Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?

On 01/11/2018 02:10 AM, teor wrote:

We allow 2 relays per IPv4 address, and each relay makes 1-2 connections to each other relay. (Or more, if the connections start failing. This is a bug we want to fix.)

So if you're going to do this, please set a much higher limit than 2. I would suggest at least 4, but 10 or more is better.

You might be able to set it higher if you put a limit on repeated connection attempts.

Right - good hint !