Re: [tor-relays] No stable flag from 6 out of 9?

[Ole Rydahl]

> -Oprindelig meddelelse-
> Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne
af
> Sebastian Hahn
> Sendt: 15. april 2018 20:54
> Til: tor-relays@lists.torproject.org
> Emne: Re: [tor-relays] No stable flag from 6 out of 9?
> 
> Hi,
> 
> > On 15. Apr 2018, at 20:20, Ole Rydahl  wrote:
> > It's my experience that announcing ipv6 capability and actually not
> > providing - results in not being part of the cached consensus since
> > only 3 authorities acknowledge your relay as running.
> >
> > My situation was different all 9 directory authorities acknowledge my
> > relay as running, but initially only 3 granted me the stable flag.
> >
> > Vasilis suggested an experiment where I stopped announcing
> > ipv6-support a while ago. As a follow up - after I had obtained the
> > stable flag from all 9 directory authorities - Vasilis suggested that I
re-
> enabled ipv6 capability.
> 
> I read the thread, I think what's happened is that your ipv6 connection is
> intermittently flaky, not down all the time. That means dirauths with v6
note
> many more failures than those without it and that causes them to have a
much
> worse availability history for you.
> 
> Cheers
> Sebastian

Hi Sebastian,

You are probably right, but I assume, the relay would lose cached consensus
- for a period - in case of lost ipv6 connectivity? 

Nothing in the log however indicates that. Neither before I disabled ipv6
nor after I re-enabled it. For other purposes, I ping6 Google every 5
minutes and send a mail to myself in case of no reply. 2 occasions during
the last 2 month on March 6th (for 50 minutes) and April 10th (for 1 hour).
The later one happened while my ipv6 capability was unannounced (Vasilis'
suggestion).

Anyway the traffic is flowing nicely now - as it did even before the stable
flag was granted. I suggest we consider the problem solved.

Regards Ole


smime.p7s
Description: S/MIME cryptographic signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Tor relay software automatic updates

[teor]

> On 16 Apr 2018, at 04:03, Keifer Bly  wrote:
> 
> Ok, do you know how I could configure this to automatically update my tor 
> software? Thank you.

I think you might have missed my reply:

> The homebrew update command is:
> brew update && brew upgrade
> 
> https://docs.brew.sh/FAQ
> 
> You should run this command regularly using cron, launchd, or your favourite 
> task scheduler.


If you want step by step instructions, they are here:

https://apple.stackexchange.com/questions/206465/auto-updating-homebrew#206474

T___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Let's increase the amount of exit relays doing DNSSEC validation

[Jonathan Sélea]

Great initiative!
Personally I would also see some sort of "DANE" for Tor-relays in the
future too, but that is a request for another thread.

/ Jonathan
> On 12.04.18 13:05, Alexander Dietrich wrote:
>
>> Just to be safe, you could also check the rest of the dig output and
>> /etc/resolv.conf (or relevant resolver configuration on your system)
>> to make sure your BIND is being used.
> I have seen hosters where /etc/resolv.conf is overwritten whenever the
> system reboots, and in these cases I used the following:
>
>   # Add this to /etc/tor/torrc
>   ServerDNSResolvConfFile /etc/tor/resolv.conf
>
>   # /etc/tor/resolv.conf
>   nameserver 127.0.0.1
>   # IPv6 alternative
>   #nameserver ::1
>
> -Ralph
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays




smime.p7s
Description: S/MIME-kryptografisk signatur
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] No stable flag from 6 out of 9?

[Sebastian Hahn]

Hi,

> On 15. Apr 2018, at 20:20, Ole Rydahl  wrote:
> It's my experience that announcing ipv6 capability and actually not
> providing - results in not being part of the cached consensus since only 3
> authorities acknowledge your relay as running.
> 
> My situation was different all 9 directory authorities acknowledge my relay
> as running, but initially only 3 granted me the stable flag.
> 
> Vasilis suggested an experiment where I stopped announcing ipv6-support a
> while ago. As a follow up - after I had obtained the stable flag from all 9
> directory authorities - Vasilis suggested that I re-enabled ipv6 capability.

I read the thread, I think what's happened is that your ipv6 connection is
intermittently flaky, not down all the time. That means dirauths with v6
note many more failures than those without it and that causes them to have
a much worse availability history for you.

Cheers
Sebastian


signature.asc
Description: Message signed with OpenPGP
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] No stable flag from 6 out of 9?

[Ole Rydahl]

> -Oprindelig meddelelse-
> Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne
af
> Sebastian Hahn
> Sendt: 15. april 2018 10:05
> Til: tor-relays@lists.torproject.org
> Emne: Re: [tor-relays] No stable flag from 6 out of 9?
> 
> 
> > On 15. Apr 2018, at 10:03, Ole Rydahl  wrote:
> > As far as I can see, there is a quite large difference in the required
> "running" period between the 9 directory authorities. I interpreted that
as an
> issue with my setup. 3 authorities voted stable after a few days, while
the 6
> remaining needs almost 30 days of observed running before granting the
stable-
> flag.
> 
> This is completely expected as 3 dirauths aren't currently equipped to
notice
> ipv6 reachability failure.

It's my experience that announcing ipv6 capability and actually not
providing - results in not being part of the cached consensus since only 3
authorities acknowledge your relay as running.

My situation was different all 9 directory authorities acknowledge my relay
as running, but initially only 3 granted me the stable flag.

Vasilis suggested an experiment where I stopped announcing ipv6-support a
while ago. As a follow up - after I had obtained the stable flag from all 9
directory authorities - Vasilis suggested that I re-enabled ipv6 capability.

/Ole


smime.p7s
Description: S/MIME cryptographic signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Tor relay software automatic updates

[Keifer Bly]

Ok, do you know how I could configure this to automatically update my tor 
software? Thank you.

Sent from my iPhone

> On Apr 15, 2018, at 2:29 AM, Vasilis  wrote:
> 
> Hi,
> 
> Keifer Bly:
>> I am running my tor relay “torland” on Mac OS X via this guide here 
>> https://www.torproject.org/docs/tor-doc-osx.html.en
>> 
>> I am wondering, is there a way to configure the tor relaying software to 
>> automatically check for software updates and install them automatically if 
>> there are any?
> 
> Automatic software updates depend on the package manager or the installation
> method of the tor package. Homebrew seems to have an (auto?) upgrade option
> called `cask upgrade`.
> 
> Hope this helps.
> 
> 
> Cheers,
> ~Vasilis
> -- 
> Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162
> Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Tor relay software automatic updates

[teor]

> On 15 Apr 2018, at 19:29, Vasilis  wrote:
> 
> Hi,
> 
> Keifer Bly:
>> I am running my tor relay “torland” on Mac OS X via this guide here 
>> https://www.torproject.org/docs/tor-doc-osx.html.en
>> 
>> I am wondering, is there a way to configure the tor relaying software to 
>> automatically check for software updates and install them automatically if 
>> there are any?
> 
> Automatic software updates depend on the package manager or the installation
> method of the tor package. Homebrew seems to have an (auto?) upgrade option
> called `cask upgrade`.

The homebrew update command is:
brew update && brew upgrade

https://docs.brew.sh/FAQ

You should run this command regularly using cron, launchd, or your favourite 
task scheduler.

T


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Tor relay software automatic updates

[Vasilis]

Hi,

Keifer Bly:
> I am running my tor relay “torland” on Mac OS X via this guide here 
> https://www.torproject.org/docs/tor-doc-osx.html.en
> 
> I am wondering, is there a way to configure the tor relaying software to 
> automatically check for software updates and install them automatically if 
> there are any?

Automatic software updates depend on the package manager or the installation
method of the tor package. Homebrew seems to have an (auto?) upgrade option
called `cask upgrade`.

Hope this helps.


Cheers,
~Vasilis
-- 
Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162
Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] No stable flag from 6 out of 9?

[Sebastian Hahn]

> On 15. Apr 2018, at 10:03, Ole Rydahl  wrote:
> As far as I can see, there is a quite large difference in the required 
> "running" period between the 9 directory authorities. I interpreted that as 
> an issue with my setup. 3 authorities voted stable after a few days, while 
> the 6 remaining needs almost 30 days of observed running before granting the 
> stable-flag.

This is completely expected as 3 dirauths aren't currently equipped to notice
ipv6 reachability failure.


signature.asc
Description: Message signed with OpenPGP
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] No stable flag from 6 out of 9?

[Ole Rydahl]

> -Oprindelig meddelelse-
> Fra: tor-relays [mailto:tor-relays-boun...@lists.torproject.org] På vegne af
> Vasilis
> Sendt: 10. april 2018 13:08
> Til: tor-relays@lists.torproject.org
> Emne: Re: [tor-relays] No stable flag from 6 out of 9?
> 
> Hi Ole,
> 
> Ole Rydahl:
> > I'll be patient! (It took a while to obtain the stable flag from my wife
> > too.) /Ole
> 
> It seems that your relay has gained the stable flag, can you please re-enable
> IPv6 connectivity so that we can find if that was the issue?
> 
> 
> Thanks,
> ~Vasilis
> --
> Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162
> Pubkey: https://pgp.mit.edu/pks/lookup?op=get=0x5FBF70B1D1260162

Hi Vasilis,

I enabled IPv6 yesterday evening. The relay maintained the flags including the 
stable-flag and got the additional IPv6 flag.

As far as I can see, there is a quite large difference in the required 
"running" period between the 9 directory authorities. I interpreted that as an 
issue with my setup. 3 authorities voted stable after a few days, while the 6 
remaining needs almost 30 days of observed running before granting the 
stable-flag.

Regards Ole


smime.p7s
Description: S/MIME cryptographic signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays