[tor-relays] dnsmasq configuration for an exit relay (Debian)

[Igor Mitrofanov]

>> # Only listen on loopback
>>
>> interface=lo
>> bind-interfaces
>
> What is your opinion about the config line "listen-address=127.0.0.1" advised
> in https://wiki.debian.org/HowTo/dnsmasq#Local_Caching ?

It should have a similar effect, except that 127.0.0.1 is IPv4 only,
while "interface=lo" seems IP version agnostic (I have disabled IPv6
on my relay so I don't know this for sure).

> Interesting. Could you tell approximately what is the average Tor traffic per
> second on your relay ? Maybe I will increase the number of cached entries to
> 100 000.

I am afraid you cannot increase it without recompiling dnsmasq from
source. It has a hardcoded limit of 10k.

I believe that cache efficiency can be tuned with *ttl config
parameters, but it would take considerable time to tune it. I also bet
it depends on the Exit policy of your relay - the more ports you
allow, the more requests will miss the cache.