My relay nicknamed dobbo appear to be partly in "bad standings" on most of the consensus authorities.
I stumbled upon another relay - matlink - with a similar faith.
I suspect something in my setup to be the culprit. The only thing in the log that looks a bit suspicious is a warning about a mismatch in ssl versions - "OpenSSL version from headers does not match the version we're running with".
Plenty of traffic - just curious..
/Ole Rydahl
(Moving email communication to tor-relays)
Hi Ole,
Ole Rydahl:
My relay nicknamed dobbo appear to be partly in "bad standings" on most of the consensus authorities.> I stumbled upon another relay - matlink - with a similar faith.
I suspect something in my setup to be the culprit. The only thing in the log that looks a bit suspicious is a warning about a mismatch in ssl versions - "OpenSSL version from headers does not match the version we're running with".
Could you please provide more details of your system, how did you install tor and also the complete log line(s)? This could help to spot potential issues.
Your relay seems to be running version 0.3.1.10 it will good to update it to the newest version.
Cheers, ~Vasilis
Hi,
The router typically has a low load - at present < 0.2, while serving 4000+ connections - 27% of the maximum 16384 connections. It reports 70 Mbyte free memory. Once a month or less it reports a ddos attach. I have stressed the router by sending a burst - 56 Mbyte/s - fragmented 64 kbyte pings. It generates a load of 4 but everything else appear to work as expected. Below is the repeated sequence in the log from the router
[...]
/Ole
Can't seem to find anything obvious in logs. It seems that sometimes IPv6 connectivity/routing may not be that ideal but this is just an attempt (of mine) to find out what's wrong and I can be completely wrong.
Would you like to "experiment" by temporarily disabling your IPv6 address and report back if you see any changes?
Cheers, ~Vasilis
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne af Vasilis Sendt: 30. marts 2018 16:33 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
Hi,
The router typically has a low load - at present < 0.2, while serving 4000+ connections - 27% of the maximum 16384 connections. It reports 70 Mbyte free memory. Once a month or less it reports a ddos attach. I have stressed the router by sending a burst - 56 Mbyte/s - fragmented 64 kbyte pings. It generates a load of 4 but everything else appear to work as expected. Below is the repeated sequence in the log from the router
[...]
/Ole
Can't seem to find anything obvious in logs. It seems that sometimes IPv6 connectivity/routing may not be that ideal but this is just an attempt (of mine) to find out what's wrong and I can be completely wrong.
Would you like to "experiment" by temporarily disabling your IPv6 address and report back if you see any changes?
Cheers, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162
Hi,
Disabled IPv6 some hours ago (nyx/menu/reset tor) with no change on the moods of 6 of the muses. They still don't consider me "stable".
Still plenty of traffic!
/Ole
On 31. Mar 2018, at 14:45, Ole Rydahl ole_rydahl@qp12.dk wrote: Disabled IPv6 some hours ago (nyx/menu/reset tor) with no change on the moods of 6 of the muses. They still don't consider me "stable".
The respective dirauths aren't muses, they simply function as they are designed - they treat relays with unreliable connection histories as unstable. Having a working connection for a few days doesn't change that history, so you'll have to be patient to see an effect.
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne
af
Sebastian Hahn Sendt: 31. marts 2018 18:15 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
On 31. Mar 2018, at 14:45, Ole Rydahl ole_rydahl@qp12.dk wrote: Disabled IPv6 some hours ago (nyx/menu/reset tor) with no change on the
moods of 6 of the muses. They still don't consider me "stable".
The respective dirauths aren't muses, they simply function as they are designed - they treat relays with unreliable connection histories as
unstable.
Having a working connection for a few days doesn't change that history, so you'll have to be patient to see an effect.
I'll be patient! (It took a while to obtain the stable flag from my wife too.) /Ole
Hi Ole,
Ole Rydahl:
I'll be patient! (It took a while to obtain the stable flag from my wife too.) /Ole
It seems that your relay has gained the stable flag, can you please re-enable IPv6 connectivity so that we can find if that was the issue?
Thanks, ~Vasilis
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne af Vasilis Sendt: 10. april 2018 13:08 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
Hi Ole,
Ole Rydahl:
I'll be patient! (It took a while to obtain the stable flag from my wife too.) /Ole
It seems that your relay has gained the stable flag, can you please re-enable IPv6 connectivity so that we can find if that was the issue?
Thanks, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162
Hi Vasilis,
I'm in France right now, but I'll re-enable IPv6 sometime Sunday and let you know.
/Ole
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne af Vasilis Sendt: 10. april 2018 13:08 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
Hi Ole,
Ole Rydahl:
I'll be patient! (It took a while to obtain the stable flag from my wife too.) /Ole
It seems that your relay has gained the stable flag, can you please re-enable IPv6 connectivity so that we can find if that was the issue?
Thanks, ~Vasilis -- Fingerprint: 8FD5 CF5F 39FC 03EB B382 7470 5FBF 70B1 D126 0162 Pubkey: https://pgp.mit.edu/pks/lookup?op=get&search=0x5FBF70B1D1260162
Hi Vasilis,
I enabled IPv6 yesterday evening. The relay maintained the flags including the stable-flag and got the additional IPv6 flag.
As far as I can see, there is a quite large difference in the required "running" period between the 9 directory authorities. I interpreted that as an issue with my setup. 3 authorities voted stable after a few days, while the 6 remaining needs almost 30 days of observed running before granting the stable-flag.
Regards Ole
On 15. Apr 2018, at 10:03, Ole Rydahl ole_rydahl@qp12.dk wrote: As far as I can see, there is a quite large difference in the required "running" period between the 9 directory authorities. I interpreted that as an issue with my setup. 3 authorities voted stable after a few days, while the 6 remaining needs almost 30 days of observed running before granting the stable-flag.
This is completely expected as 3 dirauths aren't currently equipped to notice ipv6 reachability failure.
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne
af
Sebastian Hahn Sendt: 15. april 2018 10:05 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
On 15. Apr 2018, at 10:03, Ole Rydahl ole_rydahl@qp12.dk wrote: As far as I can see, there is a quite large difference in the required
"running" period between the 9 directory authorities. I interpreted that
as an
issue with my setup. 3 authorities voted stable after a few days, while
the 6
remaining needs almost 30 days of observed running before granting the
stable-
flag.
This is completely expected as 3 dirauths aren't currently equipped to
notice
ipv6 reachability failure.
It's my experience that announcing ipv6 capability and actually not providing - results in not being part of the cached consensus since only 3 authorities acknowledge your relay as running.
My situation was different all 9 directory authorities acknowledge my relay as running, but initially only 3 granted me the stable flag.
Vasilis suggested an experiment where I stopped announcing ipv6-support a while ago. As a follow up - after I had obtained the stable flag from all 9 directory authorities - Vasilis suggested that I re-enabled ipv6 capability.
/Ole
Hi,
On 15. Apr 2018, at 20:20, Ole Rydahl ole_rydahl@qp12.dk wrote: It's my experience that announcing ipv6 capability and actually not providing - results in not being part of the cached consensus since only 3 authorities acknowledge your relay as running.
My situation was different all 9 directory authorities acknowledge my relay as running, but initially only 3 granted me the stable flag.
Vasilis suggested an experiment where I stopped announcing ipv6-support a while ago. As a follow up - after I had obtained the stable flag from all 9 directory authorities - Vasilis suggested that I re-enabled ipv6 capability.
I read the thread, I think what's happened is that your ipv6 connection is intermittently flaky, not down all the time. That means dirauths with v6 note many more failures than those without it and that causes them to have a much worse availability history for you.
Cheers Sebastian
-----Oprindelig meddelelse----- Fra: tor-relays [mailto:tor-relays-bounces@lists.torproject.org] På vegne
af
Sebastian Hahn Sendt: 15. april 2018 20:54 Til: tor-relays@lists.torproject.org Emne: Re: [tor-relays] No stable flag from 6 out of 9?
Hi,
On 15. Apr 2018, at 20:20, Ole Rydahl ole_rydahl@qp12.dk wrote: It's my experience that announcing ipv6 capability and actually not providing - results in not being part of the cached consensus since only 3 authorities acknowledge your relay as running.
My situation was different all 9 directory authorities acknowledge my relay as running, but initially only 3 granted me the stable flag.
Vasilis suggested an experiment where I stopped announcing ipv6-support a while ago. As a follow up - after I had obtained the stable flag from all 9 directory authorities - Vasilis suggested that I
re-
enabled ipv6 capability.
I read the thread, I think what's happened is that your ipv6 connection is intermittently flaky, not down all the time. That means dirauths with v6
note
many more failures than those without it and that causes them to have a
much
worse availability history for you.
Cheers Sebastian
Hi Sebastian,
You are probably right, but I assume, the relay would lose cached consensus - for a period - in case of lost ipv6 connectivity?
Nothing in the log however indicates that. Neither before I disabled ipv6 nor after I re-enabled it. For other purposes, I ping6 Google every 5 minutes and send a mail to myself in case of no reply. 2 occasions during the last 2 month on March 6th (for 50 minutes) and April 10th (for 1 hour). The later one happened while my ipv6 capability was unannounced (Vasilis' suggestion).
Anyway the traffic is flowing nicely now - as it did even before the stable flag was granted. I suggest we consider the problem solved.
Regards Ole
tor-relays@lists.torproject.org
-
Ole Rydahl -
Sebastian Hahn -
Vasilis