Re: [tor-relays] How to reduce tor CPU load on a single bridge?

2022-01-27 Thread David Fifield
> With regard to loadbalanced Snowflake sessions, I'm curious to know what > connections (i.e., inbound, outbound, directory, control, etc) are being > displayed within nyx? I'm not using nyx. I'm just looking at the bandwidth on the network interface. > Your Heartbeat logs continue to appear t

Re: [tor-relays] How to reduce tor CPU load on a single bridge?

2022-01-27 Thread Gary C. New via tor-relays
David, I've been following your progress in the "Add load balancing to bridge (#40095)" issue. > The apparent decrease has to be spurious, since even at the beginning the >bridge was moving more than 10 MB/s in both directions. A couple of hypotheses >about what might be happening: - Onion

Re: [tor-relays] How to reduce tor CPU load on a single bridge?

2022-01-27 Thread Gary C. New via tor-relays
David, > Snowflake sessions are now using the staging bridge, except for those that >started before the change happened and haven't finished yet, and perhaps some >proxies that still have the IP address of the production bridge in their DNS >cache. I am not sure yet what will happen with metric

Re: [tor-relays] wrong iptables rules? / no inbound traffic in nyx

2022-01-27 Thread lists
On Thursday, January 27, 2022 12:13:32 AM CET li...@for-privacy.net wrote: Oh, I forgot something > > > > -A ICMPv6_IN -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT > > > > > > > > > -A ICMPv6_IN -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT > > > > > > > > > -A ICMPv6_IN -p ipv6-icmp -m

Re: [tor-relays] We need bridges with iat-mode set to 1 and especially 2 as well!

2022-01-27 Thread lists
On Tuesday, January 25, 2022 11:29:31 PM CET juckiuscae...@web.de wrote: > Yes is true, but this does not work, I think they use DPI devices and if > obfs4 / underlying Tor signature is detected, a permanent block for that > bridge is added to firewall rules. I tried this many times, only when both

Re: [tor-relays] wrong iptables rules? / no inbound traffic in nyx

2022-01-27 Thread lists
On Tuesday, January 25, 2022 10:54:00 PM CET ax8eaz7z3g via tor-relays wrote: > Hi! > > I noticed that after I have set up my ip(+6)tables up to filter unwanted > incoming traffic all "inbound" and "directory" connections in nyx > disappeared, only lot of "outbound" connections are there. > > I a

Re: [tor-relays] How to reduce tor CPU load on a single bridge?

2022-01-27 Thread David Fifield
On Tue, Jan 25, 2022 at 11:21:10PM +, Gary C. New via tor-relays wrote: > It's nice to see that the Snowflake daemon offers a native configuration > option for LimitNOFile. I ran into a similar issue with my initial > loadbalanced Tor Relay Nodes that was solved at the O/S level using ulimit.