[tor-relays] DoS attack on Tor exit relay

To: "tor-relays@xxxxxxxxxxxxxxxxxxxx" <tor-relays@xxxxxxxxxxxxxxxxxxxx>

Subject: [tor-relays] DoS attack on Tor exit relay

From: potlatch <potlatch@xxxxxxxxxxxxxx>

Date: Wed, 31 Jul 2019 03:14:22 +0000

Delivery-date: Wed, 31 Jul 2019 04:59:48 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1564542871; bh=ul2FX2cKPosvlvJ2TUoeqsjRaeVEqeBjI+GtWc3+A/I=; h=Date:To:From:Reply-To:Subject:Feedback-ID:From; b=JeDziQkxFbg1QOTaRSA/2n+xZKZ+b7X87xzKfkAYmRGeFYDgNJjlEnVJ8IoGNYGGy mzLzNrnxZ5Dxl1G/kR3RCDcGxbfVbcTSKQtV2/L6l0QSHxMPtMjM2wAPA9lYfLDihZ 52VeBm2caDbA39nW59po/uldJSQTflxknpdYWh3Y=

Feedback-id: JCf3d0soAttaB_OpNPJ20ohR2llANMLwzqA_A6HtVytqRrobPzyTJ7oqmKBf_nxRTtXIC9lwlIwkWthaPBUkDQ==:Ext:ProtonMail

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

Hello Tor users,

Help me with a problem please. I have a small exit/backup & directory VPS in Finland [1]. This last week the server (and Tor) have been overwhelmed with non-Tor IP addresses. This may be a small version of a DoS attack. I took the server down for a few days but when I restarted it the attack was there before Tor users. Eventually, the load caused kernal crash.

I noticed this last week, that my Consensus Weight had dropped from 5500 to 68.

Does anyone have an efficient way to defeat this ongoing attack?

--potlatch

[1] 9B31F1F1C1554F9FFB3455911F82E818EF7C7883 TorExitFinland

Sent with ProtonMail Secure Email.

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays