[tor-bugs] #24902 [Core Tor/Tor]: Denial of Service mitigation subsystem

[Tor Bug Tracker & Wiki]

#24902: Denial of Service mitigation subsystem
----------------------------------------------+----------------------------
 Reporter:  dgoulet                           |          Owner:  dgoulet
     Type:  enhancement                       |         Status:
                                              |  needs_review
 Priority:  Medium                            |      Milestone:  Tor:
                                              |  0.3.3.x-final
Component:  Core Tor/Tor                      |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:  ddos, tor-relay, review-group-30  |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+----------------------------

Comment (by dgoulet):

 I've added the relay detection that was discussed with teor. Also, I've
 simplified things a bit after a discussion with asn on IRC about not using
 the circuit delta and circuit timeout value but rather a fixed maximum
 circuit count for which we can compute before in the consensus instead at
 the relay. And as per the discussion as well, I've added a cap of
 concurrent connections used in the circuit threshold equation. See top
 commit.

 New branch name to reflect this ticket: `ticket24902_033_01`
 OnionGit: https://oniongit.eu/dgoulet/tor/merge_requests/15

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24902#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online