[tor-relays] Re: Circuit-building DoS wave: 20x peak, 8x sustained circuits on guard relays since Jun 25

Hello.

Toralf Förster wrote:

Some estimation and more considerations were made in [1] and [2]

That's interesting. I suppose I could just disable the limits for other
relays and only keep the limits for non-relays. It'll be as simple as
removing "add @tor_connlimit4 { ip saddr ct count over 16 } drop" from
my nftables ruleset.

I'm waiting for the DDoS attack to subside so I can make sure there are
no false positives being caught. I wonder who is behind them and why.

Regards,
forest

···

_______________________________________________
tor-relays mailing list -- tor-relays@lists.torproject.org
To unsubscribe send an email to tor-relays-leave@lists.torproject.org