Re: [tor-relays] Cheapest HW to get 20Mbit?

2016-08-28 Thread Matt Traudt


On 08/28/2016 04:26 PM, Petrusko wrote:
> 
>> Up to two per IP.
> Hu? it's sad for people having several CPU... :s
> 

It does help a little to prevent attackers from spinning up a lot of
relays. With this limit, they must have n/2 IPs at their disposal.

For example, this paper[1] shows an attack for harvesting onion
services. It would have been much easier without the 2-per-IP limit.

Matt

[1]: http://ieee-security.org/TC/SP2013/papers/4977a080.pdf



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Cheapest HW to get 20Mbit?

2016-08-28 Thread Petrusko

> Up to two per IP.
Hu? it's sad for people having several CPU... :s

-- 
Petrusko
PubKey EBE23AE5
C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5




signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Cheapest HW to get 20Mbit?

2016-08-28 Thread Matt Traudt


On 08/28/2016 04:18 PM, Petrusko wrote:
> Hey,
> Tor process is only mono-cpu, so if you have RPi v2 or v3, the full quad
> core will not be used 100% by 1 Tor process.

Tor is mostly 1 process, but it does now do crypto on a separate thread.

> On this list I've already read it's possible to launch several Tor
> processes, so all cpu x4 cores can be used at same time.
> 

Up to two per IP. Note you need to specify separate data directories for
each Tor process.

Be kind and specify them all as family members if you run multiple Tor
relays :)

Matt



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Cheapest HW to get 20Mbit?

2016-08-28 Thread Petrusko
Hey,
Tor process is only mono-cpu, so if you have RPi v2 or v3, the full quad
core will not be used 100% by 1 Tor process.
On this list I've already read it's possible to launch several Tor
processes, so all cpu x4 cores can be used at same time.

About hardware, I don't know if the RPi can go to 20Mbit with 1 process
(or 4). Let's try ;)


> Hi
> Since a few months back I have two RPi running Tor relays and delivering 
> about 1Mbit each of peak throughput. Now my ISP has increased my max upload 
> speed and I am looking to contribute more, somewhere in the 20Mbit range or 
> possibly more. 
>
> But what hardware do I need? Has anyone written down a list of minimum 
> requirements to get a certain throughout?
>
> I have tried to google, but failed. 
>
> Sincerely
> Daniel Armyr. 

-- 
Petrusko
PubKey EBE23AE5
C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5




signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Cheapest HW to get 20Mbit?

2016-08-28 Thread Pi3
Hi Daniel,
Judging from my pi3 mid relay where 5mbit traffic is 
about 20% of 1 core (tor uses 1 core mostly) 20-25mbit should be fine for pi3.
In the peak hours it will be probably close to maximum what pi3 is capable on 1 
core
but when cost is a factor I would not think of anything else
1gb ram is more than enough, my tor uses about 150mb
If you think of exit, cpu load may be higher
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] interesting network sockets pattern

2016-08-28 Thread patacca
On 26/08/2016 14:37, Toralf Förster wrote:
> On 08/25/2016 07:02 PM, Toralf Förster wrote:
>> This is a fresh new Tor exit, setup 4 days ago, 
>> https://atlas.torproject.org/#details/BE2FA9FCB6242567B93ED99FEC5543FC517C9276
>>  , where I do wonder how to interpret the attached screen shot.
> 
> The full SVG graphic can be derived from 
> http://www.zwiebeltoralf.de/torserver/graph-20160825.svg (scroll down to the 
> end)

Hi,
In my exit relay[1] sometimes I see the orphaned sockets rising up for
small period of time (usually a couple of minutes) and hit the max value
I set up (32768).
It could be the same issue. As you can see from this log there is a
small increase of the timewait too:


[Aug 19 06:28:20 CDT 2016]

Total: 3750 (kernel 3842)
TCP:   6340 (estab 3583, closed 2694, orphaned 18, synrecv 0, timewait
2691/0), ports 4493

[Aug 19 06:29:20 CDT 2016]

Total: 10886 (kernel 11022)
TCP:   21925 (estab 10673, closed 2820, orphaned 8342, synrecv 0,
timewait 2817/0), ports 18948

[Aug 19 06:30:20 CDT 2016]

Total: 5935 (kernel 6253)
TCP:   32393 (estab 5683, closed 2826, orphaned 23752, synrecv 0,
timewait 2823/0), ports 28711

[Aug 19 06:31:20 CDT 2016]

Total: 4474 (kernel 4765)
TCP:   17208 (estab 4131, closed 2311, orphaned 10551, synrecv 0,
timewait 2300/0), ports 14818

[Aug 19 06:32:20 CDT 2016]

Total: 4162 (kernel 4252)
TCP:   6375 (estab 3918, closed 2274, orphaned 60, synrecv 0, timewait
2271/0), ports 4702



[1]https://atlas.torproject.org/#details/2B72D043164D5036BC1087613830E2ED5C60695A
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays