I think that a network based to much on remotes VMs, with closed source software running on the most deep machine level, is not very resilient and secure.
So the reason why I was thinking to do so is that I wanted to run a small exit relay on a device running only open source software, like Olimex Lime2 does, and under my direct control.
The latency from my home and the VM is not so high (45-50 ms), and I was pretty sure that with a proper configuration I didn't risk that users exit through my home connection. But If you say that with a so small bandwidth It can't run properly, I trust you, so I keep a non-exit relay.
Anyway thanks for your advices
Il 22/05/19 11:05, nusenu ha scritto:
tor-relay@riseup.net:
I'm running a non exit relay on a debian machine (in the next few months I will switch to *BSD) on a Lime2.
I assume you are referring to a relay run at home.
I'm running an exit relay too on a remote VM.
I would turn my non-exit relay in an exit one, but for obvious reasons, I don't want to run It from my shitty ISP IP. I could give 10-14 mbps from my home connection, so I think that the lime2 would be powerful enough to run It properly.
I would discourage such a setup for the following reasons:
- this setup includes the risk that users will exit
through your home broadband IP address (bad!) if tunnels break down
- such setups that introduce an additional hop decrease the user-experience
- most users will not be happy with an "10-14mbps" exit at a home broadband connection
- it is not clear to me why you would involve your home IP at all for your exit
if you have a VM in a datacenter
nonetheless, thanks for running relays, nusenu
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays