There’s something going on for a while and I haven’t seen any mentions of it. Wondering if anyone else is experiencing it. The problem is the huge unreasonable spikes of outgoing packets which cause RAM to max out and eventually causes Tor to crash. The interesting part is that even when you shut d…

I’ve noticed this exact behaviour for the first time last week on one of my nodes. The downtime was very minimal for me though, but can imagine stability is bad for users. Hadn’t really looked into it thus far as it isn’t really an issue for now. Detected it by basic metrics, as you can imagine. I’…

@cozybeardev Well, the downtime may be a lot longer than you imagine. I have set up remote monitoring for my relays and I get a message when the port is unresponsive. In my experience, even though Tor is running, it won’t accept new connections. In my case Tor is unresponsive sometimes for 10 minu…

Linking the tor-relays mailing list thread to this topic too: https://lists.torproject.org/pipermail/tor-relays/2024-January/021460.html

I had the same issue on one of my relays. I saw hundreds of short lived connections too. I added these iptables rules and it seems to have helped, but I’m now getting much less throughput through my relay. [image] GitHub - Enkidu-6/tor-ddos: iptables rules for Tor relay operators to... i…

[image] danjurgens: I added these iptables rules and it seems to have helped, but I’m now getting much less throughput through my relay. The throughput you were previously experiencing included a lot of garbage sent and received due to the attack so it’s reasonable to have less usage once the…

[image] Enkidu-6: it’s reasonable to have less usage once the attackers are blocked I remember seing traffic from attack going via connections with other relays. In such case attacker is anonymous and can’t be blocked externally. Did anyone saw this attack going from specific attacker addre…

The frequency of attacks is increasing for me. Last two days two different nodes were hit at around the same time of 6:00 am utc (one on each day).

It happened to one of my relays again with, even with the iptables setup, so I guess that doesn’t prevent it.

I wonder if this has something to do with what I just experienced. I restarted the machine which hosts a few of my instances so I could solve some VPN connectivity issues. After bootstrapping, you can see how CPU and RAM usage increases (as new circuits are created) and after roughly 2 hours there’…

Tor Project Forum

New kind of attack?

Support Relay Operator

Vort January 16, 2024, 8:51am 4

Enkidu-6:

I haven’t seen any mentions of it

Memory limits for Tor process Core Tor

1 year passed, no improvements can be seen. Yesterday DDoS attack on my 0.4.8.9 relay began. Despite having MaxMemInQueues 512 MB and RelayBandwidthRate 4 MBytes options, tor.exe RAM consumption increased to 5380 MB. Looks like Tor have memory leaks. Messages about memory freeing appear in logs, but it does not help to contain RAM consumption growth. Dec 07 08:10:57.000 [notice] We're low on memory (cell queues total alloc: 373453872 buffer total alloc: 140982272, tor compress total alloc: …

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled