Re: [tor-relays] unreplied conntrack sessions

Subject: Re: [tor-relays] unreplied conntrack sessions

Date: Wed, 31 Jan 2018 08:45:27 +1100

Delivery-date: Tue, 30 Jan 2018 16:45:43 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :references:in-reply-to:to; bh=6bR4Xtf2RDSegfZd28Yn6IcHaYTiB0I3Wng6BjyaJVg=; b=PbB91h67fVdb3Cjc+f/fyPSH4ueRjF+fj7FH+Qdugo9CA93Ws9PW9LDpU8bW8Wc+GW IJuBo6seCfrdv5Zp+nGDHnwqvALly5JUZZH77yr+jnEi20oouPb0xC5XkcSUvNyKcsHE Tp02RRk7NQIl56jp7XGe+vo3H2QiVKKKjpprPiE4gExFIPlmjZrLUHlk6mOhAm00QWMh DpBchkTpsWG6XHMjo0VQmnNsNurJ/tMgt9TTFFmRtMNVMr9NRLznvnwEpfYW05KqvzKS PfokXh0XPpNn8R8jNPqCADUTk6//YTApvglfJWuwCZtPdRNFOO2a2/16nsIyR0oTWXjS XSqw==

In-reply-to: <CACKQKwPgXs4LnbXfGjyW7b0J7gbd_H19Bz=yyPfy5EYHNnQ1qw@mail.gmail.com>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <CACKQKwPgXs4LnbXfGjyW7b0J7gbd_H19Bz=yyPfy5EYHNnQ1qw@mail.gmail.com>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On 31 Jan 2018, at 05:54, Quintin <tor-admin@portaltodark.world> wrote:

nusenu wrote:
> If your hoster suspends your server if you exceed 10k concurrent connections
> I'm afraid it is probably not suitable for an exit relay

The response from the hoster was:
> Your server should not have over 20,000 unreplied connections. This is a sign of abuse.

What about the exit node causes such abormally high conntrack sessions?

It is normal for exits to have over 10,000 connections:

* 7000 to relays, and

* 3000 or more to websites.

At the moment, there are extra clients on the network adding some load.

For details and mitigations, see:

https://lists.torproject.org/pipermail/tor-relays/2018-January/014328.html

https://lists.torproject.org/pipermail/tor-relays/2018-January/014100.html

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays