Re: [tor-relays] No stable flag from 6 out of 9?
> -Oprindelig meddelelse- > Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne af > Sebastian Hahn > Sendt: 15. april 2018 20:54 > Til: tor-relays@lists.torproject.org > Emne: Re: [tor-relays] No stable flag from 6 out of 9? > > Hi, > > > On 15. Apr 2018, at 20:20, Ole Rydahlwrote: > > It's my experience that announcing ipv6 capability and actually not > > providing - results in not being part of the cached consensus since > > only 3 authorities acknowledge your relay as running. > > > > My situation was different all 9 directory authorities acknowledge my > > relay as running, but initially only 3 granted me the stable flag. > > > > Vasilis suggested an experiment where I stopped announcing > > ipv6-support a while ago. As a follow up - after I had obtained the > > stable flag from all 9 directory authorities - Vasilis suggested that I re- > enabled ipv6 capability. > > I read the thread, I think what's happened is that your ipv6 connection is > intermittently flaky, not down all the time. That means dirauths with v6 note > many more failures than those without it and that causes them to have a much > worse availability history for you. > > Cheers > Sebastian Hi Sebastian, You are probably right, but I assume, the relay would lose cached consensus - for a period - in case of lost ipv6 connectivity? Nothing in the log however indicates that. Neither before I disabled ipv6 nor after I re-enabled it. For other purposes, I ping6 Google every 5 minutes and send a mail to myself in case of no reply. 2 occasions during the last 2 month on March 6th (for 50 minutes) and April 10th (for 1 hour). The later one happened while my ipv6 capability was unannounced (Vasilis' suggestion). Anyway the traffic is flowing nicely now - as it did even before the stable flag was granted. I suggest we consider the problem solved. Regards Ole smime.p7s Description: S/MIME cryptographic signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor relay software automatic updates
> On 16 Apr 2018, at 04:03, Keifer Blywrote: > > Ok, do you know how I could configure this to automatically update my tor > software? Thank you. I think you might have missed my reply: > The homebrew update command is: > brew update && brew upgrade > > https://docs.brew.sh/FAQ > > You should run this command regularly using cron, launchd, or your favourite > task scheduler. If you want step by step instructions, they are here: https://apple.stackexchange.com/questions/206465/auto-updating-homebrew#206474 T___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Let's increase the amount of exit relays doing DNSSEC validation
Great initiative! Personally I would also see some sort of "DANE" for Tor-relays in the future too, but that is a request for another thread. / Jonathan > On 12.04.18 13:05, Alexander Dietrich wrote: > >> Just to be safe, you could also check the rest of the dig output and >> /etc/resolv.conf (or relevant resolver configuration on your system) >> to make sure your BIND is being used. > I have seen hosters where /etc/resolv.conf is overwritten whenever the > system reboots, and in these cases I used the following: > > # Add this to /etc/tor/torrc > ServerDNSResolvConfFile /etc/tor/resolv.conf > > # /etc/tor/resolv.conf > nameserver 127.0.0.1 > # IPv6 alternative > #nameserver ::1 > > -Ralph > > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays smime.p7s Description: S/MIME-kryptografisk signatur ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] No stable flag from 6 out of 9?
Hi, > On 15. Apr 2018, at 20:20, Ole Rydahlwrote: > It's my experience that announcing ipv6 capability and actually not > providing - results in not being part of the cached consensus since only 3 > authorities acknowledge your relay as running. > > My situation was different all 9 directory authorities acknowledge my relay > as running, but initially only 3 granted me the stable flag. > > Vasilis suggested an experiment where I stopped announcing ipv6-support a > while ago. As a follow up - after I had obtained the stable flag from all 9 > directory authorities - Vasilis suggested that I re-enabled ipv6 capability. I read the thread, I think what's happened is that your ipv6 connection is intermittently flaky, not down all the time. That means dirauths with v6 note many more failures than those without it and that causes them to have a much worse availability history for you. Cheers Sebastian signature.asc Description: Message signed with OpenPGP ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] No stable flag from 6 out of 9?
> -Oprindelig meddelelse- > Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne af > Sebastian Hahn > Sendt: 15. april 2018 10:05 > Til: tor-relays@lists.torproject.org > Emne: Re: [tor-relays] No stable flag from 6 out of 9? > > > > On 15. Apr 2018, at 10:03, Ole Rydahlwrote: > > As far as I can see, there is a quite large difference in the required > "running" period between the 9 directory authorities. I interpreted that as an > issue with my setup. 3 authorities voted stable after a few days, while the 6 > remaining needs almost 30 days of observed running before granting the stable- > flag. > > This is completely expected as 3 dirauths aren't currently equipped to notice > ipv6 reachability failure. It's my experience that announcing ipv6 capability and actually not providing - results in not being part of the cached consensus since only 3 authorities acknowledge your relay as running. My situation was different all 9 directory authorities acknowledge my relay as running, but initially only 3 granted me the stable flag. Vasilis suggested an experiment where I stopped announcing ipv6-support a while ago. As a follow up - after I had obtained the stable flag from all 9 directory authorities - Vasilis suggested that I re-enabled ipv6 capability. /Ole smime.p7s Description: S/MIME cryptographic signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor relay software automatic updates
Ok, do you know how I could configure this to automatically update my tor software? Thank you. Sent from my iPhone > On Apr 15, 2018, at 2:29 AM, Vasiliswrote: > > Hi, > > Keifer Bly: >> I am running my tor relay “torland” on Mac OS X via this guide here >> https://www.torproject.org/docs/tor-doc-osx.html.en >> >> I am wondering, is there a way to configure the tor relaying software to >> automatically check for software updates and install them automatically if >> there are any? > > Automatic software updates depend on the package manager or the installation > method of the tor package. Homebrew seems to have an (auto?) upgrade option > called `cask upgrade`. > > Hope this helps. > > > Cheers, > ~Vasilis > -- > Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 > Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162 > > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor relay software automatic updates
> On 15 Apr 2018, at 19:29, Vasiliswrote: > > Hi, > > Keifer Bly: >> I am running my tor relay “torland” on Mac OS X via this guide here >> https://www.torproject.org/docs/tor-doc-osx.html.en >> >> I am wondering, is there a way to configure the tor relaying software to >> automatically check for software updates and install them automatically if >> there are any? > > Automatic software updates depend on the package manager or the installation > method of the tor package. Homebrew seems to have an (auto?) upgrade option > called `cask upgrade`. The homebrew update command is: brew update && brew upgrade https://docs.brew.sh/FAQ You should run this command regularly using cron, launchd, or your favourite task scheduler. T ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor relay software automatic updates
Hi, Keifer Bly: > I am running my tor relay “torland” on Mac OS X via this guide here > https://www.torproject.org/docs/tor-doc-osx.html.en > > I am wondering, is there a way to configure the tor relaying software to > automatically check for software updates and install them automatically if > there are any? Automatic software updates depend on the package manager or the installation method of the tor package. Homebrew seems to have an (auto?) upgrade option called `cask upgrade`. Hope this helps. Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162 signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] No stable flag from 6 out of 9?
> On 15. Apr 2018, at 10:03, Ole Rydahlwrote: > As far as I can see, there is a quite large difference in the required > "running" period between the 9 directory authorities. I interpreted that as > an issue with my setup. 3 authorities voted stable after a few days, while > the 6 remaining needs almost 30 days of observed running before granting the > stable-flag. This is completely expected as 3 dirauths aren't currently equipped to notice ipv6 reachability failure. signature.asc Description: Message signed with OpenPGP ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] No stable flag from 6 out of 9?
> -Oprindelig meddelelse- > Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne af > Vasilis > Sendt: 10. april 2018 13:08 > Til: tor-relays@lists.torproject.org > Emne: Re: [tor-relays] No stable flag from 6 out of 9? > > Hi Ole, > > Ole Rydahl: > > I'll be patient! (It took a while to obtain the stable flag from my wife > > too.) /Ole > > It seems that your relay has gained the stable flag, can you please re-enable > IPv6 connectivity so that we can find if that was the issue? > > > Thanks, > ~Vasilis > -- > Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 > Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162 Hi Vasilis, I enabled IPv6 yesterday evening. The relay maintained the flags including the stable-flag and got the additional IPv6 flag. As far as I can see, there is a quite large difference in the required "running" period between the 9 directory authorities. I interpreted that as an issue with my setup. 3 authorities voted stable after a few days, while the 6 remaining needs almost 30 days of observed running before granting the stable-flag. Regards Ole smime.p7s Description: S/MIME cryptographic signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays