Re: [tor-relays] Exit Node with Onion Pi

[Sharif Olorin]

Hi Alex,

In addition to potential attention from law enforcement agencies, keep
in mind that running a Tor exit from your home connection (assuming you
aren't able to get a second dedicated IP for the relay) is likely to
significantly impact your regular Internet use. Some service providers
either block exit relays or make people connecting from an exit IP jump
through additional hoops (e.g., Cloudflare). You've probably noticed
some of these issues when browsing with Tor - browsing from the same IP
as an exit relay will be pretty similar (apart from speed, naturally).


> Would you guys suggest running a bridge/relay instead, or just not
> helping out in terms of bandwidth contribution?

Running a bridge or non-exit relay from a home connection is fine - I
haven't done it myself, but others on the list do.

Regarding throughput on a Raspberry Pi: as others have said, the Pi
won't saturate a 100Mb connection. If you're just after something that's
cheap and Pi-sized, you'd probably have better luck with something like
the ODROID C1[0]; you still may not saturate the link though.

Regards,
Sharif

[0] http://www.hardkernel.com/main/products/prdt_info.php?g_code=G143703355573

-- 
OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57


signature.asc
Description: PGP signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Green Dream]

> If you're just after something that's
> cheap and Pi-sized, you'd probably have better luck with something like
> the ODROID C1[0]; you still may not saturate the link though.

>From experience, an ODROID box won't help too much. It just doesn't have
enough CPU.

For a little over $100 (USD), you can get a tiny box with an Intel chip,
with a gigabit ethernet interface, like this one:

http://www.newegg.com/Product/Product.aspx?Item=N82E16856501007

It's more straightforward to run standard Linux distributions on this
hardware. The Raspberry Pi and ODROID are using ARM or Exynos chipsets;
distribution choices are limited and security updates often lag behind.
This particular Intel chip doesn't have AES-NI, but I'm running a relay on
one of these boxes that averages about 40 Mb/s, and has no problem spiking
up to 80 to 120 Mb/s when the load from Tor is higher.

If you want a box with AES-NI and a gigabit ethernet interface, cost starts
jumping up to several hundred US dollars or more, so I find the lack of
AES-NI to be an acceptable compromise for the value.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[starlight . 2015q3]

At 12:21 10/9/2015 -0700, Green Dream wrote:

>http://www.newegg.com/Product/Product.aspx?Item=N82E16856501007
. . .

>If you want a box with AES-NI and a gigabit ethernet interface, cost starts 
>jumping up to several hundred US dollars or more, so I find the lack of AES-NI 
>to be an acceptable compromise for the value. 

The latest Atom SOCs have AES-NI.  Might be possible to get the best of both.

Everything released March 2014 and later:

https://en.wikipedia.org/wiki/List_of_Intel_Atom_microprocessors

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[I]

Have a go.Wanting to contribute to privacy is admirable.A relay is a good start.Robert
 -Original Message-From: cayden_...@yahoo.comSent: Thu, 8 Oct 2015 12:50:54 + (UTC)To: tor-relays@lists.torproject.orgSubject: Re: [tor-relays] Exit Node with Onion PiThe common theme seems to be "don't do it." This is a little disappointing because I want to contribute somehow. Would you guys suggest running a bridge/relay instead, or just not helping out in terms of bandwidth contribution? On Wednesday, October 7, 2015 6:59 AM, Moritz Bartl  wrote: On 10/07/2015 04:21 AM, Alex Haesche wrote:> I'm looking to start an exit node using this:> https://learn.adafruit.com/onion-pi/overview> I have 100 Mbps symmetric uncapped internet.> > What do I need to do to prepare and run an exit node? What can you tell> me so I can run this well?Nice line! Thank you for thinking about running an exit! Your ISP mightnot be excited about an exit relay on their network. I've heard thatsome people had success with smaller local ISPs, but with larger ISPs itcan be difficult.Maybe it's best to start with a relay that only permits a handful ofports, and see how it goes.There's a lot more info athttps://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelinesAn Raspberry Pi is not powerful enough to saturate a 100mbit link.Depending on the model, if I remember correctly, you will not be able tomake more than 10mbit per direction.Someone should start a wiki page that compares different hardwareplatforms. I hear good things about Odroid, Olinuxino and PCEngines APU.-- Moritz Bartlhttps://www.torservers.net/___tor-relays mailing listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays 




___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Tim Wilson-Brown - teor]

> On 8 Oct 2015, at 23:50, Alex Haesche  wrote:
> 
> The common theme seems to be "don't do it." This is a little disappointing 
> because I want to contribute somehow.

I’d say: "do it, but be aware of the likely range of outcomes”:
* home relays may attract police attendance in certain jurisdictions
* small devices may not be able to transfer traffic at 100Mbps

> Would you guys suggest running a bridge/relay instead, or just not helping 
> out in terms of bandwidth contribution?

If your greatest concern is the police, run a bridge or non-exit relay; or run 
it out of a data centre; or explain Tor to them in advance.
If your greatest concern is saturating your link, try it with the device you 
have, then upgrade if necessary.

If neither is a concern, go for it!

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B

teor at blah dot im
OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Miguel Barbosa Gonçalves]

On 10/07/2015 03:21 AM, Alex Haesche wrote:
> Hi all,
> 
> I'm looking to start an exit node using this:
> https://learn.adafruit.com/onion-pi/overview
> I have 100 Mbps symmetric uncapped internet. 
> 
> What do I need to do to prepare and run an exit node? What can you tell
> me so I can run this well?

Hi!

Searching Google for "tor exit node" returns the following link

https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment

There... You have a lot to read.

HTH,
Miguel
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Greg Moss]

-Original Message-
From: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] On Behalf
Of Miguel Barbosa Gonçalves
Sent: Tuesday, October 6, 2015 11:38 PM
To: tor-relays@lists.torproject.org
Subject: Re: [tor-relays] Exit Node with Onion Pi


On 10/07/2015 03:21 AM, Alex Haesche wrote:
> Hi all,
> 
> I'm looking to start an exit node using this:
> https://learn.adafruit.com/onion-pi/overview
> I have 100 Mbps symmetric uncapped internet. 
> 
> What do I need to do to prepare and run an exit node? What can you 
> tell me so I can run this well?

Hi!

Searching Google for "tor exit node" returns the following link

https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment

There... You have a lot to read.

HTH,
Miguel
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

I have 100 Mbps symmetric uncapped internet.

You mind sharing the provider? I'm looking for 100 Mb connection myself.
Exits take a bit of knowledge and research to run correctly!

gm


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Christian Pietsch]

Dear Alex,

On Wed, Oct 07, 2015 at 02:21:06AM +, Alex Haesche wrote:
> I'm looking to start an exit node using 
> this:https://learn.adafruit.com/onion-pi/overview

Do you realize that the instructions you refer to are for a wireless
access point with a built-in Tor proxy rather than for a Tor relay?

This wireless access point provides a way for users of its wifi
network to use the Tor network without having to install any software
on their devices. Which is nice, but note that a more secure solution
would be to use the Tor Browser Bundle (for desktop computers) or
ORbot (for Android handheld computers) because these programs take
great care not to leak information that would identify its users.

> I have 100 Mbps symmetric uncapped internet.
> What do I need to do to prepare and run an exit node? What can you
> tell me so I can run this well?

A Raspberry Pi (from version 2) is a good choice for running a middle
relay at home. However, I would recommend against using it as an exit
relay for two reasons:

1) The Pi is not very efficient when it comes to handling network
traffic. You may not be able to utilize your full bandwidth.

2) For legal reasons, it is better to run Tor exits in data centers
instead of your home. Misguided police might confiscate all electronic
devices and storage media they find at your home.

Cheers,
Christian

-- 
  Digitalcourage e.V., Marktstr. 18, D-33602 Bielefeld, Germany
  Tel: +49-521-1639 1639 | Fax: +49-521-61172
  https://digitalcourage.de | https://bigbrotherawards.de


signature.asc
Description: PGP signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Exit Node with Onion Pi

[Moritz Bartl]

On 10/07/2015 04:21 AM, Alex Haesche wrote:
> I'm looking to start an exit node using this:
> https://learn.adafruit.com/onion-pi/overview
> I have 100 Mbps symmetric uncapped internet.
> 
> What do I need to do to prepare and run an exit node? What can you tell
> me so I can run this well?

Nice line! Thank you for thinking about running an exit! Your ISP might
not be excited about an exit relay on their network. I've heard that
some people had success with smaller local ISPs, but with larger ISPs it
can be difficult.

Maybe it's best to start with a relay that only permits a handful of
ports, and see how it goes.

There's a lot more info at
https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines

An Raspberry Pi is not powerful enough to saturate a 100mbit link.
Depending on the model, if I remember correctly, you will not be able to
make more than 10mbit per direction.

Someone should start a wiki page that compares different hardware
platforms. I hear good things about Odroid, Olinuxino and PCEngines APU.

-- 
Moritz Bartl
https://www.torservers.net/
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays