Re: [tor-relays] IPv6 Issue with Relay

[teor <teor2345@xxxxxxxxx>]

On 21 Dec 2017, at 16:33, Conrad Rockenhaus <conrad@xxxxxxxxxxxxxx> wrote:

Hello,

One of the relays that I brought online yesterday, ConradsAWSExit (Hash 1B47E33F9D422CC97BD2DDA1F082BFF2FC58E79A) is showing up on Atlas that the IPv6 OR is unreachable.

The other relay is working just fine with IPv6.

I’ve confirmed that the following entries are in torrc:

ORPort 9001
ORPort [2600:1f14:ede:d601:e107:1a4b:ba3:803]:9001
IPv6Exit 1

Are these the only ORPort entries in your torrc?

Have you restarted or HUP'd the relay since you last edited the torrc?

Just to confirm, here’s the output from ifconfig, that is the IP:

inet6 2600:1f14:ede:d601:e107:1a4b:ba3:803  prefixlen 64  scopeid 0x0<global>

This is what Relay Search (Atlas) says:

Unreachable OR Addresses

[2600:1f14:ede:d601:72c2:a87d:960d:c334]:9001

The last 8 bytes of the address your relay is advertising,

are not the same as the address on your machine.

Also, you have set IPv6Exit, but Relay Search says:

IPv6 Exit Policy Summary

reject
  1-65535

Relay Search data is usually up to 2.5 hours behind, but it can lag more.

Please copy and paste the notice-level Tor logs that mention your ORPort,

DirPort, and Exit settings, so we can see what Tor is actually doing.

I have confirmed that all of the applicable Security Group rules are configured correctly:

Custom TCP Rule
TCP
9001
0.0.0.0/0
ORPort
Custom TCP Rule
TCP
9001
::/0
ORPort
Custom TCP Rule
TCP
9030
0.0.0.0/0
DIRPort
Custom TCP Rule
TCP
9030
::/0
DIRPort

By the way, there are no IPv6 DirPorts :-)

Plus, I have confirmed with a telnet -6 to port 9001 from both my house and my servers at OVH in Canada that I’m able to connect to port 9001 via the IPv6 address on this node.

What are the exact commands you used?

This shows that the relay is listening on whatever IPv6 address and port

you checked, but it doesn't show which IPv6 address the relay is

advertising.

So, my question is…what could I be missing here that is causing atlas to say that IPv6 is unreachable? I’ve been looking into this through the day and would like to kind of close it out, got a bunch of emails to catch up on hehe :D, so any input would be appreciated.

There are a few more detailed troubleshooting things we can try,

like checking consensus health and the exact content of your

relay's descriptor and the authorities' votes.

If the above steps don't help, I'm happy to go through them later,

when I'm using a more capable device.

T

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays