- tor-relays - lists.torproject.org

Compression bomb from dizum
by Logforme 15 Nov '21

15 Nov '21

Got the following in my log today: Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream. Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (tried Zstandard compressed, on Directory connection (client reading) with 45.66.33.45:80). 45.66.33.45 is tor.dizum.com, a Tor directory authority. False positive or a problem generating directory info at dizum?

3 2

Questions about my tor node
by Bobby 15 Nov '21

15 Nov '21

Hello I'm running a tor node and I paid for a VPS for the express purposes of running that node. I have configured it to use almost all of the bandwidth of the VPS and then to allow bursts to use all of the bandwidth I have also set it to serve directory requests. The server also has 1GB of ram and 1 CPU core. Is this good enough to be helpful in the tor network?

4 3

Re: [tor-relays] Hardware requirements for a fast Tor relay
by failing.flyaway443＠mailer.me 13 Nov '21

13 Nov '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 >Since this is virtualization, make sure that features such as AES >acceleration are active. Yes, I have tested that. Is active. >The number of cores is not really relevant since Tor is not >multi-threaded. The EPYC 7702 can boost up to 3.35 GHz, check that it >reaches that under load. It actually reaches the frequency under load. Unfortunately, the one core is now fully under load. My Relay moved 5TB today, with an average bandwidth of 500Mbit. The average load according to HTOP is now just over 1.0, which is fine for a dual core. However, one core is loaded to 100%. So far, there are no error messages and I achieve a stable 40MB/s with peaks of up to 50MB/s. But my Relay is only a few days old. Advertised Bandwith is currently at just over 30 MiB, but that will change soon. I'm afraid the CPU won't do much more, but with 500Mbit/s I'm among the fastest Relays at this hoster. Directly on page 1. Let's see if I can tune a bit, otherwise I'll just let it run as long as no errors appear. >Also since you have 2 cores, you can run two instances of Tor. Yes, I know. However, the DirAuths then have more work to do because they have to add another Relay to the Consensus. Everything has advantages and disadvantages. Let's see what I do. >> I chose this server because the bandwith is unmetered and it's a >> guaranteed 1GHz link. >I assume you mean 1 Gbit/s. Yes, that was a typo. By the way, can someone explain to me how to reply directly to a reply in a thread without my reply just appearing at the bottom? I'm new to this list and haven't quite figured it out yet. I hope you understand what I mean - I want my replies to be indented correctly. Thanks! Have a great weekend, everyone! -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEElcZnZFMJSyKcTts0q6Mz3/Qy4d0FAmGO/j0ACgkQq6Mz3/Qy 4d395A/+NDRe7IhCbsmgWCUM2Li1XnoN4g3Z091T+U1QPQg7kCvibXXeiHhgs/jP und/63N7FM3OmHi/WUPerK4qfk5lssRU0OPvyAApIzruCTBDj2TuCdpagsfNRQCU QFE162q/cUvwRDyoNHVXxhSk8Bvtwj6Mxw4oE5p6yJFvBgSjT7uHGZgAgHobs/QH zgCKsoEI3H0Wj8kYtxfP9xlhDe1XNidaGIXe5axFlcraw2/f7LXhG7BPJ2XaQHsp CCPFOoLt3Ggpl3AFyIT/UYJ+2e/y+RJXSy71ptew0Xl3MQXv8j5avpo1zmDFXYqV 4SYbjzqmn/5t/O5QPprTBDVr2+SgkjNoFJWFTFK5R7jjqqGvs9fzbAXV6XGOKBeC F6aRs/caQiJ57gAJmYdUW9dQubeIulR0yUlQlwXWWdAPEduLP3B8MxDtEuFOYHWL h+C3I1tlPp+DFE3hfPARW1hX8DGBtA8pH6MKwn6onJh65mWv6f7pmU8LQHbuPPmw w7o7qZHuXxhFSoxPRklISr0BjcLG94DHGWlD2UMyxpU/m3745+JGHhqlTJX+/aeN HHWJ9FN1beI4YHfeUHBgicEx8pywtHK/l6vi5v9rrzko7nbYwG4SayrsgrpXqz6F ifqCNzouxpjVs7MvuTDPIC62mNLED7Zop3tsMwdnyRZJc8Lm3Uo= =Gm4l -----END PGP SIGNATURE-----

1 0

Question about IPv6
by xplato 12 Nov '21

12 Nov '21

Greetings, I have three relays running Hardened BSD hosted at Frantech. They do not offer support for setting up IPv6. I am not sure how to accomplish this and wondered if anyone would have insight into setting this up? I have not found much in the way of instruction. A resource that provides instructions would be much appreciated. Kindly, Dan Sent with [ProtonMail](https://protonmail.com) Secure Email.

4 3

Re: [tor-relays] Tor website
by failing.flyaway443＠mailer.me 12 Nov '21

12 Nov '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi potlatch, is this what you are looking for? https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in https://2019.www.torproject.org/docs/tor-manual.html.en Both links can be found at the bottom of this site: https://support.torproject.org/tbb/tbb-editing-torrc/ I hope this helps... Best regards... 95C6676453094B229C4EDB34ABA333DFF432E1DD -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEElcZnZFMJSyKcTts0q6Mz3/Qy4d0FAmGM5nsACgkQq6Mz3/Qy 4d2QihAAhFAVPRFMdYVokJoRw6kck2kVWO9tJ5/O716UZcCPozHP/ht+RO8GUu5t xF0B3U3tFLtOscnLV8TvhQN0Ngr86IYR3+tD0wxcaiZPj55mD2SMjouxiWdjXHYK fhoGUlw3vM53CeL1QsoCoDcKQHCVMfJZ8NhSA/ME4H9SQl7kkwswmnwwOyOFJ7Wc OM6xTwKddreqkUwWOyCPzaVOj12SjE3gT4LqQjTDYds0c2GWdU4RZUlIFVPA64BD j+p6WJg5wwkgfHA8SNZfAmPg8DYzz+vqbGghnOQbBychugek+bfB4HRn3RgCcxFB s7D50M8jixAOVQDokb7br+xIzN/BxGUfZPD5zgQirjQ/Q2fPx/Xr8EFeYjBlsptI 3k/wqubPGlQpYJkZqrRGQLNVPnQTAwuyWREB/+f6kheoI4Lj84981cRP1XEMh3YB a/L+t84mJaIM8RGi1YoDbhj6Ljmnr57UdOJqev+RnfZjHyxTt1xN6RdsLZxghV8R 9u0MMVNtzhIRci66XUHsREhbm6EzfB/8e1PaX+/TVaX4W/3zprFU9OSoPiBXNYg8 wLeTt3PKFt8bZ6+kmfaM6fDWMiISH5DAGjOtgPU5yoaNlcob2V09DZnWBjE2REPz pebl2NgQad99LK5La5pKkZAawuF/knxfivC0GEj8+0mEAzdPzpk= =tcbs -----END PGP SIGNATURE-----

3 3

Re: [tor-relays] Hardware requirements for a fast Tor relay
by failing.flyaway443＠mailer.me 12 Nov '21

12 Nov '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Thank you for your suggestions, Gary. This is actually not a "real" root server, it's a KVM server (of course). The CPU is an AMD EPYC 7702 with 2 dedicated cores per server@3,35GHz. I chose this server because the bandwith is unmetered and it's a guaranteed 1GHz link. I don't think I will ever be able to relay 125MB/s, but I will try my best. If I can only reach ~50MB/s before the CPU starts to grumble I will set up a second Tor process and a second relay. I tuned my relay a bit today, using some of the tips from this conversation: https://lists.torproject.org/pipermail/tor-relays/2010-August/000164.html It's not really up to date, but still useful to some extent. Unfortunately I had to restart the Tor process, but my relay was already measured a few times and reaches spikes of 30MB/s. CPU usage is no issue at all yet, there is room for more. I can wait before I get the guard flag, this is not a race... Thanks again for your help. All the best. PGP-Fingerorint: 95C6676453094B229C4EDB34ABA333DFF432E1DD -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEElcZnZFMJSyKcTts0q6Mz3/Qy4d0FAmGMbCAACgkQq6Mz3/Qy 4d2bpBAAmQIQ6wvjeBhdL4DxPdL9qlxIqbjPMxpPQWWCqSa3x/t+V3mcEzl/Srz7 5hUVwmYwMprtVA9Zf/MDPCElqbs5MpDrHkJE/rGhfEc6ld/Xu62LLVS7US+/ocTb RCLW1WG8pAQymR9avbyDqTqqTBOinIGlxwmCLXAldEllsxfVnKd4nFzxxEv/Ms/4 JrWvnOjJde46CCFchmjEfUGWVgquU9lsjpHbqVz/+ErUKVAd57BmPNpteiXed8xi RuM6BqB5/blL+CmdVISprisaIPIhqlCW5UEkuNPm5ijlrKrBYTSn4/b8HnMdg5UE ynAkzR5dkxyYee+uI84mgIfFNUzaVBpBq2W5obPqGiocoWQKgT70zVPxzLuguyoG U/Mzxikq4K86aorimSad207BEIVkey76s6jqqgKKI7UoTIYUTmc1xsA1tcgi44Me MelT5gEZ/fcesfPpYB/gkIyOIE+ADuCfnvOqDWAOvfnX9q6U9ek8+aHYSXGIdf9M oKjAKkO8Y/BWBsEHlnyBIrfE48/WtSNlQRj9oKSzyFtQs8wDhgoe3mgcvyHnPTOu Tq7UJUGV3L1LHOW6iEZTMKUsD9t1/NpGLpnTgTXne6bYzyJYL4D5w6IX30EaeaPw 387TB7cTj8Vaaw2bTiM7NlfAEdWqxt2v0qcgzFtTSIhnHLGtnQo= =tlZd -----END PGP SIGNATURE-----

2 1

Tor on cloud VPS
by potlatch 12 Nov '21

12 Nov '21

Hello All, My VPS host recently moved one of my Tor exits to cloud ops (I believe AWS). Since that time the instance will not function as an exit. Torcc and keys are as before. I was operating on Ubuntu 21.04 but reloaded to 20.04. Still the same. I messed with the netplan config to no avail. George brought this to my attention and suggested (and I agree) a DNS problem. I can't find where it's failing--to be honest I don't have much experience with cloud instances or netplan. I am of the opinion that there is a conflict between the cloud hosting and Tor. When I call Nyx I see the strange exit policy: reject [FC00:'string of zeros']/7:*, reject [FE80:'string of zeros off of Nyx page']. Other exits I operate are fine in the cloud. Thanks for any help you can provide. potlatch Sent with [ProtonMail](https://protonmail.com/) Secure Email.

2 1

Re: [tor-relays] Tor website
by failing.flyaway443＠mailer.me 11 Nov '21

11 Nov '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Sorry, it was not my intention to interfere. $man tor I forgot to mention, that works too of course. Or in this case $man torrc. I already run a relay myself, after several "failed" attempts on cheap VPS now on a root server with unlimited traffic and extremely fast connection. This one: https://metrics.torproject.org/rs.html#details/D1F7BEC34A66498FC565BC057632… I had to take the VPS' offline because they could not handle the traffic I would like to relay. Maybe I'll run a much smaller second relay, I'm still thinking about that. As I said, it was not my intention to provide links to outdated ressources. Won't happen again :) All the best... 95C6676453094B229C4EDB34ABA333DFF432E1DD -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEElcZnZFMJSyKcTts0q6Mz3/Qy4d0FAmGNCJkACgkQq6Mz3/Qy 4d1CLA//UtJzIdphbucuqAY5o4P3K+R4pgqooY9bgsOO9G/A1Ra+hVe2d7yBhESH FnoCsuIAKjBJRX30W8AQIh4R6amwhCLRgrdhacfHFtgjksxKavqXQ3bwS7RfnbZ5 R0V2QDSFyulhwsqIvqKF30WE/Ks3niimQS7nPHzgXRxrBV3yUW0ldw6/tNhS8G+T L6QB0/GuVnZlRat285Y2mx5wX8MAxqoowD3YFI8i1HGEf4IZayyXzQxZobaTlFN9 PcGrZUCgw26N6jDknlpc81ZbX1ZKeeFrcQunl3/LXxE225oASQBoasPmHbTpO2QO wOYbqCJ3eptPZq1e4jvzC0MnBG2nVFH7BcJ4/f7TbrvAhZqxEzvQqHNU/r7s/4Le YzJrEhadxUKESO5W7XGMQdaxlY670JolP1yRL7x3Ese8EgtugKM3BZXMr5w1EAby x6erAiuj+36GEuR8IiXB2bqHJ1GeQmXWOh0lSFdJri9SthF8KYC4jlEvHtvib0wJ NsdaBAEQ2DhgiDtCp9HNDAiDeHf6QanFt+1JGEuKno1HMYzky2rxmYonNcoxfXX0 KnqFKKxn7F78RpTXbioWB4/4MqMUZpV0SWl5LUS/v4zY4B26W9gxQ6/FPGq0a8zs Zeei9AK1gMg+NeFSajC1FSVDncbEEFYKqNryEGMPzrD2b5RVSms= =zzGy -----END PGP SIGNATURE-----

1 0

Tor website
by potlatch 11 Nov '21

11 Nov '21

Hello, Does the new Tor web configuration have an overall site map or index page? I can't find the old page with the manual for torrc. I've had trouble finding other information over the past few weeks as well. Thanks, potlatch Sent with ProtonMail Secure Email.

1 0

A Simple Web of Trust for Tor Relay Operator IDs
by nusenu 10 Nov '21

10 Nov '21

Hi, I wrote down a spec for a simple web of trust for relay operator IDs: https://gitlab.torproject.org/nusenu/torspec/-/blob/simple-wot-for-relay-op… This is related to: https://gitlab.torproject.org/tpo/network-health/metrics/relay-search/-/iss… https://lists.torproject.org/pipermail/tor-relays/2020-July/018656.html kind regards, nusenu -- https://nusenu.github.io

5 9