[tor-relays] [Looking for feedback] An easier way to declare families

2021-11-06 Thread Nick Mathewson
Hello, relay operators! I'm hoping to get some feedback from relay operators, particularly those who use the MyFamily option, about the best way to deploy proposal 321. You can read the proposal at: https://gitlab.torproject.org/tpo/core/torspec/-/blob/master/proposals/321-happy-families.md The

Re: [tor-relays] [Looking for feedback] An easier way to declare families

2021-11-06 Thread Nick Mathewson
On Sat, Nov 6, 2021 at 10:36 AM Nick Mathewson wrote: > Hello, relay operators! > > I'm hoping to get some feedback from relay operators, particularly > those who use the MyFamily option, about the best way to deploy > proposal 321. You can read the proposal at: > > > https://gitlab.torproject.o

Re: [tor-relays] [Looking for feedback] An easier way to declare families

2021-11-06 Thread nusenu
It is a nice surprise to see activity in this area of tor, thank you for working on this. Option 3 requires regular updates to all the relays in the family, which makes it cumbersome. Its advantage is that if a relay is compromised, you don't need to re-key the family. Options 1 and 2 are le

[tor-relays] Crashed Relay

2021-11-06 Thread sysmanager7 via tor-relays
I was notified by Uptime Robot that relay 1 of 3 had been shut down. Unfortunately I found this out 12 hours after the fact. guard flag is lost. journalctl -u tor@default Nov 01 01:03:18 ubuntu-s-1vcpu-2gb-nyc1-01 Tor[328387]: I learned some more directory information, but not enough to build a

[tor-relays] upgrade problem

2021-11-06 Thread potlatch via tor-relays
Wondering if my tor.list has a typo since I can't upgrade Tor 0.4.5.9.  I get error: Err:1 https://deb.torproject.org/torproject.org stretch/main amd64 tor-geoipdb all 0.4.5.10-1~d9.stretch+1   server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none I hav

[tor-relays] General overload -> DNS timeouts

2021-11-06 Thread Intrepid Ibex via tor-relays
Hi everybody, I am new to tor (as server operator) and try to support the network by operating an exit node. Machine is running Ubuntu 20.04 - Tor 0.4.6.8. nyx is giving me a notive every 10 minutes or so: [NOTICE] General overload -> DNS timeouts (6) fraction 1.4742% is above threshold of 1.000

Re: [tor-relays] [Looking for feedback] An easier way to declare families

2021-11-06 Thread Toralf Förster
On 11/6/21 3:36 PM, Nick Mathewson wrote: Option 3 requires regular updates to all the relays in the family, which makes it cumbersome. Except for people who already have offline relay keys. For those it is just 1 additonal file to copy ;) -- Toralf OpenPGP_signature Description: OpenPGP

Re: [tor-relays] upgrade problem

2021-11-06 Thread Roman Mamedov
On Thu, 04 Nov 2021 21:55:02 + potlatch via tor-relays wrote: > Wondering if my tor.list has a typo since I can't upgrade Tor 0.4.5.9.  I get > error: > Err:1 https://deb.torproject.org/torproject.org stretch/main amd64 > tor-geoipdb all 0.4.5.10-1~d9.stretch+1 >   server certificate verifi

[tor-relays] Compression bomb from dizum

2021-11-06 Thread Logforme
Got the following in my log today: Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream. Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (tried Zstandard compressed, on Directory connection (client reading) with 45.66.33.45:80). 45.66.33.45 is tor.dizum.com, a Tor d

Re: [tor-relays] Crashed Relay

2021-11-06 Thread Bleedangel Tor Admin
If you upgraded tor as a package on your Linux OS recently, it may have overwritten your torrc with defaults? It’s a long shot!Sent from ProtonMail for iOS On Sat, Nov 6, 2021 at 12:52, sysmanager7 via tor-relays wrote: I was notified by Uptime Robot that relay

Re: [tor-relays] [Looking for feedback] An easier way to declare families

2021-11-06 Thread Scott Bennett
Nick Mathewson wrote: > On Sat, Nov 6, 2021 at 10:36 AM Nick Mathewson wrote: > > > Hello, relay operators! > > > > I'm hoping to get some feedback from relay operators, particularly > > those who use the MyFamily option, about the best way to deploy > > proposal 321. You can read the proposal