- tor-relays - lists.torproject.org

running first Relay, low budget VPS on a Gigabit line
by tim 12 Jun '12

12 Jun '12

Hi, I have installed my first Tor-Relay on a low priced test VPS (1 BTC/m) hosted in NL some days ago. Today iftop shows the VPS puts 35 MByte/s in both directions through the line. *Phew* The hosting plan includes 50GB per month so I'm a bit over the fair use. What would you do? Let it run? throttle down? do no harm? Other than expected I only got a short mail with ssh login from them. The answer to my question if customers get some kind of admin-panel was: no, this would be higher security risk. contact us we do it in 2 hours. Any suggestions how to measure the traffic would be appreciated, must be roughly 12 TB the last 2 days. -- http://www.fastmail.fm - Accessible with your email software or over the web

4 4

ARM 1.4.5 has a very high cpu consumption
by tor-admin 10 Jun '12

10 Jun '12

Hi, today I updated arm from 1.4.4.1 to 1.4.5. After this update I noticed that the arm display is very unresponsive. The arm cpu jumps ever couple of seconds up to 90-100 %. If this happens arm does not update its display. This can be observed on all pages. I monitor two high capacity nodes with each about around 10K concurrent connections. With 1.4.4.1 the arm cpu was normally below 5 %. The tor server runs debian squeeze with python 2.6.6. Is this a known issue? Any options other that downgrading back to 1.4.4.1? Regards, Klaus

2 2

rpm init script not setting ulimit properly
by Aaron Hopkins 06 Jun '12

06 Jun '12

I noticed my exit node (tordienet) hovering around 1024 connections open, and checked /proc/<pid>/limits (available on newer kernels) and noticed that the filedescriptor ulimit was at the default 1024, which is likely not a great plan. I'm using the stock /etc/init.d/tor startup script that came in the tor-0.2.3.12.alpha-tor.0.rh5_7 RPM offered by the YUM repo http://deb.torproject.org/torproject.org/rpm/centos5-experimental. It attempts to set ulimit, but at least at startup on my Centos 5.8 openvz container, there's a soft limit set at 1024 filedescriptors, which requires the -S flag to ulimit to override. I changed line 87 of /etc/init.d/tor to: if ulimit -SHn "$MAX_FILEDESCRIPTORS" ; then And /proc/<pid>/limits shows tor running with the appropriate limits now. Unfortunately, this is likely to get reverted with the next package update. Is anyone else using the stock RPMs seeing the same behavior? -- Aaron

1 0

case law on for exit nodes
by Rejo Zenger 28 May '12

28 May '12

Hi, Who knows about cases where the owner of Tor exit node was prosecuted or taken to court for information that was up- or downloaded using his/her Tor node? Basically, I'm looking for case law on running Tor exit-nodes. I am especially interested in case law from countries in Europe, but other examples are most welcome as well. If there is an interesting set of verdicts, I'll compile a summary and I'll share it with this list. Thanks for your help! -- Rejo Zenger . <rejo(a)zenger.nl> . 0x21DBEFD4 . <https://rejo.zenger.nl> GPG encrypted e-mail preferred . +31.6.39642738 . @rejozenger

13 25

Re: [tor-relays] tuning MaxAdvertisedBandwidth for CPU
by Scott Bennett 27 May '12

27 May '12

On Thu, 24 May 2012 13:13:56 -0400 micah anderson <micah(a)riseup.net> wrote: >i've got an exit node that is doing a fair bit of bandwidth, but I think it is CPU bound at this point because I am >getting these: > >Your computer is too slow to handle this many circuit creation requests! Please consider using the >MaxAdvertisedBandwidth config option > >i'm wondering what I should set the MaxAdvertisedBandwidth to if I am averaging this type of traffic: >http://torstatus.blutmagie.de/router_detail.php?FP=131b60b9afe6aea60042132d… > >it seems from the graphs, there are some clear plateaus at around >5100000, but I figured that folks here might have some suggestions that >are better than just setting MaxAdvertisedBandwidth just to that number Before you mess around with MaxAdvertisedBandwidth, which really doesn't work as advertised in the man page, try just adding this to your torrc file: MaxOnionsPending 250 That should take care of the occasional moments when the onion skin queue overflows. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

New contact info for guard node Austrina
by Samuel Whited 26 May '12

26 May '12

Dear relay operators / users: I operate the guard node Austrina (fp: CA54 C9F2 AA56 FE26 D7A1 6F26 93F6 5385 E85E 2D75) and have recently updated my public key. Any sensitive communications should now use public key 0xEC2C9934 (fp: F259 8DED 56ED E408 FD41 484B FB39 BCF7 EC2C 9934) available from pgp.mit.edu. Please update your keystores, and verify that the new key is cross-signed with the old one (0x0DBB515F). Verification can also be performed via DNS — `dig +short sam._pka.samwhited.com TXT` should give the same fingerprint as above and provide an alternate download location. Contact info on the node should update shortly. Thanks, Sam -- Sam Whited pub 4096R/EC2C9934 SamWhited.com sam(a)samwhited.com 404.492.6008

1 0

tuning MaxAdvertisedBandwidth for CPU
by micah anderson 26 May '12

26 May '12

i've got an exit node that is doing a fair bit of bandwidth, but I think it is CPU bound at this point because I am getting these: Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option i'm wondering what I should set the MaxAdvertisedBandwidth to if I am averaging this type of traffic: http://torstatus.blutmagie.de/router_detail.php?FP=131b60b9afe6aea60042132d… it seems from the graphs, there are some clear plateaus at around 5100000, but I figured that folks here might have some suggestions that are better than just setting MaxAdvertisedBandwidth just to that number thanks! micah --

3 3

too many abuse reports
by mick 23 May '12

23 May '12

Hi I have today, reluctantly, switched my node torofotheworld.aibohphobia.org from an exit node to relay only. My ISP has stayed faithful over several abuse reports in the past, but this week following two more in quick sucession (from brazilian government services by the look of it) they have asked that I shut down the exit policy. Rather than lose the node entirely, I have agreed. Some bozo has been using sqlmap to scan servers through tor. Mick --------------------------------------------------------------------- blog: baldric.net fingerprint: E8D2 8882 F7AE DEB7 B2AA 9407 B9EA 82CC 1092 7423 ---------------------------------------------------------------------

10 19

Configuring a Tor relay to *not* accept torrent traffic
by Red Rover 20 May '12

20 May '12

Hi there, :-) I am running a Tor relay on a VPS. How do I configure it to NOT accept torrent traffic? I have just received an abuse report from my hosting company. All the best, Redrover

3 4

reg : closing circuits and corresponding TLS connections when application terminates
by Sambuddho Chakravarty 19 May '12

19 May '12

Hi all I am playing around with an experimental setup of a private Tor network and I am using the control protocol to setup custom circuits. Before establishing the custom circuits on the Tor client , I set the following options: __DisablePredictedCircuits:1 MaxOnionsPending : 1 newcircuitperiod : 999999999 maxcircuitdirtiness : 999999999 CircuitStreamTimeout : 999999999 CircuitIdleTimeout : 999999999 Thereafter, I turn off existing circuits on the client and establish my own circuit using nodes in my private Tor network. Then the client communicates to a server via this circuit. When the client-server communication ends, the circuit closes by itself. Thereafter, in sometime the corresponding OP-OR connections also close. Is there a way to keep the circuit and/or OP-OR connections alive long after the client-server communication has terminated ? Secondly, I don't see all TLS connections corresponding to the requested circuit in all the relays. Eg. I am using thee hosts -- A, B and C for the private network where, A runs two directory authorities and an OR, while B and C run only ORs. The Tor client of my setup establishes circuit through A, B and C using the above configuration parameters. 'getinfo' reports that the requested circuit has been established but I only see TLS connection betwen A and C..is there a reason why this is the case. Also, in my network, C has no exit policies, while A and B have 'reject *:*' exit policies (just to make sure that all TCP connections exit via C). Thanks Sambuddho

1 0