Re: [tor-onions] Protect against ddos in tor

On 2/9/16, coderman coderman@gmail.com wrote:

... in addition, keep-alive is useful for DDoS mitigation and performance

• always enable HTTP pipelined request support if possible. With a

rate limit on accept by origin (by AS instead of IP or CIDR?)

and in onion only (not dual public and onion service) this is by stream rather than IP:Port, of course.

in my notes reference to useful thread: "[tor-dev] Hidden Service Scaling" - https://lists.torproject.org/pipermail/tor-dev/2013-October/thread.html#5556

and of course the infamous blog post with input provided by peanut gallery :P "Hidden Services are in a peculiar situation. While they see a loyal fan-base, there are no dedicated Tor developers to take car e of them." - https://blog.torproject.org/blog/hidden-services-need-some-love

best regards,