Re: [tor-relays] fast exits running 'unbound' should switch to 'named'

2016-03-19 Thread Michael McConville
Dhalgren Tor wrote: > Bug #18580: exit relay fails with 'unbound' DNS resolver when lots of > requests time-out > > https://trac.torproject.org/projects/tor/ticket/18580 I wouldn't go that far. I've been running with Unbound for ~1.5 years now (AFAIK) without issue. I've also been told that the

Re: [tor-relays] fast exits running 'unbound' should switch to 'named'

2016-03-19 Thread Dhalgren Tor
Nothing wrong with 'unbound'. Problem is bug in Tor daemon interaction with 'unbound' that brings exit effectively offline when GoDaddy blocks requests from it. This can happen to any fast exit anytime. GoDaddy has been blocking high-volume DNS requesters since 2011, and recent activity by some

[tor-relays] please send me the hosters you use

2016-03-19 Thread harvie josh
Hello! I'm spending quite some time in finding new cost-efficient VPS hoster in "unpopular" countries (non-exit). The relay community would actually have a lot information to provide in that regard - I think. I would really appreciate if you can share any hoster that provides VPSes with

Re: [tor-relays] please send me the hosters you use

2016-03-19 Thread Moritz Bartl
Hi Harvie, Thanks for this effort! This is greatly appreciated. Can you add your findings to https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs ? This page could also use some general overhaul. -- Moritz Bartl https://www.torservers.net/

Re: [tor-relays] Running 5000 relays...

2016-03-19 Thread Philipp Winter
On Fri, Mar 11, 2016 at 11:51:23AM +, nusenu wrote: > > This sounds like a great effort. I wanted to point out 2 things: > > 1) I think that GCE IP addresses are blacklisted (due to an earlier sybil > > attack, > > https://lists.torproject.org/pipermail/tor-relays/2015-August/007656.html). >

Re: [tor-relays] unbound bogs down strangely, degrading exit relay

2016-03-19 Thread Dhalgren Tor
As with the earlier incident, problem came back within hours of restarting the daemons. Was able to figure out what's happening Operators running 'unbound' take note! Problem appears to be the result of someone attempting to DDOS a DNS service, in this case GoDaddy. Ran lsof -Pn -p a few

Re: [tor-relays] What IPs does Torbrowser need?

2016-03-19 Thread Tim Wilson-Brown - teor
> On 16 Mar 2016, at 01:28, Martin Kepplinger wrote: > > Hi > > Imagine a router that want to only whitelist the IP addresses that > Torbrowser needs to work. What IPs would it need (for start up and > browsing) ? > > * Guards During normal operation after bootstrapping.

Re: [tor-relays] please send me your hosters

2016-03-19 Thread Tim Wilson-Brown - teor
> On 20 Mar 2016, at 05:08, harvie josh wrote: > > Can you add your findings to https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs ? >>> >>> I do not know what their policies on tor relays are, that is why I can >>> not really add anything new to

Re: [tor-relays] Running 5000 relays...

2016-03-19 Thread Tim Wilson-Brown - teor
> On 9 Mar 2016, at 09:29, nusenu wrote: > > - maybe run without DirPort so you do not become HSDir for to many HSes Hmm, I don't think that this will work as you expect. As of 0.2.7, every relay advertises that it will be a hidden service directory (regardless of

[tor-relays] please send me your hosters

2016-03-19 Thread harvie josh
> Can you add your findings to > https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs ? I do not know what their policies on tor relays are, that is why I can not really add anything new to that site. ___ tor-relays mailing list

Re: [tor-relays] please send me your hosters

2016-03-19 Thread Michael McConville
harvie josh wrote: > > Can you add your findings to > > https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs ? > > I do not know what their policies on tor relays are, that is why I can > not really add anything new to that site. It'a always a good idea to ask.

Re: [tor-relays] please send me your hosters

2016-03-19 Thread harvie josh
> > > Can you add your findings to > > > https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs ? > > > > I do not know what their policies on tor relays are, that is why I can > > not really add anything new to that site. > > It'a always a good idea to ask. I don't think it is worth

Re: [tor-relays] please send me the hosters you use

2016-03-19 Thread Jesse V
On 03/19/2016 09:55 AM, harvie josh wrote: > I would really appreciate if you can share any hoster that provides > VPSes with the following properties: > > * cost efficiency: at least 4 MBit/s per $ / month (min 20MBit/s) > * not located in NL, FR, DE, US, GB, AS16276, Digital Ocean ASes > * KVM

Re: [tor-relays] unbound bogs down strangely, degrading exit relay

2016-03-19 Thread Dhalgren Tor
Problem came back again while I was working on the exit. unbound-control purge_requestlist does not help but it appears that unbound-control purge_infra unbound-control purge_requestlist will clear up the problem without requiring a daemon restart--at least temporarily. Also tried