[tor-relays] Re: How is this attack causing 900 Mbps download and 100 Mbps upload?

[forest via tor-relays <tor-relays@xxxxxxxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2026-10-13 21:41, Khan Krum via tor-relays wrote:
> *forest’s experimental patch:* I noticed that both of my non-exit
> relays report [DoSStreamCreationEnabled disabled] in their heartbeat
> logs.  Forest, when you tested your patch moving BEGIN_DIR handling
> behind the existing stream-creation rate limiter, was
> DoSStreamCreationEnabled actually active on the test relay? Could this
> explain why the patch appeared to have no effect, or is there another
> issue with the per-circuit limiting mechanism?

That's strange. I did set "DoSStreamCreationEnabled 1". Could there be
another bug elsewhere that's causing that option to be a no-op, even
without my patch?

On 2026-10-13 15:04, Mzungu via tor-relays wrote:
> Was it determined that the attack you describe is general and not
> specifically aimed at you and all the relays you operate?

Yes, it is part of a wider attack. Only the relays of mine that obtain
the HSDir flag are attacked, and I'm not the only person being impacted.

On 2026-10-13 10:46, kullikovana via tor-relays wrote:
> Im new to this and thinking about giving up. All the stats are f*cked
> again etc.

A temporary solution is to add "DirCache 0" to your torrc. It will stop
further incidents of this particular attack, but your relay will not be
a guard, just a middle.

Regards,
forest
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQtr8ZXhq/o01Qf/pow+TRLM+X4xgUCas68dQAKCRAw+TRLM+X4
xuVcAQD5dcCA7luOSMtxUYt7IvZAoXfUbkIZryVdFkPQk3G1cAEAvmF7YYLgrYnF
2R/wtHOz89zWsAU1toTub8ZvzT1R/wo=
=AeIV
-----END PGP SIGNATURE-----
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx