Re: [tor-relays] Help with new relay

2020-12-22 Thread lists

On 21.12.2020 08:31, Thomas wrote:


It works fine when I run it as sudo, but according to its output, it
"isn't a good idea, nor should it be necessary." So my first question
is: How do I go about getting Nyx to connect to Tor's control socket
as a standard, non-sudo process?


That will be FAQ in this list ;-)
You have to add yourself to the Tor user 'debian-tor' group.
(_tor-00, _tor-01,... if you set up several instances. see below)

adduser user_name group_name
or
usermod -aG user_name group_name

usermod -aG debian-tor user



My second question revolves around running the Tor daemon as a
service. It seems as if, again, I need to run it as root to make it
work, otherwise it gives me permission denied errors. What I want is
to be able to run 2 consecutive nodes on different accounts; that way
I can be more safe and secure while running my relay. If that's able
to happen, how would I go about configuring my relay daemons to be
separate, i.e. where would I put my torrc?


Create 2 or more Tor instances:
~$ apt install tor-instances
installs a helper script on a Debian or Ubuntu system. On other 
distributions you have to do all of this by hand what this script does!


~$ systemctl stop tor

~$ tor-instance-create 00
~$ tor-instance-create 01
~$ ...
~$ systemctl enable tor@00
~$ systemctl enable tor@01
~$ ...
~$ systemctl mask tor@default

~$ nano /etc/tor/instances/00/torrc
~$ nano /etc/tor/instances/01/torrc
~$ ...

~$ systemctl start tor@00
~$ systemctl start tor@01
...

To see if the tor daemon is running:
systemctl status _tor@00
systemctl status _tor@01
or '~$ journalctl -xe' to see if everything is ok

I wrote it a little more in detail in the PIVX forum. Ignore the PIVX 
stuff:

https://forum.pivx.org/threads/howto-setup-masternode-or-staker-wallet-behind-tor.588/

--
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


[tor-relays] Help with new relay

2020-12-22 Thread Thomas
Hi all! I'm a fairly new relay operator and I have a few questions 
regarding some of the nitty-gritty setup on Debian. I've set it up a 
couple times before, but I can't seem to be able to run my relay as 
non-root.


Every time I boot up Nyx without using sudo, it says
We were unable to read tor's authentication cookie...

  Path: /run/tor/control.authcookie
  Issue: Authentication failed: unable to read 
'/run/tor/control.authcookie' ([Errno 13] Permission denied: 
'/run/tor/control.authcookie')


It works fine when I run it as sudo, but according to its output, it 
"isn't a good idea, nor should it be necessary." So my first question 
is: How do I go about getting Nyx to connect to Tor's control socket as 
a standard, non-sudo process?


My second question revolves around running the Tor daemon as a service. 
It seems as if, again, I need to run it as root to make it work, 
otherwise it gives me permission denied errors. What I want is to be 
able to run 2 consecutive nodes on different accounts; that way I can be 
more safe and secure while running my relay. If that's able to happen, 
how would I go about configuring my relay daemons to be separate, i.e. 
where would I put my torrc? Any help would be much appreciated. Thanks!


Thomas

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Question: RAM requirement for an exit relay

2020-12-22 Thread mick
On Mon, 21 Dec 2020 00:15:49 +0100
li...@for-privacy.net allegedly wrote:

> On 18.12.2020 17:33, mick wrote:
> 
> > So - you can get a twin core VPS with 2 Gig of RAM and 3500 gig of
> > traffic allowance for less than $20.00 for a /year/. Spend a little 
> > more
> > and you can get 8 gig of traffic.  
> 
> 3500 GB = 1750 GB for a Tor relay. Can be gone in 1-3 days. ;-)
> Traffic is always counted sum in + out
> You may have more fun on a bridge. If you run a relay first, don't
> use the IP later for a bridge!
> 
> 20-30 MiB/s Tor Relay consumes about 40-50 TB of traffic per month a
> few weeks after the 14-day ramp-up phase.:-(
> That is why I am suspicious of some of the 50-90 MiB/s unnamed relays 
> without contact.
> https://metrics.torproject.org/rs.html#search/unnamed%20type:relay%20
> 
> 
> VPN or root server with 20-40 MiB/s unlimited traffic is available
> for EUR 15-30,-/month.

Sure you can get relays with higher traffic allowances, but those tend
to be on ASs which /already/ have high concentrations of Tor relays.
This is not good for diversity. For example, I can (and do) get 20TB of
traffic allowance on my Hetzner relay
(https://metrics.torproject.org/rs.html#details/AE4FAE2EB5DC5D078458F0FCBF2B37F5D73F0868)
but Hetzner already has nearly 450 relays on AS24940 whereas the
Racknerd relay is on Colocrossings's AS36352 which only has 21 relays. 

The OP was considering running a relay at the end of a domestic ADSL
line which is not a good idea. Other respondents suggesting renting a
cheap VPS - I agreed and simply pointed to a (currently very cheap)
alternative. There is a danger that any new Tor relay operator will
pick a supplier which is already over represented. We should attempt to
avoid that if we can.

Tor can be (and in my case is) throttled so that you do not exceed the
ISP's allowance but still provide useable extra bandwidth.

Mick 


-
 Mick Morgan
 gpg fingerprint: FC23 3338 F664 5E66 876B  72C0 0A1F E60B 5BAD D312
 https://baldric.net/about-trivia
-

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays