viktor Nikolov 15 Aug '22

15 Aug '22

Hi! My provider of server housing disconneded today at about 12:00 CET my server running two guard relays because of "very strong attack; top traffic was in tens of GBps and threatened both our internal network infrastructure, as well as the availability of the provided services for other customers; number of network flows according to monitoring was between 3-4M." My normal traffic is max. 600 Mbps and few tens of thousands connections. They will come back to me during the office hours of Monday. :-( Was somebody else also subject to DDoS today? Viktor

3 2

Flags gone after restart
by andrew reid 11 Aug '22

11 Aug '22

Hey there, I am running a tor relay off an old samsung phone. When I first started the relay, my observed bandwidth was around 4.5MB/s. It was running for around 7 days and had the stable and HSdir flag. After a few problems with IP6 and being overloaded (thought this was a problem on my end, not a DDoS attack) I restarted the phone and edited the config file to take away IPv6. It has now been running for 7 days again but my observed bandwidth is only 1.6MB/s now and I still haven't gotten the stable and HSdir flag back. How long would this take or is it just a problem on my end ? and for the bandwidth, my connection is still the same and hasn't changed. Is this just something that takes time to come back like the flags. This is my first relay so I would like to understand a bit more. Thank you

2 1

Refuse Guard flag
by Eldalië 11 Aug '22

11 Aug '22

Hello there. I have been running my (non-exit) relay without issues for some months. Recently I noticed that my ISP started to reset my IP a few hours after the node gets the Guard flag, thus making it lose such a flag (as well as Stable and HSDir). I am not sure if the Guard flag is the real cause, but it is the only condition that is verified always and only right before I get a new IP. Is there a way I can keep my node running with the same settings but preventing it from becoming a guard, to investigate if the flag is the real cause? Thanks, Eldalië -- Eldalië My private key is attached. Please, use it and provide me yours!

3 2

How useful are bridges on ports other than 80 and 443
by Eddie 10 Aug '22

10 Aug '22

Unfortunately I've had to shut down my home based tor relay because my wife's employer is mis-categorising it as an exit node, instead of the middle/guard that it really is. So, until she retires, in a few months, that relay will now be silent after about 5-years running (all of which her having the same employer. Go figure). So, I thought in the meantime I'd run a couple of tor bridges, as my IP should now be clear of any published tor node lists. But I do need to leave ports 80 and 443 open for "normal" HTTP(S) traffic, which I know are the recommended bridge ports as they raise the least suspicion. Are there any other ports that folks might suggest I use that would get enough traffic and not be blocked by a simple firewall. I also run an internal mail server, so all those ports are off limits as well. Cheers.

1 0

Setting a bridge to automatically change IP adresses
by Keifer Bly 10 Aug '22

10 Aug '22

3 3

Overload (dropped ntor) due to DDoS??
by Richard Menedetter 06 Aug '22

06 Aug '22

Hi All I have a non exit relay running on a root server (4 AMD Epyc cores, 8 GB RAM, 2.5 GBit/s Ethernet) I have limited tor to numcpus 2, relaybandwidthburst 15 MB, hardwareaccel 1, maxadvertisedbandwidth 10 MB, maxmeminqueues 3GB Usually it takes less than 1 CPU core, and like 1 GB of RAM. But recently my relay is foten shown as obverloaded. I have these LOG entries: Tor[814]: General overload -> Ntor dropped (290376) fraction 5.3451% is above threshold of 0.5000% Is this due to DDoS attacks or a misconfigration on my side? Is there something that I can do to aleviate this issue? CU, Ricsi

4 5