Re: [tor-relays] Has the storm passed?

2018-01-16 Thread nusenu
> I think things have gotten a little bit better, but I think it is too soon
> to say that things have passed. I'm still seeing the various connection
> overloads and circuit overloads that I was seeing earlier.
> 
> For those still feeling the memory-bloat pain, I should clean up and share
> one of the patches I've been testing, which does something similar to
> the iptables rules that teor has been talking about, but does it inside
> Tor rather than at the firewall level. This week I hope.

Will this be an opt-in, opt-out or not configurable?
(I assume this will be in the first 0.3.3.x alpha)


-- 
https://mastodon.social/@nusenu
twitter: @nusenu_



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Has the storm passed?

2018-01-16 Thread Roger Dingledine
On Mon, Jan 15, 2018 at 01:44:25PM +0100, Ana Lucia Cortez wrote:
> About 36 hours ago I tentatively disabled all my firewall rules who
> where limiting connections to my relay.
> 
> Everything looks pretty normal, I see no spikes, no errors, no failures.

I think things have gotten a little bit better, but I think it is too soon
to say that things have passed. I'm still seeing the various connection
overloads and circuit overloads that I was seeing earlier.

For those still feeling the memory-bloat pain, I should clean up and share
one of the patches I've been testing, which does something similar to
the iptables rules that teor has been talking about, but does it inside
Tor rather than at the firewall level. This week I hope.

Thanks,
--Roger

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


[tor-relays] Has the storm passed?

2018-01-15 Thread Ana Lucia Cortez
About 36 hours ago I tentatively disabled all my firewall rules who
where limiting connections to my relay.

Everything looks pretty normal, I see no spikes, no errors, no failures.

> Jan 15 10:18:36 Tor-relay: 
> Heartbeat: 
>   Tor's uptime is 4 days 18:00 hours, 
>   with 36,596 circuits open. 
>   I've sent 4,962.80 GB 
>   and received 4,935.38 GB.
> Circuit handshake stats since last time: 
>   244,441 / 244,441 TAP, 
>   10,558,601 / 10,558,601 NTor.
> Since startup, 
>   we have initiated 
>   0 v1 connections, 
>   0 v2 connections, 
>   2 v3 connections, and 
>   71,189 v4 connections; 
>   and received 
>   1 v1 connections, 
>   31,976 v2 connections, 
>   53,960 v3 connections, and 
>   755,679 v4 connections.

While I still see a lot of Hetzners & Co. in my top 30 connections, they
seem to behave better.

> Conn Subnet AS  Org
> 18   46.188.***.0/17AS8334  2COM Co ltd.
> 17   192.243.***.0/20   AS39572 Internet Service Solution Corp. (ISSC-11)
> 14   24.60.***.0/14 AS7922  Comcast Cable Communications, LLC (CCCS)
> 13   192.99.***.0/16AS16276 OVH Hosting, Inc. (HO-2)
> 12   212.109.***.0/23   AS29182 CJSC Server WebDC colocation
> 11   213.239.***.0/18   AS24940 Hetzner Online AG
> 10   95.65.***.0/17 AS31252 SC STARNET SRL
> 10   213.239.***.0/18   AS24940 Hetzner Online AG 
> 9139.59.***.0/16DigitalOcean, LLC (AP)
> 9163.172.***.0/16   AS12876 Online SAS

-- 

Relay:32E7AAF1F602814D699BEF6761AD03E387758D49



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays