On Tuesday, 13 October 2026 10:36 Tor at 1AEO via tor-relays wrote: > Hello, > Exit DNS health checks now include the recursive resolver each exit used. > Results are on https://exitdnshealth.1aeo.com (raw) and > https://metrics.1aeo.com (aggregated and specific) Nice ;-) A few of mine also returned 'timeouts' today at the time they were being attacked. In general, the entire 185.220.101.32/27 is connected to one PowerDNS Recursor + dnsdist load balancer. > As a reminder, community best practices recommend running a local > non-forwarding recursive resolver (e.g., Unbound or BIND on 127.0.0.1) > rather than pointing to centralized public DNS providers to prevent > upstream query correlation and metadata logging. +1 https://community.torproject.org/relay/setup/exit/ "Don't use any of the big DNS resolvers (Google, OpenDNS, Quad9, Cloudflare, 4.2.2.1-6) as your primary or fallback DNS resolver to avoid centralization." Or, don't be surprised if your relais get a 'MiddleOnly' flag ;-) Nice read: https://nusenu.medium.com/who-controls-tors-dns-traffic-a74a7632e8ca -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!
Attachment:
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx