[tor-relays] DoS mitigation taking hold!

[starlight . 2017q4]

Back to normal!  Check out the final two log entries.

Thank you David Goulet and all the Tor devs!!!


Feb 24 22:45 Tor 0.3.3.2-alpha (...) running on Linux with . . .
.
.
.
Mar  2 21:09 Circuit handshake stats since last time: 247305/247482 TAP, 
4620773/4622133 NTor.
Mar  3 03:09 Circuit handshake stats since last time: 969715/1129528 TAP, 
5195458/5196319 NTor.
Mar  3 09:09 Circuit handshake stats since last time: 1847030/2202846 TAP, 
5027827/5029068 NTor.
Mar  3 13:24 Tor 0.3.3.3-alpha (...) running on Linux with . . .
Mar  3 19:24 Circuit handshake stats since last time: 93572/93573 TAP, 
5009863/5010456 NTor.
Mar  4 01:24 Circuit handshake stats since last time: 169018/262021 TAP, 
4539061/4539069 NTor.
Mar  4 07:24 Circuit handshake stats since last time: 169753/235140 TAP, 
4436073/4436112 NTor.
Mar  4 13:24 Circuit handshake stats since last time: 119517/119547 TAP, 
4040264/4041342 NTor.
Mar  4 19:24 Circuit handshake stats since last time: 1098774/1119662 TAP, 
4087379/4088944 NTor.
Mar  5 01:24 Circuit handshake stats since last time: 223758/267280 TAP, 
3828115/3828568 NTor.
Mar  5 07:24 Circuit handshake stats since last time: 99975/113118 TAP, 
3537541/3537974 NTor.
Mar  5 13:24 Circuit handshake stats since last time: 173710/175951 TAP, 
3792871/3793745 NTor.
Mar  5 19:24 Circuit handshake stats since last time: 657254/747645 TAP, 
3678773/3679332 NTor.
Mar  6 01:24 Circuit handshake stats since last time: 606685/704653 TAP, 
3186116/3186477 NTor.
Mar  6 07:24 Circuit handshake stats since last time: 582036/708742 TAP, 
2043464/2043654 NTor.
Mar  6 13:24 Circuit handshake stats since last time: 54266/54266 TAP, *** 
586327/586328 NTor. ***
Mar  6 19:24 Circuit handshake stats since last time: 122817/122817 TAP, *** 
558229/558231 NTor. ***

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Relay

[Damian Johnson]

> Sorry, I meant to write "connection getinfo".
>
> And I'm not sure that the original reasoning applies: if Stem is getting the
> information from other sources anyway, why don't we just provide it
> through Tor?

Ah! Gotcha. No argument from me.

> Its worth noting that I have seen circuits on arm / nyx as part of reach
> ability tests like this (ref:
> https://trac.torproject.org/projects/tor/ticket/12956):
>
> 76.99.61.63-->  188.138.17.248 (fr)   3.1m (CIRCUIT)
>  │  83.168.200.204 (se)  ParadiseTorRelay1   1 / Guard
>  │  18.181.5.37 (us) VERITAS 2 / Middle
>  └─ 188.138.17.248 (fr)  EuropeCoastDE   3 / Exit
>
> However this is the first time arm has shown me "exit" connections like list
> on first email.

Hi Gary, *this* is the thing Roger was talking about. With Nyx this
should be labeled as 'End' rather than 'Exit' to cut down on the
understandable concern the later term causes. :)
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Relay

[Gary]

Hello,

On 6 March 2018 at 00:06, Damian Johnson  wrote:
>
> > I switched to nyx and it is fine allthough on deeper inspection the IP
> to  is actually my IP so clearly this is a bug.
>
> Hi Gary. Sorry, not sure I follow. Are you saying Nyx (not arm) is
> labeling these as 'Outbound' but still scrubbing the address?


When I switched to nyx the problem was gone - nyx did not list any *exit*
connections.

Before I copied & pasted arm's output (see first email) I changed the IP
address in the first column to the words "IP". It turns out that IP was
mine so there was no point in removing it for security as its already on
Atlas.

On 5 March 2018 at 23:15, Roger Dingledine  wrote:

> I am guessing those are self-reachability tests and self-speed tests
> that your relay does by making circuits back to itself.


Its worth noting that I have seen circuits on arm / nyx as part of reach
ability tests like this (ref:
https://trac.torproject.org/projects/tor/ticket/12956):

76.99.61.63-->  188.138.17.248 (fr)   3.1m
(CIRCUIT)
 │  83.168.200.204 (se)  ParadiseTorRelay1   1 / Guard

 │  18.181.5.37 (us) VERITAS 2 / Middle

 └─ 188.138.17.248 (fr)  EuropeCoastDE   3 / Exit


However this is the first time arm has shown me "exit" connections like
list on first email.

Hope that helps you.

Gary.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays