Difficulties in running a private Tor network
Hi all, I hope this is the right place to ask for help with this problem. I'm working as a research assistant at a university for the summer, and my project requires me to set up a private Tor network. I'm attempting to run 3 dirservers on three different linux/unix machines. Most of the time, the dirservers upload their signatures to one another as they're supposed to, but I still have problems after that. I'll usually get messages like "Received http status code 404 ("Not found") from server 'IP:PORT' while fetching "/tor/status-vote/consensus-signatures.z"" (the 404s IP:PORT are always the same) or "[notice] While fetching directory info, no running dirservers known. Will try again later. (purpose 5)". Two of the dirservers give me messages saying "[warn] Configured authority type does not match authority type in DirServer list. Adjusting. (4 v 6)" when I start them up. I have little idea of what any of these errors mean, and no idea of how to fix them. My torrc files are mostly the same for each server, and I've pasted one below. I hope someone here can help me figure this out. Thanks, Joel TestingTorNetwork 1 DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8 DataDirectory . ORPort 5152 SocksPort 0 Address y.y.y.y DirPort 5150 V3AuthoritativeDirectory 1 AuthoritativeDirectory 1 ContactInfo test@test.test ExitPolicy accept *:* AllowSingleHopExits 1 ExcludeSingleHopRelays 0
On 5/11/11 10:04 PM, joel hobson wrote:
I'm attempting to run 3 dirservers on three different linux/unix machines. Most of the time, the dirservers upload their signatures to one another as they're supposed to, but I still have problems after that. I'll usually get messages like "Received http status code 404 ("Not found") from server 'IP:PORT' while fetching "/tor/status-vote/consensus-signatures.z"" (the 404s IP:PORT are always the same) or "[notice] While fetching directory info, no running dirservers known. Will try again later. (purpose 5)". Two of the dirservers give me messages saying "[warn] Configured authority type does not match authority type in DirServer list. Adjusting. (4 v 6)" when I start them up.
I have little idea of what any of these errors mean, and no idea of how to fix them. My torrc files are mostly the same for each server, and I've pasted one below. I hope someone here can help me figure this out.
TestingTorNetwork 1 DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8
The :5150 part for all three DirServer lines looks wrong. Every directory needs its own Dir port. Maybe assign Dir ports 6151 to 6153 to your directories, both in the DirPort and in the DirServer lines. Best, Karsten
On 15/05/2011 1:45 PM, Karsten Loesing wrote:
On 5/11/11 10:04 PM, joel hobson wrote:
I'm attempting to run 3 dirservers on three different linux/unix machines. Most of the time, the dirservers upload their signatures to one another as they're supposed to, but I still have problems after that. I'll usually get messages like "Received http status code 404 ("Not found") from server 'IP:PORT' while fetching "/tor/status-vote/consensus-signatures.z"" (the 404s IP:PORT are always the same) or "[notice] While fetching directory info, no running dirservers known. Will try again later. (purpose 5)". Two of the dirservers give me messages saying "[warn] Configured authority type does not match authority type in DirServer list. Adjusting. (4 v 6)" when I start them up.
I have little idea of what any of these errors mean, and no idea of how to fix them. My torrc files are mostly the same for each server, and I've pasted one below. I hope someone here can help me figure this out. TestingTorNetwork 1 DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8 The :5150 part for all three DirServer lines looks wrong. Every directory needs its own Dir port. Maybe assign Dir ports 6151 to 6153 to your directories, both in the DirPort and in the DirServer lines.
Best, Karsten _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays Why do they need different Dir ports if they're running on separate machines?
Joel
On Mon, 16 May 2011 08:10:46 -0400 Joel Hobson <hobs2820@mylaurier.ca> wrote:
On 15/05/2011 1:45 PM, Karsten Loesing wrote:
On 5/11/11 10:04 PM, joel hobson wrote:
I'm attempting to run 3 dirservers on three different linux/unix machines. Most of the time, the dirservers upload their signatures to one another as they're supposed to, but I still have problems after that. I'll usually get messages like "Received http status code 404 ("Not found") from server 'IP:PORT' while fetching "/tor/status-vote/consensus-signatures.z"" (the 404s IP:PORT are always the same) or "[notice] While fetching directory info, no running dirservers known. Will try again later. (purpose 5)". Two of the dirservers give me messages saying "[warn] Configured authority type does not match authority type in DirServer list. Adjusting. (4 v 6)" when I start them up.
I have little idea of what any of these errors mean, and no idea of how to fix them. My torrc files are mostly the same for each server, and I've pasted one below. I hope someone here can help me figure this out. TestingTorNetwork 1 DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8 The :5150 part for all three DirServer lines looks wrong. Every directory needs its own Dir port. Maybe assign Dir ports 6151 to 6153 to your directories, both in the DirPort and in the DirServer lines.
Why do they need different Dir ports if they're running on separate machines?
They don't. Try specifying the authorities' types in the DirServer lines. Robert Ransom
On 5/16/11 2:10 PM, Joel Hobson wrote:
On 15/05/2011 1:45 PM, Karsten Loesing wrote:
DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8 The :5150 part for all three DirServer lines looks wrong. Every directory needs its own Dir port. Maybe assign Dir ports 6151 to 6153 to your directories, both in the DirPort and in the DirServer lines.
Why do they need different Dir ports if they're running on separate machines?
Ah, they don't. I was confused by your different OR ports here. In general, I find it easier to run a small private Tor network on a single machine. Best, Karsten
I had a chat with the system administrator today - it looks like my problems were firewall related (oddly, opening just the ports didn't work). Regardless, thanks for the help. Joel On Mon, May 16, 2011 at 8:54 AM, Karsten Loesing <karsten.loesing@gmx.net> wrote:
On 5/16/11 2:10 PM, Joel Hobson wrote:
On 15/05/2011 1:45 PM, Karsten Loesing wrote:
DirServer dir1 v3ident=2D50FCA97045D078CD22E9092C9CF3E300084B87 orport=5151 x.x.x.x:5150 FD65 3AE1 4133 31A9 20DF 8220 1F6F 8DF7 268F F238 DirServer dir2 v3ident=EAC28AB68522174442AA214DC60C625675B2D1E9 orport=5152 y.y.y.y:5150 95B9 79E9 4A37 161C EFCC EE13 E7C5 D7EA EB76 B695 DirServer dir3 v3ident=24BD756B7660827D0507319A87DD16F31250A29C orport=5153 z.z.z.z:5150 23D5 E382 86E6 1118 48E9 C848 2ECE B702 23EA A0E8 The :5150 part for all three DirServer lines looks wrong. Every directory needs its own Dir port. Maybe assign Dir ports 6151 to 6153 to your directories, both in the DirPort and in the DirServer lines.
Why do they need different Dir ports if they're running on separate machines?
Ah, they don't. I was confused by your different OR ports here.
In general, I find it easier to run a small private Tor network on a single machine.
Best, Karsten
participants (4)
-
Joel Hobson -
joel hobson
-
Karsten Loesing -
Robert Ransom