[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Recent wave of abuse on Tor guards



I thought I'd better report this event, as it occurred shortly after upgrading to 3.2.8-rc.

Regarding: BF735F669481EE1CCC348F0731551C933D1E2278

This relay ran 3.2.6-rc through the initial DOS and did not appear to be involved/affected. It was upgraded to 3.2.8-rc yesterday around 0400 UTC, restarted and appeared to resume operation (same level of traffic) without difficulty. 

This morning, logs reveal that a circuit building "storm" commenced around 1000 UTC yesterday. Circuit numbers rose from a typical 23-25K to 160-210K and remained in that range until 1600 UTC, about 30 minutes ago. CPU use was pinned and RAM was intermittently exhausted during this time, but there's no indication the relay went down. Network traffic did not increase significantly during this "storm". Circuit numbers have returned to typical values.

This relay runs on Debian 8 Stable in a AS provided VM with 1GB of RAM. Typical CPU load is ~40%, and typical RAM use is ~50%.

Rick

Attachment: cpu-ram-freeway11.png
Description: PNG image

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays