Running tor 0.3.3.3
Mar 15 19:00:44.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:00:48.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:01:17.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:03:01.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:03:52.000 [warn] eventdns: All nameservers have failed Mar 15 19:03:52.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:04:01.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:01.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:08.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:09.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:10.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:10.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:04:16.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:16.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:35.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:35.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:04:49.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:05:16.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:06:05.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:06:11.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:06.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:34.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:47.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:07:56.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:08:04.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:08:12.000 [warn] eventdns: All nameservers have failed Mar 15 19:08:12.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back upMar 15 19:09:05.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:09:15.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:10:21.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:10:59.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:11:16.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:11:42.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:12:31.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:03.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:24.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:13:30.000 [notice] Heartbeat: Tor's uptime is 5 days 17:59 hours, with 2819 circuits open. I've sent 621.50 GB and received 636.02 GB.Mar 15 19:13:30.000 [notice] Circuit handshake stats since last time: 19393/19393 TAP, 119870/119870 NTor.Mar 15 19:13:30.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 110064 v4 connections; and received 35 v1 connections, 187 v2 connections, 949 v3 connections, and 621316 v4 connections. Mar 15 19:13:30.000 [notice] DoS mitigation since startup: 0 circuits rejected, 0 marked addresses. 0 connections closed. 64 single hop clients refused.Mar 15 19:13:44.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:14:02.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:14:21.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendezvous (pending)Mar 15 19:15:29.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:30.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:15:37.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:37.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up
Best regards, Robin
robink:
Mar 15 19:15:30.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:15:37.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:37.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up
thanks for running an exit relay, please use a non-google DNS resolver if you can. Ideally you would run a local resolver like unbound to improve performance/latency/(privacy).
I have changed to a non-google DNS. I will look into running a local resolver/unbound.
BTW, the "eventdns: All nameservers have failed.." and then quickly "...is back up" error has been with around for a long time, also when I was running tor stable.
kind regards, Robin
----- Original message ----- From: nusenu nusenu-lists@riseup.net To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] DoS statistics from EA4366BCDCA6167B8CFF70E41D8CD1EE9968E445 Date: Thu, 15 Mar 2018 21:53:00 +0000
robink:
Mar 15 19:15:30.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back upMar 15 19:15:37.000 [warn] eventdns: All nameservers have failed Mar 15 19:15:37.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up
thanks for running an exit relay, please use a non-google DNS resolver if you can. Ideally you would run a local resolver like unbound to improve performance/latency/(privacy).
On 03/15/2018 10:02 PM, robink wrote:
Mar 15 19:03:52.000 [warn] eventdns: All nameservers have failed Mar 15 19:03:52.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up Mar 15 19:04:01.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:01.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:08.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:09.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:10.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:10.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up Mar 15 19:04:16.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:16.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:35.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:35.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up
Interesting, with nyx I can see similar messages here using dnsmasq as a DNS cache.
On 3/15/18 23:38, Toralf Förster wrote:
On 03/15/2018 10:02 PM, robink wrote:
Mar 15 19:03:52.000 [warn] eventdns: All nameservers have failed Mar 15 19:03:52.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up Mar 15 19:04:01.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:01.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:08.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:09.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:10.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:10.000 [notice] eventdns: Nameserver 8.8.4.4:53 is back up Mar 15 19:04:16.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:16.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up Mar 15 19:04:35.000 [warn] eventdns: All nameservers have failed Mar 15 19:04:35.000 [notice] eventdns: Nameserver 8.8.8.8:53 is back up
Interesting, with nyx I can see similar messages here using dnsmasq as a DNS cache.
Not that anyone was doing so, but I would not immediately assume that these nameserver warns/notices are at all related to the DoS (that now seems to be over). I've seen those on my fast relays for ... ever (the last year).
Matt
tor-relays@lists.torproject.org