Skip to main content
added 73 characters in body, title changed
Source Link

How can I limit the numbers of connections a Tor Relay is able to make? (iptables)

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only.It you add a --dport 35565 (OrPort) you would limit it for Tor only. Add it after --syn. I tried with and without OrPort. Does Tor does not use UDP? Maybe this would be so I don't have to limit the problem..UDP connections.

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

New: A limit like 15New: A limit like 15 works. But 2000 doesn't work. Why, iptables????

iptables -A INPUT -p tcp --syn --dport 25565 -m connlimit --connlimit-above 15 --connlimit-mask 0 -j DROP

works. But 2000

iptables -A INPUT -p tcp --syn -m connlimit --connlimit-above 2000 --connlimit-mask 0 -j DROP

doesn't work. Why, iptables????

Using Ubuntu 21.04....

How can I limit the numbers of connections a Tor Relay is able to make?

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. I tried with and without OrPort. Does Tor use UDP? Maybe this would be the problem...

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

New: A limit like 15 works. But 2000 doesn't work. Why, iptables????

How can I limit the numbers of connections a Tor Relay is able to make? (iptables)

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. Add it after --syn. I tried with and without OrPort. Tor does not use UDP so I don't have to limit the UDP connections.

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

New: A limit like 15 works. But 2000 doesn't work. Why, iptables????

iptables -A INPUT -p tcp --syn --dport 25565 -m connlimit --connlimit-above 15 --connlimit-mask 0 -j DROP

works

iptables -A INPUT -p tcp --syn -m connlimit --connlimit-above 2000 --connlimit-mask 0 -j DROP

doesn't work

Using Ubuntu 21.04....

added 73 characters in body
Source Link

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. I tried with and without OrPort. Does Tor use UDP? Maybe this would be the problem...

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

New: A limit like 15 works. But 2000 doesn't work. Why, iptables????

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. I tried with and without OrPort. Does Tor use UDP? Maybe this would be the problem...

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. I tried with and without OrPort. Does Tor use UDP? Maybe this would be the problem...

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.

New: A limit like 15 works. But 2000 doesn't work. Why, iptables????

Source Link

How can I limit the numbers of connections a Tor Relay is able to make?

My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :( So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January

I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables The only difference here is that it limits the connections for the whole server. I would be fine with it. It you add a --dport 35565 (OrPort) you would limit it for Tor only. I tried with and without OrPort. Does Tor use UDP? Maybe this would be the problem...

Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.