[tor-bugs] #33861 [Applications]: vanguards: circ_max_megabytes applied to all connection

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 9 08:22:34 UTC 2020


#33861: vanguards: circ_max_megabytes applied to all connection
-------------------------+------------------------------
 Reporter:  cypherpunks  |          Owner:  (none)
     Type:  task         |         Status:  new
 Priority:  High         |      Component:  Applications
  Version:               |       Severity:  Normal
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+------------------------------
 {{{
 # This means that applications that require large data submission (eg
 # SecureDrop or onionshare) should set this much higher
 # (or set to 0 to disable):
 circ_max_megabytes = 8
 }}}

 My site is less than 4MB so above config is okay.

 I thought vanguards only applies this limit to:
 1. My onion service <--- Tor user (incoming)
 2. My onion service ---> Tor user (outgoing)


 However your vanguards is breaking other connections such as:
 1. apt with Tor[1]
 2. wget download over Tor to clearnet site
 3. curl POST something over Tor to clearnet site


 Problem 1. I don't want to stop vanguards just for apt and other thing.
 Problem 2. I don't want to increase circ_max value just for this.


 So could you please add a switch to limit only my-onion-site related
 connection and ignore else?

 say,

 {{{
 # If true, vanguards will not apply max_mega limit non-onion connections.
 # If false(default) vanguards will apply max_mega limit to all Tor
 connections.
 # If your circ_max_megabytes is already 0, this settings does nothing.
 circ_max_mega_ignore_clearnet_destination = true
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33861>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list