Re: [tor-relays] Attack or issue? 4 / 11 M of traffic

Subject: Re: [tor-relays] Attack or issue? 4 / 11 M of traffic

Date: Wed, 31 Jan 2018 08:46:02 +1100

Delivery-date: Tue, 30 Jan 2018 16:46:23 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :references:in-reply-to:to; bh=c1adxoxNnY0v0c6H8J1pVkFgDy0N2NQoR+YTrayMFQs=; b=dXINATW5GNju2744QQvaB3dLmJy6idhckjgTGzZANzTL2li24teiO42noDT6TRWZ3o /mXD5w1ellw6XvumQoXrSZ7FXl9D/aryyRpHp+LnnWt9jrNucw9A4hO9TxvsbTJmIzx4 2sjJdayNzfPwlJnn7A6KuxOoxpYXB07OlsHOxcxx9DJEZ18Va1tVia9vHIt9sXGmzgY0 iBBS25wuaKAluAKkBS3Y+aGyrbtIe0361KSu08vocP1pTDbeuBLzvo8chaW0kDlsG5UA 6nk63c9HtewwbqR6N1h83/sL/YOmB22eGNzotEAd8XLIMM1lrSXnbsUUwrN7i/hxfXvk W/iQ==

In-reply-to: <8EFE1083-73EA-49C1-BA31-504820A61612@sjc.nl>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <8EFE1083-73EA-49C1-BA31-504820A61612@sjc.nl>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

On 30 Jan 2018, at 19:10, Stijn Jonker <sjcjonker@xxxxxx> wrote:

Hi All,

Since around midnight CET, my relay who was happily running almost the same amount of traffic in and outbound, has dropped to 4 Meg in, 11 Meg out according to SNMP on the host. (Cap: 10M/peak 12.5M).

Lots of messages like:
- Channel padding timeout scheduled 304317ms in the past.
- Your computer is too slow to handle this many circuit creation requests! Please consider using the MaxAdvertisedBandwidth config option or choosing a more restricted exit policy. [45685 similar message(s) suppressed in last 60 seconds]

Any suggestions what to check / verify for this?
328E54981C6DDD7D89B89E418724A4A7881E3192

At the moment, there are extra clients on the network adding some load.

For details and mitigations, see:

https://lists.torproject.org/pipermail/tor-relays/2018-January/014328.html

https://lists.torproject.org/pipermail/tor-relays/2018-January/014100.html

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays