[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Declining traffic

     On Fri, 23 Apr 2010 14:16:57 -0400 Roger Dingledine <arma@xxxxxxx>
>On Fri, Apr 23, 2010 at 02:35:01PM +0200, Timo Schoeler wrote:
>> I'm seeing declining traffic over the last few weeks, please see graph:
>> It dropped from a sustainted 2,5Mbps (or more) to about a fifth, with a
>> massive drop today.
>> I'm running
>> tor-
>> on a 64Bit CentOS machine. Is there something going in the TOR network?
>My first thought is that you updated your openssl rpm in centos, which
>disabled tls renegotiation in yet another new way, and that broke your
>Tor relay. Meaning your relay still worked, but it would only do tls
>renegotiation with other people with centos's particular openssl twist.
>Tor fixes the issue we hope:
>    - Fix SSL renegotiation behavior on OpenSSL versions like on Centos
>      that claim to be earlier than 0.9.8m, but which have in reality
>      backported huge swaths of 0.9.8m or 0.9.8n renegotiation
>      behavior. Possible fix for some cases of bug 1346.
     I hope that, in the future, openssl.org will make some effort to
coordinate such things with the various operating system developers in
a way that avoids turning the situation into such a cl*****f*** again.
It's obviously been a nightmare for you and the rest of the tor project,
and I'd bet heavily that the tor project is not the only one so affected.

>But we haven't yet put out a stable release that includes that patch.
>So if you upgraded to the latest 0.2.2.x-alpha to get the fixes for other
>bugs, you would get the fix for this bug too. Let us know if it works.
     Are there any ideas floating around yet as to why tor doesn't work
with openssl 1.0.0?

                                  Scott Bennett, Comm. ASMELG, CFIAG
* Internet:       bennett at cs.niu.edu                              *
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."                                               *
*    -- Gov. John Hancock, New York Journal, 28 January 1790         *
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/