[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
From: khankrum359--- via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>
Date: Tue, 13 Oct 2026 21:51:57 -0000
Cc: khankrum359@xxxxxxxxx
In-reply-to: <d12e89da94be5452171046d3d2e4b425@riseup.net>
List-id: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays.lists.torproject.org>
References: <d12e89da94be5452171046d3d2e4b425@riseup.net>
Reply-to: "support and questions about running Tor relays (exit, non-exit, bridge)" <tor-relays@xxxxxxxxxxxxxxxxxxxx>
User-agent: HyperKitty on https://lists.torproject.org/

Hi forest, and everyone,

A brief follow-up: I have posted a more detailed report of another severe BEGIN_DIR storm affecting two of my non-exit ARM relays on October 12–13 in a separate thread, to avoid making this already long discussion even longer.

The observations include:

Successfully observed peaks of approximately 2,300 and 2,802 BEGIN_DIR/s.

MetricsPort failures affecting more than half of our monitoring samples.

Near-simultaneous loss of HSDir on both relays.

Subsequent Guard recovery and the appearance of StaleDesc.

A question for forest about the experimental BEGIN_DIR rate-limiting patch and DoSStreamCreationEnabled.

The detailed report is in this thread:

https://lists.torproject.org/mailman3/hyperkitty/list/tor-relays@xxxxxxxxxxxxxxxxxxxx/thread/NKYRY6ZMRBUJAD2QE6OVO7GT6GF5NMEZ/

I would appreciate any technical feedback there.

Regards,
Khan Krum
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx

References:
- [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
  - From: forest via tor-relays

Prev by Author: [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
Next by Author: [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
Previous by thread: [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
Next by thread: [tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?
Index(es):
- Author
- Thread