# Relay Operator

**URL:** https://forum.torproject.org/c/support/relay-operator/17.md?page=7

[Latest](https://forum.torproject.org/latest.md) · [Categories](https://forum.torproject.org/categories.md) · [Tags](https://forum.torproject.org/tags.md)

**Page:** 8

---

## [Errors when moving relay: \`Could not open "/var/lib/tor/keys/secret\_id\_key": Permission denied\` & \`Looks like your keypair has changed?\`](https://forum.torproject.org/t/errors-when-moving-relay-could-not-open-var-lib-tor-keys-secret-id-key-permission-denied-looks-like-your-keypair-has-changed/17087)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 9\
**Last updated:** [February 14, 2025, 9:31pm UTC](https://forum.torproject.org/t/errors-when-moving-relay-could-not-open-var-lib-tor-keys-secret-id-key-permission-denied-looks-like-your-keypair-has-changed/17087 "2025-02-14T21:31:27Z")

</div>

How can I fix secret\_id\_key permission error? How can I fix the http status 400 ("Looks like your keypair has changed? This authority previously recorded a different RSA identity for this Ed25519 identity error? Would r…

---

## [Granting usage rights of privileged ports for services running as non-root user](https://forum.torproject.org/t/granting-usage-rights-of-privileged-ports-for-services-running-as-non-root-user/17369)

<div class="topic-metadata">

**Author:** [@oldFashionIBM](https://forum.torproject.org/u/oldFashionIBM)\
**Replies:** 0\
**Last updated:** [February 12, 2025, 4:37pm UTC](https://forum.torproject.org/t/granting-usage-rights-of-privileged-ports-for-services-running-as-non-root-user/17369 "2025-02-12T16:37:32Z")

</div>

Purpose: Tor obfs4 bridge privileged rights for job running as a non-root user Source with instructions this is based on can be found here Ocurring error: Editing “/etc/systemd/system/tor@.service.d/override.conf” ca…

---

## [Error when granting privileged to services running as non-root user](https://forum.torproject.org/t/error-when-granting-privileged-to-services-running-as-non-root-user/17368)

<div class="topic-metadata">

**Author:** [@oldFashionIBM](https://forum.torproject.org/u/oldFashionIBM)\
**Replies:** 0\
**Last updated:** [February 12, 2025, 4:34pm UTC](https://forum.torproject.org/t/error-when-granting-privileged-to-services-running-as-non-root-user/17368 "2025-02-12T16:34:33Z")

</div>

Purpose: Tor obfs4 bridge privileged rights for job running as a non-root user Source with instructions this is based on can be found here Ocurring error: Editing “/etc/systemd/system/tor@.service.d/override.conf” ca…

---

## [Snowflake or webtunnel just for me](https://forum.torproject.org/t/snowflake-or-webtunnel-just-for-me/13550)

<div class="topic-metadata">

**Author:** [@Sticky](https://forum.torproject.org/u/Sticky)\
**Replies:** 16\
**Last updated:** [February 11, 2025, 4:44pm UTC](https://forum.torproject.org/t/snowflake-or-webtunnel-just-for-me/13550 "2025-02-11T16:44:55Z")

</div>

Hello everyone, how can I configure snowflake or webtunnel on my server just for myself?

---

## [Do snowflake bridges' IP get blocked by countries that block Tor relays/bridges?](https://forum.torproject.org/t/do-snowflake-bridges-ip-get-blocked-by-countries-that-block-tor-relays-bridges/17325)

<div class="topic-metadata">

**Author:** [@anon15142117](https://forum.torproject.org/u/anon15142117)\
**Replies:** 4\
**Last updated:** [February 10, 2025, 3:35pm UTC](https://forum.torproject.org/t/do-snowflake-bridges-ip-get-blocked-by-countries-that-block-tor-relays-bridges/17325 "2025-02-10T15:35:37Z")

</div>

Have there been cases where snowflake bridges stopped receiving traffic from a specific country that blocked their IP’s? Like is there the same risk that your IP will get blacklisted in some country like with obfs4 bridg…

---

## [Middle/guard relay or standalone snowflake bridge, which is currently needed more?](https://forum.torproject.org/t/middle-guard-relay-or-standalone-snowflake-bridge-which-is-currently-needed-more/17084)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 2\
**Last updated:** [February 10, 2025, 1:55pm UTC](https://forum.torproject.org/t/middle-guard-relay-or-standalone-snowflake-bridge-which-is-currently-needed-more/17084 "2025-02-10T13:55:00Z")

</div>

Hi, I know that exit relays and WebTunnel bridges are in most need but I don’t want the legal liabilities that come from running exit relays and don’t currently have the time to learn to set up a domain and the other ste…

---

## [MyFamily on two different VPS providers](https://forum.torproject.org/t/myfamily-on-two-different-vps-providers/17326)

<div class="topic-metadata">

**Author:** [@antipezv](https://forum.torproject.org/u/antipezv)\
**Replies:** 4\
**Last updated:** [February 10, 2025, 8:43am UTC](https://forum.torproject.org/t/myfamily-on-two-different-vps-providers/17326 "2025-02-10T08:43:17Z")

</div>

I have a quick question about the MyFamily configuration. Should I still set this if I’m running two relays on different VPS providers?

---

## [Running snowflake proxies only for users in certain countries/regions](https://forum.torproject.org/t/running-snowflake-proxies-only-for-users-in-certain-countries-regions/16380)

<div class="topic-metadata">

**Author:** [@eastcoast131](https://forum.torproject.org/u/eastcoast131)\
**Replies:** 10\
**Last updated:** [February 7, 2025, 9:52am UTC](https://forum.torproject.org/t/running-snowflake-proxies-only-for-users-in-certain-countries-regions/16380 "2025-02-07T09:52:17Z")

</div>

Is it possible to only be a snowflake for e.g. China, Russia, North Korea type countries?

---

## [Blacklisted IP (probably)](https://forum.torproject.org/t/blacklisted-ip-probably/17238)

<div class="topic-metadata">

**Author:** [@antipezv](https://forum.torproject.org/u/antipezv)\
**Replies:** 1\
**Last updated:** [February 5, 2025, 6:15pm UTC](https://forum.torproject.org/t/blacklisted-ip-probably/17238 "2025-02-05T18:15:30Z")

</div>

I created my first relay a few days ago, but I’ve been getting the following errors: 13:59:31 \[WARN\] http status 400 ("Suspicious relay address range -- if you think this is a mistake, please set a valid email address i…

---

## [Tor repodata 404 error & Fedora automatic updates](https://forum.torproject.org/t/tor-repodata-404-error-fedora-automatic-updates/16838)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 9\
**Last updated:** [February 3, 2025, 10:52am UTC](https://forum.torproject.org/t/tor-repodata-404-error-fedora-automatic-updates/16838 "2025-02-03T10:52:23Z")

</div>

Following the Middle/Guard relay guide, yesterday I believe I installed dnf-automaticand received an error message (I think it was command not recognized) when I entered systemctl enable --now dnf-automatic-install.timer.…

---

## [How to change a bridge from obfs4 to WebTunnel](https://forum.torproject.org/t/how-to-change-a-bridge-from-obfs4-to-webtunnel/17019)

<div class="topic-metadata">

**Author:** [@Aleff](https://forum.torproject.org/u/Aleff)\
**Replies:** 2\
**Last updated:** [January 28, 2025, 7:35am UTC](https://forum.torproject.org/t/how-to-change-a-bridge-from-obfs4-to-webtunnel/17019 "2025-01-28T07:35:30Z")

</div>

I saw that there is a need for WebTunnel Bridge and would like to contribute by modifying (if possible) my obfs4 bridge. Is it possible to do something like this? If so how?

---

## [Enable Tor Package Repository in Debian returns errors for raspberry pi4](https://forum.torproject.org/t/enable-tor-package-repository-in-debian-returns-errors-for-raspberry-pi4/17068)

<div class="topic-metadata">

**Author:** [@oldFashionIBM](https://forum.torproject.org/u/oldFashionIBM)\
**Replies:** 1\
**Last updated:** [January 25, 2025, 6:50pm UTC](https://forum.torproject.org/t/enable-tor-package-repository-in-debian-returns-errors-for-raspberry-pi4/17068 "2025-01-25T18:50:45Z")

</div>

My first post meant as feedback. I have a raspberry pi4 running on debian 12 (bookworm). I an error message after following the instructions on page enable Tor Package Repository in Debian, although the raspberry pi met…

---

## [Trying to set up a tor relay (Middle/guard)](https://forum.torproject.org/t/trying-to-set-up-a-tor-relay-middle-guard/17045)

<div class="topic-metadata">

**Author:** [@cizo.tor](https://forum.torproject.org/u/cizo.tor)\
**Replies:** 2\
**Last updated:** [January 24, 2025, 5:25pm UTC](https://forum.torproject.org/t/trying-to-set-up-a-tor-relay-middle-guard/17045 "2025-01-24T17:25:27Z")

</div>

Hi, I am trying to setup a relay on a njalla vps but i a struggling ! I use Debian 12. I have open my port 443 with sudo iptables -A INPUT -p tcp --dport 443 -j ACCEPT In my torrc file i have change/unchecked : Cont…

---

## [Running Tor relay using Orbot on Android!?](https://forum.torproject.org/t/running-tor-relay-using-orbot-on-android/16989)

<div class="topic-metadata">

**Author:** [@sibling](https://forum.torproject.org/u/sibling)\
**Replies:** 1\
**Last updated:** [January 22, 2025, 6:21am UTC](https://forum.torproject.org/t/running-tor-relay-using-orbot-on-android/16989 "2025-01-22T06:21:38Z")

</div>

Hey! So, you might know that I have been running Snowflake Bridge (Kindness mode) on my Android TV via the Orbot app, sideloaded from F-Droid on my Android TV… I was just scrolling and came across this option in settin…

---

## [Recycling a "burned" bridge IP for snowflake](https://forum.torproject.org/t/recycling-a-burned-bridge-ip-for-snowflake/16910)

<div class="topic-metadata">

**Author:** [@atari](https://forum.torproject.org/u/atari)\
**Replies:** 6\
**Last updated:** [January 21, 2025, 10:43am UTC](https://forum.torproject.org/t/recycling-a-burned-bridge-ip-for-snowflake/16910 "2025-01-21T10:43:46Z")

</div>

My question is quite simple but the answer is a little difficult in my opinion: Consider a contract for a server which has still 6 month till the end and the initial setup of a bridge is burned in one country lets call …

---

## [ \[WARN\] Your server has not managed to confirm reachability for its ORPort(s)](https://forum.torproject.org/t/warn-your-server-has-not-managed-to-confirm-reachability-for-its-orport-s/16967)

<div class="topic-metadata">

**Author:** [@drforbin](https://forum.torproject.org/u/drforbin)\
**Replies:** 0\
**Last updated:** [January 21, 2025, 12:19am UTC](https://forum.torproject.org/t/warn-your-server-has-not-managed-to-confirm-reachability-for-its-orport-s/16967 "2025-01-21T00:19:31Z")

</div>

Ok. I am getting this ’ \[WARN\] Your server has not managed to confirm reachability for its ORPort(s) at │ 24.196.214.71:9001. Relays do not publish descriptors until their ORPort and DirPort are │ reachable. Please…

---

## [Why is relay country different from IP country?](https://forum.torproject.org/t/why-is-relay-country-different-from-ip-country/16912)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 1\
**Last updated:** [January 19, 2025, 8:10am UTC](https://forum.torproject.org/t/why-is-relay-country-different-from-ip-country/16912 "2025-01-19T08:10:38Z")

</div>

Reviewing Relay Search, I noticed that the country doesn’t match the geo location of the relay’s IP. Why is there a discrepency?

---

## [Relay advertised bandwidth speed is far lower than VPS advertised bandwidth](https://forum.torproject.org/t/relay-advertised-bandwidth-speed-is-far-lower-than-vps-advertised-bandwidth/16911)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 2\
**Last updated:** [January 18, 2025, 9:18am UTC](https://forum.torproject.org/t/relay-advertised-bandwidth-speed-is-far-lower-than-vps-advertised-bandwidth/16911 "2025-01-18T09:18:54Z")

</div>

My VPS is supposed to be roughly 1Gbp/s but the Relay Search indicates that the advertised bandwidth is 4.53 MiB/s: Bandwidth rate: 1024 MiB/s Bandwidth burst: 1024 MiB/s Observed bandwidth: 4.53 MiB/s Why is there s…

---

## [What is the point of restoring \`pt\_state/\` bridge lines?](https://forum.torproject.org/t/what-is-the-point-of-restoring-pt-state-bridge-lines/16914)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 2\
**Last updated:** [January 18, 2025, 9:18am UTC](https://forum.torproject.org/t/what-is-the-point-of-restoring-pt-state-bridge-lines/16914 "2025-01-18T09:18:51Z")

</div>

The keep the same identity guide instructs bridge operators to backup and restore their bridge line file (pt\_state/). Since from my understanding, bridges don’t have trust ratings (like the ramp up phases that relays hav…

---

## [How can I change tor from running on root to an unprivileged user? - Debian 12](https://forum.torproject.org/t/how-can-i-change-tor-from-running-on-root-to-an-unprivileged-user-debian-12/16915)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 1\
**Last updated:** [January 17, 2025, 5:45pm UTC](https://forum.torproject.org/t/how-can-i-change-tor-from-running-on-root-to-an-unprivileged-user-debian-12/16915 "2025-01-17T17:45:32Z")

</div>

On Debian 12, I tried installing Tor on an unprivileged user but couldn’t figure out how to get sudo to work from this user (entering the root password on password prompts would return a sudo permission error so I just f…

---

## [How do we get bridge line backup file from Docker container?](https://forum.torproject.org/t/how-do-we-get-bridge-line-backup-file-from-docker-container/16913)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 1\
**Last updated:** [January 17, 2025, 5:00pm UTC](https://forum.torproject.org/t/how-do-we-get-bridge-line-backup-file-from-docker-container/16913 "2025-01-17T17:00:33Z")

</div>

The Backup Tor Identity Keys guide is missing how to backup the bridge lines file pt\_state/ if we are running a standalone snowflake in Docker. What would the process be?

---

## [Help - Debian 12 Tor logs won't show latest logs but Relay Search says online](https://forum.torproject.org/t/help-debian-12-tor-logs-wont-show-latest-logs-but-relay-search-says-online/16888)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 6\
**Last updated:** [January 17, 2025, 4:16pm UTC](https://forum.torproject.org/t/help-debian-12-tor-logs-wont-show-latest-logs-but-relay-search-says-online/16888 "2025-01-17T16:16:25Z")

</div>

Relay Search indicates that the relay has uptime of over 10 hours and but the tor logs are stuck at Jan 15 03:50:22.000. Am I supposed to do something to see the latest logs like how in Fedora, you have to press “down” o…

---

## [Tor stuck at \`Anonymizing overlay network for TCP (multi-instance-master)\`](https://forum.torproject.org/t/tor-stuck-at-anonymizing-overlay-network-for-tcp-multi-instance-master/16865)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 7\
**Last updated:** [January 16, 2025, 2:48pm UTC](https://forum.torproject.org/t/tor-stuck-at-anonymizing-overlay-network-for-tcp-multi-instance-master/16865 "2025-01-16T14:48:58Z")

</div>

I installed Tor on Debian but can’t get it to connect, even after restarting the service multiple times with sudo systemctl restart tor and rebooting the machine. I used the following torrc setup which previously worked …

---

## [Don't create a publicly available webpage showing bandwidth history or any statistics about the machine (e.g. CPU/RAM usage) as these can be used in surprising ways to attack users](https://forum.torproject.org/t/dont-create-a-publicly-available-webpage-showing-bandwidth-history-or-any-statistics-about-the-machine-e-g-cpu-ram-usage-as-these-can-be-used-in-surprising-ways-to-attack-users/16451)

<div class="topic-metadata">

**Author:** [@atari](https://forum.torproject.org/u/atari)\
**Replies:** 4\
**Last updated:** [January 15, 2025, 2:16pm UTC](https://forum.torproject.org/t/dont-create-a-publicly-available-webpage-showing-bandwidth-history-or-any-statistics-about-the-machine-e-g-cpu-ram-usage-as-these-can-be-used-in-surprising-ways-to-attack-users/16451 "2025-01-15T14:16:09Z")

</div>

don’t create a publicly available webpage showing bandwidth history or any statistics about the machine (e.g. CPU/RAM usage) as these can be used in surprising ways to attack users. from Expectations for relay operato…

---

## [ONe of my bridges has status: Error: We got an ECONNREFUSED while connecting to the target OR](https://forum.torproject.org/t/one-of-my-bridges-has-status-error-we-got-an-econnrefused-while-connecting-to-the-target-or/16861)

<div class="topic-metadata">

**Author:** [@potlatch](https://forum.torproject.org/u/potlatch)\
**Replies:** 1\
**Last updated:** [January 15, 2025, 8:47am UTC](https://forum.torproject.org/t/one-of-my-bridges-has-status-error-we-got-an-econnrefused-while-connecting-to-the-target-or/16861 "2025-01-15T08:47:45Z")

</div>

This is new to me and only one of my bridges with this status message. The complete message is: vanilla IPv4: dysfunctional Bandwidth Ratio: 0.794799 Error: We got an ECONNREFUSED while connecting to the target OR. …

---

## [Webtunnel through HTTP PROXY](https://forum.torproject.org/t/webtunnel-through-http-proxy/16851)

<div class="topic-metadata">

**Author:** [@verbal666](https://forum.torproject.org/u/verbal666)\
**Replies:** 5\
**Last updated:** [January 15, 2025, 9:03am UTC](https://forum.torproject.org/t/webtunnel-through-http-proxy/16851 "2025-01-15T09:03:15Z")

</div>

Hello. Is there a way to make a webtunnel bridge client pass through an HTTP PROXY? WORKING \[direct\] ... UseBridges 1 ClientTransportPlugin webtunnel exec \<path\_to\>/webtunnel\_client Bridge webtunnel x.x.x.x:xxx xxxxxx…

---

## [Error installing Tor gpg key in Debian 12 \`-bash: gpg: command not found\`](https://forum.torproject.org/t/error-installing-tor-gpg-key-in-debian-12-bash-gpg-command-not-found/16862)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 1\
**Last updated:** [January 15, 2025, 8:47am UTC](https://forum.torproject.org/t/error-installing-tor-gpg-key-in-debian-12-bash-gpg-command-not-found/16862 "2025-01-15T08:47:43Z")

</div>

I’m trying to set up the Tor repo on Debian 12 following the guide but I’m getting an error message when attempting to add the gpg key used to sign the packages. How can I make this work? root@debian-12:/etc/apt/sources…

---

## [File to save relay phase progress?](https://forum.torproject.org/t/file-to-save-relay-phase-progress/16856)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 3\
**Last updated:** [January 15, 2025, 8:16am UTC](https://forum.torproject.org/t/file-to-save-relay-phase-progress/16856 "2025-01-15T08:16:56Z")

</div>

What’s the name and location of the file that I need to transfer which would allow me to save a relay’s phase progress in case of an OS reinstall?

---

## [How to correctly add PGP key to torrc ContactInfo?](https://forum.torproject.org/t/how-to-correctly-add-pgp-key-to-torrc-contactinfo/16831)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 6\
**Last updated:** [January 14, 2025, 1:02pm UTC](https://forum.torproject.org/t/how-to-correctly-add-pgp-key-to-torrc-contactinfo/16831 "2025-01-14T13:02:16Z")

</div>

I’ve been trying to add my PGP key to the torrc file under the Contact Info but doing so keeps giving me the following error message: \[warn\] Failed to parse/validate config: Unknown option '-----BEGIN PGP PUBLIC KEY BLOC…

---

## [How much bandwidth is "enough" mirror directory information for others?](https://forum.torproject.org/t/how-much-bandwidth-is-enough-mirror-directory-information-for-others/16846)

<div class="topic-metadata">

**Author:** [@yummy\_onion](https://forum.torproject.org/u/yummy_onion)\
**Replies:** 1\
**Last updated:** [January 14, 2025, 11:37am UTC](https://forum.torproject.org/t/how-much-bandwidth-is-enough-mirror-directory-information-for-others/16846 "2025-01-14T11:37:24Z")

</div>

I saw the option ## Uncomment this to mirror directory information for others. Please do if you have enough bandwidth. How much bandwidth is considered “enough?” How can we know what Tor has determined to be our bandw…

[Previous page](https://forum.torproject.org/c/support/relay-operator/17.md?page=6)

[Next page](https://forum.torproject.org/c/support/relay-operator/17.md?page=8)
