Re: [tor-relays] Cheapest HW to get 20Mbit?
On 08/28/2016 04:26 PM, Petrusko wrote: > >> Up to two per IP. > Hu? it's sad for people having several CPU... :s > It does help a little to prevent attackers from spinning up a lot of relays. With this limit, they must have n/2 IPs at their disposal. For example, this paper[1] shows an attack for harvesting onion services. It would have been much easier without the 2-per-IP limit. Matt [1]: http://ieee-security.org/TC/SP2013/papers/4977a080.pdf signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Cheapest HW to get 20Mbit?
> Up to two per IP. Hu? it's sad for people having several CPU... :s -- Petrusko PubKey EBE23AE5 C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5 signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Cheapest HW to get 20Mbit?
On 08/28/2016 04:18 PM, Petrusko wrote: > Hey, > Tor process is only mono-cpu, so if you have RPi v2 or v3, the full quad > core will not be used 100% by 1 Tor process. Tor is mostly 1 process, but it does now do crypto on a separate thread. > On this list I've already read it's possible to launch several Tor > processes, so all cpu x4 cores can be used at same time. > Up to two per IP. Note you need to specify separate data directories for each Tor process. Be kind and specify them all as family members if you run multiple Tor relays :) Matt signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Cheapest HW to get 20Mbit?
Hey, Tor process is only mono-cpu, so if you have RPi v2 or v3, the full quad core will not be used 100% by 1 Tor process. On this list I've already read it's possible to launch several Tor processes, so all cpu x4 cores can be used at same time. About hardware, I don't know if the RPi can go to 20Mbit with 1 process (or 4). Let's try ;) > Hi > Since a few months back I have two RPi running Tor relays and delivering > about 1Mbit each of peak throughput. Now my ISP has increased my max upload > speed and I am looking to contribute more, somewhere in the 20Mbit range or > possibly more. > > But what hardware do I need? Has anyone written down a list of minimum > requirements to get a certain throughout? > > I have tried to google, but failed. > > Sincerely > Daniel Armyr. -- Petrusko PubKey EBE23AE5 C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5 signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Cheapest HW to get 20Mbit?
Hi Daniel, Judging from my pi3 mid relay where 5mbit traffic is about 20% of 1 core (tor uses 1 core mostly) 20-25mbit should be fine for pi3. In the peak hours it will be probably close to maximum what pi3 is capable on 1 core but when cost is a factor I would not think of anything else 1gb ram is more than enough, my tor uses about 150mb If you think of exit, cpu load may be higher ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] interesting network sockets pattern
On 26/08/2016 14:37, Toralf Förster wrote: > On 08/25/2016 07:02 PM, Toralf Förster wrote: >> This is a fresh new Tor exit, setup 4 days ago, >> https://atlas.torproject.org/#details/BE2FA9FCB6242567B93ED99FEC5543FC517C9276 >> , where I do wonder how to interpret the attached screen shot. > > The full SVG graphic can be derived from > http://www.zwiebeltoralf.de/torserver/graph-20160825.svg (scroll down to the > end) Hi, In my exit relay[1] sometimes I see the orphaned sockets rising up for small period of time (usually a couple of minutes) and hit the max value I set up (32768). It could be the same issue. As you can see from this log there is a small increase of the timewait too: [Aug 19 06:28:20 CDT 2016] Total: 3750 (kernel 3842) TCP: 6340 (estab 3583, closed 2694, orphaned 18, synrecv 0, timewait 2691/0), ports 4493 [Aug 19 06:29:20 CDT 2016] Total: 10886 (kernel 11022) TCP: 21925 (estab 10673, closed 2820, orphaned 8342, synrecv 0, timewait 2817/0), ports 18948 [Aug 19 06:30:20 CDT 2016] Total: 5935 (kernel 6253) TCP: 32393 (estab 5683, closed 2826, orphaned 23752, synrecv 0, timewait 2823/0), ports 28711 [Aug 19 06:31:20 CDT 2016] Total: 4474 (kernel 4765) TCP: 17208 (estab 4131, closed 2311, orphaned 10551, synrecv 0, timewait 2300/0), ports 14818 [Aug 19 06:32:20 CDT 2016] Total: 4162 (kernel 4252) TCP: 6375 (estab 3918, closed 2274, orphaned 60, synrecv 0, timewait 2271/0), ports 4702 [1]https://atlas.torproject.org/#details/2B72D043164D5036BC1087613830E2ED5C60695A ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays