[tor-bugs] #21969 [Core Tor/Tor]: We're missing descriptors for some of our primary entry guards

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu May 18 22:30:20 UTC 2017


#21969: We're missing descriptors for some of our primary entry guards
-----------------------------------+------------------------------------
 Reporter:  asn                    |          Owner:  asn
     Type:  defect                 |         Status:  assigned
 Priority:  High                   |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor           |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  tor-guard, tor-bridge  |  Actual Points:
Parent ID:                         |         Points:  1.5
 Reviewer:                         |        Sponsor:  SponsorU
-----------------------------------+------------------------------------

Comment (by s7r):

 OK getting close.

 So I have manually edited my state file and added a guard I control as
 first primary guard with `confirmed_idx=0`. It was running just fine with
 no complaints. At some point, I have configured in torrc of the guard
 '''PublishServerDescriptor 0''' so that it will stop publishing
 descriptors. The client instance running the debug branch did not complain
 instantly because it had a descriptor that was still valid, and the first
 primary guard while not wanting to publish descriptors any longer was
 still running and accepting connections.

 You can see in the log file that after the descriptor expired, it started
 to panic and never recovered even after ~ 3 consensuses. Also, the cutoff
 did happen, many many complains about not being able to do first hop in a
 rendezvous circuit (bad).

 Here is what the state file says about the primary guard we are talking
 about at the time of the cutoff:
 {{{
 Guard in=default rsa_id=0C2E555864546F1B3DDC4BE71573B8CC5DD898EE
 nickname=AmnesicProsecutor sampled_on=2017-05-13T20:25:19
 sampled_by=0.3.1.0-alpha-dev listed=1 confirmed_on=2017-05-16T01:45:08
 confirmed_idx=0 pb_use_attempts=69.854044 pb_use_successes=69.854044
 pb_circ_attempts=234.410156 pb_circ_successes=231.287109
 pb_successful_circuits_closed=229.161133 pb_collapsed_circuits=2.125977
 pb_timeouts=8.331055
 }}}

 I have also discovered some other things while testing this, not directly
 related, but I'll do a separate ticket so this one won't get to messy to
 follow up.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21969#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list