[tor-relays] Ensure servers with >2 relays per IP do not get hit by rate limiting firewalls (by other relays)

To: Tor Relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>

Subject: [tor-relays] Ensure servers with >2 relays per IP do not get hit by rate limiting firewalls (by other relays)

From: mail--- via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>

Date: Fri, 3 Feb 2023 10:40:57 +0100 (CET)

Cc: mail@xxxxxxxxxxxxxxxx

Delivered-to: archiver@xxxxxxxx

Delivery-date: Fri, 03 Feb 2023 04:58:00 -0500

Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=lists.torproject.org; s=2022-eugeni; t=1675418275; bh=1wf/jy3pM406naeVaOrul3FzQnmW+bbPLxDd69NTt0E=; h=Date:To:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:From:Reply-To:Cc:From; b=uO925UQ3P+iNqzoAAl0rWxFaSKXgDFMoWK8Z0U15pLcdgM1O6yMs31NHPmml1YKV3 SAgsBt27v/TNqMoNCx3B6N3ovhIXH7JzIrI9EjUe1QVbbRDBpeTPL4SRa/Q92u30fY 1/4Wa1JX3zxBIo6GkKuxjVj9m+SjvB2Yfhzn43mb3vNmkV/KLWhdhrP9f53Q76ddXF TOF4KGmml5vRciaRCd8gGYObUBnng+7tLtOKxDxOXCyPb7fRMBu+ydnEnAI5tDezax qj3s3pXUED3rL4qgFl8Pbp66c8ntNA2H0lmEnjsW92Edw1nJXBcNLzsOQF9G2WiPRx 7CzLZKt4xroMQ==

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Hi Tor operators,

Some of us took/will take advantage of the increase in allowed Tor relays per IPv4 address[1] to reduce costs for running Tor relays. This change will result in more relays sharing the same source IP address than before, which means other relays using rate limits on their ORPorts might need to make sure they do not

unintentionally block relay to relay connectivity.

Many relay operators deploy TCP SYN rate limiting packet filters theses days due to the ongoing DDoS issues. With the increase in Tor relays per IPv4 address, there might be more (new) connection coming from the same source IP.

If you have strict TCP SYN rate limits per source IP, please ensure that this change does not result in blacklisting relay to relay traffic. You could for example whitelist relay IP addresses or have less strict rate limits for them.

Thanks for reading,

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays