[tor-relays] Re: reply to: 5 to 10 times more outgoing than incoming traffic

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello. Tor at 1AEO wrote:

It's directory serving

Is the attack coming from the same few IPs? Would rate-limiting output (with a very generous burst allowance) per-IP be effective here? I assume these different attack patterns are tests from the attacker, and the remaining circuit-building attack is just the one that they have determined is the one that is the most effective? Regards, forest -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQtr8ZXhq/o01Qf/pow+TRLM+X4xgUCamvzOAAKCRAw+TRLM+X4 xrOpAQDnbtTqBiaecljyQqBVcMHE6381JZChZTCkNMnCHwPKJgD/SuId5SdlunMx ASRs/d3prQzO5yVqeITLCTha9tsTNwQ= =9xVG -----END PGP SIGNATURE-----