About 36 hours ago I tentatively disabled all my firewall rules who where limiting connections to my relay.
Everything looks pretty normal, I see no spikes, no errors, no failures.
Jan 15 10:18:36 Tor-relay: Heartbeat: Tor's uptime is 4 days 18:00 hours, with 36,596 circuits open. I've sent 4,962.80 GB and received 4,935.38 GB. Circuit handshake stats since last time: 244,441 / 244,441 TAP, 10,558,601 / 10,558,601 NTor. Since startup, we have initiated 0 v1 connections, 0 v2 connections, 2 v3 connections, and 71,189 v4 connections; and received 1 v1 connections, 31,976 v2 connections, 53,960 v3 connections, and 755,679 v4 connections.
While I still see a lot of Hetzners & Co. in my top 30 connections, they seem to behave better.
Conn Subnet AS Org 18 46.188.***.0/17 AS8334 2COM Co ltd. 17 192.243.***.0/20 AS39572 Internet Service Solution Corp. (ISSC-11) 14 24.60.***.0/14 AS7922 Comcast Cable Communications, LLC (CCCS) 13 192.99.***.0/16 AS16276 OVH Hosting, Inc. (HO-2) 12 212.109.***.0/23 AS29182 CJSC Server WebDC colocation 11 213.239.***.0/18 AS24940 Hetzner Online AG 10 95.65.***.0/17 AS31252 SC STARNET SRL 10 213.239.***.0/18 AS24940 Hetzner Online AG 9 139.59.***.0/16 DigitalOcean, LLC (AP) 9 163.172.***.0/16 AS12876 Online SAS
On Mon, Jan 15, 2018 at 01:44:25PM +0100, Ana Lucia Cortez wrote:
About 36 hours ago I tentatively disabled all my firewall rules who where limiting connections to my relay.
Everything looks pretty normal, I see no spikes, no errors, no failures.
I think things have gotten a little bit better, but I think it is too soon to say that things have passed. I'm still seeing the various connection overloads and circuit overloads that I was seeing earlier.
For those still feeling the memory-bloat pain, I should clean up and share one of the patches I've been testing, which does something similar to the iptables rules that teor has been talking about, but does it inside Tor rather than at the firewall level. This week I hope.
Thanks, --Roger
I think things have gotten a little bit better, but I think it is too soon to say that things have passed. I'm still seeing the various connection overloads and circuit overloads that I was seeing earlier.
For those still feeling the memory-bloat pain, I should clean up and share one of the patches I've been testing, which does something similar to the iptables rules that teor has been talking about, but does it inside Tor rather than at the firewall level. This week I hope.
Will this be an opt-in, opt-out or not configurable? (I assume this will be in the first 0.3.3.x alpha)
tor-relays@lists.torproject.org
-
Ana Lucia Cortez -
nusenu -
Roger Dingledine