[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?



On Wednesday, 16 September 2026 09:00:31 CEST iji--- via tor-relays wrote:

> ~70000 "BEGIN_DIR" within one minute on single non-exit guard relay, normal

> What about enabling "DoSStreamCreationEnabled" ?

DoSStreamCreation* options are useful only for a exit relay.

On exit's I recommend:
ReevaluateExitPolicy 1 + _surgeprotector_

DoSStreamCreationEnabled 1
DoSStreamCreationDefenseType 3
# 0|1|2|3 (Default: 0 = use consensus params) If not defined in the consensus, the value is 2.
# 1: No defense. 2: Reject the stream or resolve request. 3: Close the circuit creating too many streams.

-- 
╰_╯ Ciao Marco!

Debian GNU/Linux

It's free software and it gives you freedom!

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx