[tor-relays] avoiding frequent MyFamily syncing on a dynamic Tor instance group

[Robert Ransom]

On Thu, 07 Apr 2011 01:36:55 +0200
tagnaq <tagnaq at gmail.com> wrote:

> I don't know if this is already done but it just came into my mind when
> writing something to sync MyFamily settings throughout multiple nodes:
> 
> To avoid frequent reloads of many Tor instances, one could pre-emptively
> create keys (lets say keys for 30 nodes) and build a MyFamily set for it.
> As you add nodes use this MyFamily set although not all 30 keys are in
> use yet. This way one would not have to touch running instances when
> adding new ones.
> 
> From a security point of view this is probably quite a bad thing, but
> does someone already do that?

If you handle the secret keys sensibly, it won't harm security, but the
extra (not-yet-in-use) MyFamily entries will take up more space in your
relay descriptor than necessary, and thus use more of the Tor network's
bandwidth than necessary.


Robert Ransom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20110406/1c3a800d/attachment.pgp>