-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2026-10-13 21:41, Khan Krum via tor-relays wrote:
*forest’s experimental patch:* I noticed that both of my non-exit relays report [DoSStreamCreationEnabled disabled] in their heartbeat logs. Forest, when you tested your patch moving BEGIN_DIR handling behind the existing stream-creation rate limiter, was DoSStreamCreationEnabled actually active on the test relay? Could this explain why the patch appeared to have no effect, or is there another issue with the per-circuit limiting mechanism?
That's strange. I did set "DoSStreamCreationEnabled 1". Could there be another bug elsewhere that's causing that option to be a no-op, even without my patch? On 2026-10-13 15:04, Mzungu via tor-relays wrote:
Was it determined that the attack you describe is general and not specifically aimed at you and all the relays you operate?
Yes, it is part of a wider attack. Only the relays of mine that obtain the HSDir flag are attacked, and I'm not the only person being impacted. On 2026-10-13 10:46, kullikovana via tor-relays wrote:
Im new to this and thinking about giving up. All the stats are f*cked again etc.
A temporary solution is to add "DirCache 0" to your torrc. It will stop further incidents of this particular attack, but your relay will not be a guard, just a middle. Regards, forest -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQtr8ZXhq/o01Qf/pow+TRLM+X4xgUCas68dQAKCRAw+TRLM+X4 xuVcAQD5dcCA7luOSMtxUYt7IvZAoXfUbkIZryVdFkPQk3G1cAEAvmF7YYLgrYnF 2R/wtHOz89zWsAU1toTub8ZvzT1R/wo= =AeIV -----END PGP SIGNATURE-----