why the network lost >350 relays and some bridges
As some of you might have noticed the tor network recently lost a noticeable number of relays and bridges as seen in the metrics.tpo relay graphs (0.7% cw fraction). https://metrics.torproject.org/networksize.html https://pbs.twimg.com/media/DwGAESoXgAEoB6L.jpg this occurred when these relays upgraded from tor 0.3.3.10 to 0.3.4.9 (package maintainer update) All these relays were behind NAT devices and they relied on a tor feature that got removed between these two versions:
o Removed features: - The PortForwarding and PortForwardingHelper features have been removed. [...]https://trac.torproject.org/projects/tor/ticket/25409
The portforwarding worked only in about 5% of cases so only 350 of the over 6000 relays actually became reachable. Since I still believe these relays are not run by humans I hope they remain unreachable behind their NAT routers. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
nusenu wrote:
As some of you might have noticed the tor network recently lost a noticeable number of relays and bridges as seen in the metrics.tpo relay graphs (0.7% cw fraction).
https://metrics.torproject.org/networksize.html https://pbs.twimg.com/media/DwGAESoXgAEoB6L.jpg
this occurred when these relays upgraded from tor 0.3.3.10 to 0.3.4.9 (package maintainer update)
All these relays were behind NAT devices and they relied on a tor feature that got removed between these two versions:
o Removed features: - The PortForwarding and PortForwardingHelper features have been removed. [...]https://trac.torproject.org/projects/tor/ticket/25409
The portforwarding worked only in about 5% of cases so only 350 of the over 6000 relays actually became reachable.
Since I still believe these relays are not run by humans I hope they remain unreachable behind their NAT routers.
Agreed, a very good and indicated removal -- those features where quite fragile and looked to users like they working as they should, where actually they worked in a very little percent. Any relay properly run by a human, even behind NAT, can still be easily configured with the proper port forwarding. For some time now Tor is very explicit in such situations, it checks the discovered address vs the address in torrc/descriptor and indicates if there is a mismatch, so the user knows exactly what and where to fix.
this occurred when these relays upgraded from tor 0.3.3.10 to 0.3.4.9 (package maintainer update)
All these relays were behind NAT devices and they relied on a tor feature that got removed between these two versions:
o Removed features: - The PortForwarding and PortForwardingHelper features have been removed. [...]https://trac.torproject.org/projects/tor/ticket/25409
I guess I somehow expected that: the maintainer patched tor 0.3.4.10 to added this feature again and here we go again with the flood of relays using that version of tor: 79 relays from 2019-01-11: | Up | Ext | JoinTime | Nickname | Version | IP | AS | CC | ORp | Dirp | OS | Contact | eFamMembers | FP | |------+-------+------------+------------+-----------+-----------------+------------------------------------------+------+-------+--------+-------+-----------+---------------+------------------------------------------| | 0 | 0 | 01:06:55 | snap269 | 0.3.4.10 | 117.104.229.222 | Instatelecom Limited | af | 43453 | 0 | Linux | None | 1 | CF52FF9F481C618E540D5DACB0C2875F1B7687B5 | | 0 | 0 | 01:27:25 | snap269 | 0.3.4.10 | 90.253.141.146 | Vodafone Limited | gb | 46089 | 0 | Linux | None | 1 | B483C5FE8A2888F8E02885D8488404DBBEFBCF3B | | 0 | 0 | 02:04:06 | snap269 | 0.3.4.10 | 84.109.18.79 | Bezeq International | il | 43663 | 0 | Linux | None | 1 | 4CB2C1DED2C3C0C1A3629C6EB89BEDD063839F3A | | 0 | 0 | 02:04:44 | snap269 | 0.3.4.10 | 24.171.142.150 | Time Warner Cable Internet LLC | us | 35659 | 0 | Linux | None | 1 | 4E323B6D6EEA0134C74311B02139A1899BB42396 | | 1 | 0 | 02:06:28 | snap269 | 0.3.4.10 | 102.251.43.31 | TELKOMMOBILE | za | 37359 | 0 | Linux | None | 1 | 156C88E2AC25EE27A5DE774DF33294A1F0BE9659 | | 0 | 0 | 02:09:26 | snap269 | 0.3.4.10 | 173.72.24.170 | MCI Communications Services, Inc. d/b/a | us | 35413 | 0 | Linux | None | 1 | F06D46106A5508D3904F20E5E316978E1C40C524 | | 1 | 0 | 02:32:49 | snap269 | 0.3.4.10 | 37.14.181.6 | Orange Espagne SA | es | 33927 | 0 | Linux | None | 1 | 01A9601468D4EDB410D8CAFCB6AFF57BDCECCC79 | | 0 | 0 | 03:32:46 | snap269 | 0.3.4.10 | 46.158.228.64 | Rostelecom | ru | 32945 | 0 | Linux | None | 1 | A1F23D3FAE72CCC04E9A2302E21F4FFA86B004BF | | 0 | 0 | 03:46:57 | snap269 | 0.3.4.10 | 96.58.48.239 | BRIGHT HOUSE NETWORKS, LLC | us | 34779 | 0 | Linux | None | 1 | 75ECA8970059EC52ABDE432296DD379D926B4B9E | | 0 | 0 | 03:59:27 | snap269 | 0.3.4.10 | 167.56.51.66 | Administracion Nacional de Telecomunicac | uy | 43415 | 0 | Linux | None | 1 | FBA355B99ED355440C22CD305C4106CD5EBFBF8D | | 0 | 0 | 03:59:53 | snap269 | 0.3.4.10 | 106.51.69.243 | Atria Convergence Technologies Pvt. Ltd. | in | 35099 | 0 | Linux | None | 1 | F708D88E38D31F47574FA086AFE95D77A0F57D3C | | 1 | 0 | 04:07:21 | snap269 | 0.3.4.10 | 178.149.21.184 | Serbia BroadBand-Srpske Kablovske mreze | rs | 33259 | 0 | Linux | None | 1 | 235658FF31A58ED10A86C5C04EDDD33A0ED3D27C | | 1 | 0 | 04:10:50 | snap269 | 0.3.4.10 | 80.6.137.83 | Virgin Media Limited | gb | 36423 | 0 | Linux | None | 1 | 3DB282CE152AA5C57521B5B24DAE9C9AE4D88F54 | | 0 | 0 | 04:13:10 | snap269 | 0.3.4.10 | 31.34.31.241 | Bouygues Telecom SA | fr | 34075 | 0 | Linux | None | 1 | D923E3AD062307A65F14F6F05E6A9D755376F7F5 | | 1 | 0 | 04:44:56 | snap269 | 0.3.4.10 | 86.213.118.11 | Orange | fr | 45521 | 0 | Linux | None | 1 | E7EC0C654C83E35F41337DB3A8CE2FBAAEA96619 | | 1 | 0 | 04:48:14 | snap269 | 0.3.4.10 | 95.84.154.208 | Rostelecom | ru | 43275 | 0 | Linux | None | 1 | BAD04160018D61F1783BCE20A78619BCABC6409E | | 1 | 0 | 05:05:41 | snap269 | 0.3.4.10 | 71.193.142.132 | Comcast Cable Communications, LLC | us | 38941 | 0 | Linux | None | 1 | 6FF713C117BBA89221BA58B2D7925DBA12BAAAE9 | | 1 | 0 | 05:33:27 | snap269 | 0.3.4.10 | 73.70.172.19 | Comcast Cable Communications, LLC | us | 41517 | 0 | Linux | None | 1 | EBF57F6D4EBA3EDA564461E07BB117E459AA89F7 | | 0 | 0 | 05:47:50 | snap269 | 0.3.4.10 | 209.78.15.154 | AT&T Corp. | us | 42487 | 0 | Linux | None | 1 | E5A51629041C5B92F9379245909E9573BD133BE4 | | 1 | 0 | 05:57:15 | snap269 | 0.3.4.10 | 65.130.61.137 | CenturyLink Communications, LLC | us | 42923 | 0 | Linux | None | 1 | E7C6F5D796B1CFC79028DF01DAD9CAFD0BF56347 | | 1 | 0 | 06:10:32 | snap269 | 0.3.4.10 | 88.174.80.195 | Free SAS | fr | 33841 | 0 | Linux | None | 1 | 607147525CC2DF26B185E88FD65B9DEF40EBC005 | | 1 | 0 | 06:26:56 | snap269 | 0.3.4.10 | 95.73.77.39 | Rostelecom | ru | 41435 | 0 | Linux | None | 1 | 9017D52158D183CC9E9E4A81C8BE3512F0EE7347 | | 0 | 0 | 06:27:37 | snap269 | 0.3.4.10 | 172.73.205.110 | Time Warner Cable Internet LLC | us | 43425 | 0 | Linux | None | 1 | 8AA78CE51B722C19D683C79D3E945F4044F01A9A | | 1 | 0 | 06:29:08 | snap269 | 0.3.4.10 | 90.255.48.210 | Vodafone Limited | gb | 36351 | 0 | Linux | None | 1 | 01A50452FFC69D41C18C8EFE1FCEFA495E721097 | | 0 | 0 | 07:05:24 | snap269 | 0.3.4.10 | 125.62.96.245 | Quadrant Televentures Limited | in | 39831 | 0 | Linux | None | 1 | CCB757FF2505217A80EF53DA50652BC4BB962958 | | 0 | 0 | 07:13:02 | snap269 | 0.3.4.10 | 82.193.105.199 | PJSC Industrial Media Network | ua | 43289 | 0 | Linux | None | 1 | BA894CF031FEE48FF607D0320F6CF3B8468BBC5F | | 1 | 0 | 08:12:47 | snap269 | 0.3.4.10 | 86.80.34.108 | KPN B.V. | nl | 38313 | 0 | Linux | None | 1 | 910F4CE167A4DAA6C4B18BC21D08D08DC11F5DAC | | 0 | 0 | 08:25:42 | snap269 | 0.3.4.10 | 109.199.76.120 | Asta-net S.A. | pl | 45727 | 0 | Linux | None | 1 | EC9D629C3D99FE998EC534740D1F25A96122328A | | 0 | 0 | 08:27:20 | snap269 | 0.3.4.10 | 79.118.156.221 | RCS & RDS | ro | 33477 | 0 | Linux | None | 1 | 8C0D9487A235B3D41C69D90E2AA1C2A1F52FB577 | | 1 | 0 | 08:29:30 | snap269 | 0.3.4.10 | 199.188.66.50 | ImOn Communications, LLC | us | 46757 | 0 | Linux | None | 1 | 82E88061F7CD48D25153BE8EBAAD5D792962EF6B | | 0 | 0 | 08:57:31 | snap269 | 0.3.4.10 | 83.205.216.204 | Orange | fr | 41935 | 0 | Linux | None | 1 | B21DABF8F133B4DBF616F6263727DD760BAED94F | | 0 | 0 | 09:00:57 | snap269 | 0.3.4.10 | 74.78.40.144 | Time Warner Cable Internet LLC | us | 35357 | 0 | Linux | None | 1 | 28A6A4B11CF29C03CA354C396F4A26647DBB422B | | 0 | 0 | 09:07:06 | snap269 | 0.3.4.10 | 76.178.23.156 | Oceanic Internet | us | 41131 | 0 | Linux | None | 1 | 618F34F4B3A421F801F80DE8859E8E9D85C604F5 | | 0 | 0 | 09:14:44 | snap269 | 0.3.4.10 | 178.140.107.17 | Rostelecom | ru | 42135 | 0 | Linux | None | 1 | D0843B28910344D32673177AFC83CEC60F63A60E | | 1 | 0 | 09:26:48 | snap269 | 0.3.4.10 | 176.207.47.42 | Wind Telecomunicazioni SpA | it | 36741 | 0 | Linux | None | 1 | 92E0798CA43C6A0A8D44643DDB57C22A68C6C06F | | 1 | 0 | 10:10:59 | snap269 | 0.3.4.10 | 47.184.147.216 | Frontier Communications of America, Inc. | us | 41399 | 0 | Linux | None | 1 | 8BEF59D13BD80CB6B5E1CD43C0D0A451910A67D5 | | 0 | 0 | 10:13:00 | snap269 | 0.3.4.10 | 87.219.151.33 | Orange Espagne SA | es | 37599 | 0 | Linux | None | 1 | 81BA9A7796ED6309DEC3499B072905D0469514F9 | | 0 | 0 | 10:33:56 | snap269 | 0.3.4.10 | 191.178.169.80 | CLARO S.A. | br | 39363 | 0 | Linux | None | 1 | 96D1E2EF9B089B3F4037CE3229A2D69148484825 | | 0 | 0 | 10:38:59 | snap269 | 0.3.4.10 | 82.227.216.129 | Free SAS | fr | 36317 | 0 | Linux | None | 1 | D97D3DDCDD36F06D8CE8799903C9FD28A805C36F | | 1 | 0 | 10:55:19 | snap269 | 0.3.4.10 | 76.67.91.179 | Bell Canada | ca | 41451 | 0 | Linux | None | 1 | 7BDAE735F4F8F771361DB912994F6E7A6FE28BB6 | | 1 | 0 | 11:17:57 | snap269 | 0.3.4.10 | 5.55.60.243 | Vodafone-panafon Hellenic Telecommunicat | gr | 37399 | 0 | Linux | None | 1 | F2A0B0412A5CCAA74C310E0BDE5A681D0CDB4745 | | 0 | 0 | 11:19:59 | snap269 | 0.3.4.10 | 109.230.192.42 | Pars Online PJS | ir | 45891 | 0 | Linux | None | 1 | C47670C4F2CEE914039A241CCE388087C4C75197 | | 0 | 0 | 11:32:48 | snap269 | 0.3.4.10 | 109.14.185.20 | SFR SA | fr | 35237 | 0 | Linux | None | 1 | AB27C4D1B52819D5BEFBA9F1338E766C5D247217 | | 0 | 0 | 12:19:36 | snap269 | 0.3.4.10 | 2.222.117.216 | Sky UK Limited | gb | 36291 | 0 | Linux | None | 1 | B83B9B3D098315D0BB0FDA8A452CDB77615D12E9 | | 0 | 0 | 12:28:20 | snap269 | 0.3.4.10 | 94.66.69.120 | OTEnet S.A. | gr | 41839 | 0 | Linux | None | 1 | DFC0D9EAE006205D5EAEA00A3657119BCA583C85 | | 0 | 0 | 12:45:29 | snap269 | 0.3.4.10 | 109.90.227.20 | Liberty Global B.V. | de | 42087 | 0 | Linux | None | 1 | E7D3A414EAC64AE146F02DF90C9C32CB4A3933F7 | | 0 | 0 | 13:13:52 | snap269 | 0.3.4.10 | 81.11.237.119 | Proximus NV | be | 35325 | 0 | Linux | None | 1 | 219D0EC1745EA8C5B93F5C9AF5602646B471FEB6 | | 0 | 0 | 13:37:29 | snap269 | 0.3.4.10 | 37.135.114.61 | Orange Espagne SA | es | 42827 | 0 | Linux | None | 1 | 363C8EC721A6767AA68B318335D1E11531A890C9 | | 0 | 0 | 13:50:09 | snap269 | 0.3.4.10 | 154.124.103.161 | Autonomous System | sn | 33171 | 0 | Linux | None | 1 | ED0B07C311090003BDC2577055C77FC5BDBA680C | | 0 | 0 | 13:57:45 | snap269 | 0.3.4.10 | 95.30.35.107 | PVimpelCom | ru | 36343 | 0 | Linux | None | 1 | C11D12E0B4E522166BC162B146A0036DC90488C4 | | 0 | 0 | 14:01:44 | snap269 | 0.3.4.10 | 83.31.165.111 | Orange Polska Spolka Akcyjna | pl | 34842 | 0 | Linux | None | 1 | A202DA8B0014770EF825F476D67A8E15C26AB976 | | 0 | 0 | 14:28:29 | snap269 | 0.3.4.10 | 94.236.179.104 | Vivacom | bg | 37285 | 0 | Linux | None | 1 | 6D34C625B21024E626F837C21E2879D5A09520F7 | | 0 | 0 | 14:45:50 | snap269 | 0.3.4.10 | 73.166.182.149 | Comcast Cable Communications, LLC | us | 46743 | 0 | Linux | None | 1 | 5EB182CDEE393092CD2B5FA4CF9119B2D5BD9BEB | | 0 | 0 | 14:56:04 | snap269 | 0.3.4.10 | 176.163.145.110 | Bouygues Telecom SA | fr | 38499 | 0 | Linux | None | 1 | 684ED3887C1E3B8780B6251545D41187C87F5A1E | | 0 | 0 | 14:57:49 | snap269 | 0.3.4.10 | 93.4.138.84 | SFR SA | fr | 37842 | 0 | Linux | None | 1 | 3E98B7449778AC2A18862EAFBC0E0562629F4425 | | 0 | 0 | 15:13:00 | snap269 | 0.3.4.10 | 179.159.23.13 | CLARO S.A. | br | 36489 | 0 | Linux | None | 1 | F95A58569241CA8169E57FC62516A307DC3E679B | | 0 | 0 | 16:40:36 | snap269 | 0.3.4.10 | 31.23.140.216 | Rostelecom | ru | 36513 | 0 | Linux | None | 1 | 20A4F142C776405470E1FB7A8AE001E5C68F1E66 | | 1 | 0 | 16:46:10 | snap269 | 0.3.4.10 | 84.117.160.149 | Liberty Global B.V. | ro | 42377 | 0 | Linux | None | 1 | 388827DB7B55749DB790D19E8E693879B4512958 | | 0 | 0 | 16:57:50 | snap269 | 0.3.4.10 | 89.159.12.9 | SFR SA | fr | 34397 | 0 | Linux | None | 1 | E30EE25EC1D8759D148CDACB857B5887AA3D1449 | | 0 | 0 | 17:13:47 | snap269 | 0.3.4.10 | 46.158.50.84 | Rostelecom | ru | 33895 | 0 | Linux | None | 1 | 43C52D5106573B180779BB58EA14E75710BE2D9D | | 1 | 0 | 17:18:38 | snap269 | 0.3.4.10 | 88.127.151.3 | Free SAS | fr | 43287 | 0 | Linux | None | 1 | 858C53F6F4FC87973395389CB45ACB61892CEFFA | | 0 | 0 | 17:27:33 | snap269 | 0.3.4.10 | 151.60.22.154 | Wind Telecomunicazioni SpA | it | 43395 | 0 | Linux | None | 1 | 72144DB24F3CA11CCC857C831FC06278DE0BFD77 | | 0 | 0 | 17:37:38 | snap269 | 0.3.4.10 | 68.8.115.73 | Cox Communications Inc. | us | 43215 | 0 | Linux | None | 1 | 33AF74D88DFDDD86EB32A35D5860379BBCA6D51A | | 0 | 0 | 18:59:12 | snap269 | 0.3.4.10 | 96.227.90.26 | MCI Communications Services, Inc. d/b/a | us | 46479 | 0 | Linux | None | 1 | 65C6E9A4A044ED8D8D2B011371B06CEDB7F8FB5C | | 0 | 0 | 19:27:49 | snap269 | 0.3.4.10 | 79.43.53.254 | Telecom Italia | it | 44881 | 0 | Linux | None | 1 | 6CEE204DCEF2A62EAB8EE056D023F3F3AAE9AB06 | | 0 | 0 | 20:14:50 | snap269 | 0.3.4.10 | 89.178.228.224 | VimpelCom | ru | 44343 | 0 | Linux | None | 1 | D2A762778B62C5B1519A779F0397F39C879426DE | | 0 | 0 | 20:34:50 | snap269 | 0.3.4.10 | 24.232.110.203 | CABLEVISION S.A. | ar | 43685 | 0 | Linux | None | 1 | EE5EA48EB4A5FE62A72CBD89E58BAF984561325C | | 0 | 0 | 20:40:51 | snap269 | 0.3.4.10 | 88.170.120.45 | Free SAS | fr | 34129 | 0 | Linux | None | 1 | 0B28E8F6A62DC9C43EBF28A550327AAB877D946C | | 0 | 0 | 20:41:58 | snap269 | 0.3.4.10 | 177.96.80.171 | TELEF\u00D4NICA BRASIL S.A | br | 41813 | 0 | Linux | None | 1 | 6B7392BA134BECCCD857A97A9D733EA3DFB68968 | | 0 | 0 | 20:49:27 | snap269 | 0.3.4.10 | 95.23.242.175 | Orange Espagne SA | es | 37255 | 0 | Linux | None | 1 | 4A40BE59085ED7630B0DB07F231DC85FE900EF0A | | 1 | 0 | 21:22:18 | snap269 | 0.3.4.10 | 73.100.0.74 | Comcast Cable Communications, LLC | us | 40331 | 0 | Linux | None | 1 | 246D67B391C9FD8AC011D703BFB0C282463095A4 | | 0 | 0 | 21:43:39 | snap269 | 0.3.4.10 | 2.221.208.93 | Sky UK Limited | gb | 45175 | 0 | Linux | None | 1 | ED531C730B762434347C6E293F1D37A37FC8CCAB | | 0 | 0 | 21:58:19 | snap269 | 0.3.4.10 | 78.244.144.200 | Free SAS | fr | 36741 | 0 | Linux | None | 1 | 62681D0F48B2F695E39CC447393708A93FA40FC8 | | 1 | 0 | 22:08:50 | snap269 | 0.3.4.10 | 178.136.96.217 | Private Joint-stock Company farlep-inves | ua | 45031 | 0 | Linux | None | 1 | 9D8611A77F07FAA6EE81DDD074F71EB9D1A1AE85 | | 0 | 0 | 22:09:48 | snap269 | 0.3.4.10 | 197.0.1.184 | TOPNET | tn | 46335 | 0 | Linux | None | 1 | E62410E0EBB171B1020A096F0096DAD87A7A9497 | | 0 | 0 | 22:25:54 | snap269 | 0.3.4.10 | 85.240.120.247 | Servicos De Comunicacoes E Multimedia S. | pt | 43323 | 0 | Linux | None | 1 | 984433431FE96C5DE15AEC3AF20FCEE3862AF717 | | 0 | 0 | 22:46:51 | snap269 | 0.3.4.10 | 151.40.102.85 | Wind Telecomunicazioni SpA | it | 33875 | 0 | Linux | None | 1 | 965FD1582FAF3BD4E3D63E2D20A18EF033D7FB84 | | 1 | 0 | 11:01:45 | snap270 | 0.3.4.10 | 24.255.132.3 | Cox Communications Inc. | us | 45197 | 0 | Linux | None | 1 | 611B759774855823C3CC9FA92D9E79B3CF259D96 | | 1 | 0 | 22:47:18 | snap270 | 0.3.4.10 | 202.150.96.115 | CallPlus Services Limited | nz | 36839 | 0 | Linux | None | 1 | B6555E66FBCAEBFF64F5343031F16DCFF78F55EA | -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
On 1/12/19 9:07 AM, nusenu wrote:
I guess I somehow expected that: the maintainer patched tor 0.3.4.10 to added this feature again and here we go again with the flood of relays using that version of tor:
79 relays from 2019-01-11:
Assuming those relays get a weight of 20 (or zero?) I do wonder if there's a metrics graph (option) showing the number of relays having a significant weight? -- Toralf PGP C4EACDDE 0076E94E
Assuming those relays get a weight of 20 (or zero?) I do wonder if there's a metrics graph (option) showing the number of relays having a significant weight?
their consensus weight is non-zero (they make up ~0.3% of the tor network capacity) https://metrics.torproject.org/rs.html#search/snap2%20running:True -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
participants (3)
-
nusenu -
s7r -
Toralf Förster