Hi all, I'm looking to start an exit node using this:https://learn.adafruit.com/onion-pi/overviewI have 100 Mbps symmetric uncapped internet. What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
On 10/07/2015 03:21 AM, Alex Haesche wrote:
Hi all,
I'm looking to start an exit node using this: https://learn.adafruit.com/onion-pi/overview I have 100 Mbps symmetric uncapped internet.
What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
Hi! Searching Google for "tor exit node" returns the following link https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment There... You have a lot to read. HTH, Miguel
-----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of Miguel Barbosa Gonçalves Sent: Tuesday, October 6, 2015 11:38 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Exit Node with Onion Pi On 10/07/2015 03:21 AM, Alex Haesche wrote:
Hi all,
I'm looking to start an exit node using this: https://learn.adafruit.com/onion-pi/overview I have 100 Mbps symmetric uncapped internet.
What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
Hi! Searching Google for "tor exit node" returns the following link https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment There... You have a lot to read. HTH, Miguel _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays I have 100 Mbps symmetric uncapped internet. You mind sharing the provider? I'm looking for 100 Mb connection myself. Exits take a bit of knowledge and research to run correctly! gm
gm, I live in Grant County, Washington. The public utility district here offers fiber of that speed. On Wednesday, October 7, 2015 12:01 AM, Greg Moss <gmoss82@gmail.com> wrote: -----Original Message----- From: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] On Behalf Of Miguel Barbosa Gonçalves Sent: Tuesday, October 6, 2015 11:38 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Exit Node with Onion Pi On 10/07/2015 03:21 AM, Alex Haesche wrote:
Hi all,
I'm looking to start an exit node using this: https://learn.adafruit.com/onion-pi/overview I have 100 Mbps symmetric uncapped internet.
What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
Hi! Searching Google for "tor exit node" returns the following link https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment There... You have a lot to read. HTH, Miguel _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays I have 100 Mbps symmetric uncapped internet. You mind sharing the provider? I'm looking for 100 Mb connection myself. Exits take a bit of knowledge and research to run correctly! gm _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Dear Alex, On Wed, Oct 07, 2015 at 02:21:06AM +0000, Alex Haesche wrote:
I'm looking to start an exit node using this:https://learn.adafruit.com/onion-pi/overview
Do you realize that the instructions you refer to are for a wireless access point with a built-in Tor proxy rather than for a Tor relay? This wireless access point provides a way for users of its wifi network to use the Tor network without having to install any software on their devices. Which is nice, but note that a more secure solution would be to use the Tor Browser Bundle (for desktop computers) or ORbot (for Android handheld computers) because these programs take great care not to leak information that would identify its users.
I have 100 Mbps symmetric uncapped internet. What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
A Raspberry Pi (from version 2) is a good choice for running a middle relay at home. However, I would recommend against using it as an exit relay for two reasons: 1) The Pi is not very efficient when it comes to handling network traffic. You may not be able to utilize your full bandwidth. 2) For legal reasons, it is better to run Tor exits in data centers instead of your home. Misguided police might confiscate all electronic devices and storage media they find at your home. Cheers, Christian -- Digitalcourage e.V., Marktstr. 18, D-33602 Bielefeld, Germany Tel: +49-521-1639 1639 | Fax: +49-521-61172 https://digitalcourage.de | https://bigbrotherawards.de
On 10/07/2015 04:21 AM, Alex Haesche wrote:
I'm looking to start an exit node using this: https://learn.adafruit.com/onion-pi/overview I have 100 Mbps symmetric uncapped internet.
What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
Nice line! Thank you for thinking about running an exit! Your ISP might not be excited about an exit relay on their network. I've heard that some people had success with smaller local ISPs, but with larger ISPs it can be difficult. Maybe it's best to start with a relay that only permits a handful of ports, and see how it goes. There's a lot more info at https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines An Raspberry Pi is not powerful enough to saturate a 100mbit link. Depending on the model, if I remember correctly, you will not be able to make more than 10mbit per direction. Someone should start a wiki page that compares different hardware platforms. I hear good things about Odroid, Olinuxino and PCEngines APU. -- Moritz Bartl https://www.torservers.net/
The common theme seems to be "don't do it." This is a little disappointing because I want to contribute somehow. Would you guys suggest running a bridge/relay instead, or just not helping out in terms of bandwidth contribution? On Wednesday, October 7, 2015 6:59 AM, Moritz Bartl <moritz@torservers.net> wrote: On 10/07/2015 04:21 AM, Alex Haesche wrote:
I'm looking to start an exit node using this: https://learn.adafruit.com/onion-pi/overview I have 100 Mbps symmetric uncapped internet.
What do I need to do to prepare and run an exit node? What can you tell me so I can run this well?
Nice line! Thank you for thinking about running an exit! Your ISP might not be excited about an exit relay on their network. I've heard that some people had success with smaller local ISPs, but with larger ISPs it can be difficult. Maybe it's best to start with a relay that only permits a handful of ports, and see how it goes. There's a lot more info at https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines An Raspberry Pi is not powerful enough to saturate a 100mbit link. Depending on the model, if I remember correctly, you will not be able to make more than 10mbit per direction. Someone should start a wiki page that compares different hardware platforms. I hear good things about Odroid, Olinuxino and PCEngines APU. -- Moritz Bartl https://www.torservers.net/ _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 8 Oct 2015, at 23:50, Alex Haesche <cayden_109@yahoo.com> wrote:
The common theme seems to be "don't do it." This is a little disappointing because I want to contribute somehow.
I’d say: "do it, but be aware of the likely range of outcomes”: * home relays may attract police attendance in certain jurisdictions * small devices may not be able to transfer traffic at 100Mbps
Would you guys suggest running a bridge/relay instead, or just not helping out in terms of bandwidth contribution?
If your greatest concern is the police, run a bridge or non-exit relay; or run it out of a data centre; or explain Tor to them in advance. If your greatest concern is saturating your link, try it with the device you have, then upgrade if necessary. If neither is a concern, go for it! Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F
Hi Alex, In addition to potential attention from law enforcement agencies, keep in mind that running a Tor exit from your home connection (assuming you aren't able to get a second dedicated IP for the relay) is likely to significantly impact your regular Internet use. Some service providers either block exit relays or make people connecting from an exit IP jump through additional hoops (e.g., Cloudflare). You've probably noticed some of these issues when browsing with Tor - browsing from the same IP as an exit relay will be pretty similar (apart from speed, naturally).
Would you guys suggest running a bridge/relay instead, or just not helping out in terms of bandwidth contribution?
Running a bridge or non-exit relay from a home connection is fine - I haven't done it myself, but others on the list do. Regarding throughput on a Raspberry Pi: as others have said, the Pi won't saturate a 100Mb connection. If you're just after something that's cheap and Pi-sized, you'd probably have better luck with something like the ODROID C1[0]; you still may not saturate the link though. Regards, Sharif [0] http://www.hardkernel.com/main/products/prdt_info.php?g_code=G143703355573 -- OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57
If you're just after something that's cheap and Pi-sized, you'd probably have better luck with something like the ODROID C1[0]; you still may not saturate the link though.
From experience, an ODROID box won't help too much. It just doesn't have enough CPU.
For a little over $100 (USD), you can get a tiny box with an Intel chip, with a gigabit ethernet interface, like this one: http://www.newegg.com/Product/Product.aspx?Item=N82E16856501007 It's more straightforward to run standard Linux distributions on this hardware. The Raspberry Pi and ODROID are using ARM or Exynos chipsets; distribution choices are limited and security updates often lag behind. This particular Intel chip doesn't have AES-NI, but I'm running a relay on one of these boxes that averages about 40 Mb/s, and has no problem spiking up to 80 to 120 Mb/s when the load from Tor is higher. If you want a box with AES-NI and a gigabit ethernet interface, cost starts jumping up to several hundred US dollars or more, so I find the lack of AES-NI to be an acceptable compromise for the value.
participants (9)
-
Alex Haesche -
Christian Pietsch -
Green Dream -
Greg Moss -
I -
Miguel Barbosa Gonçalves -
Moritz Bartl -
Sharif Olorin -
Tim Wilson-Brown - teor