1

I have a HS server for web proxying purposes with an onion address. It's in a test phase at the moment and traffic is low, but from time to time the web server is not reachable using Tor Browser, however it is still accessible from a clearnet browser. I have checked Tor logs during connection breakdown:

Dec 28 11:05:09.000 [notice] Bootstrapped 100%: Done
Dec 28 12:15:36.000 [notice] Tor has not observed any network activity for the past 632 seconds. Disabling circuit build timeout recording.
Dec 28 12:15:36.000 [notice] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 632 seconds during 1 circuit attempts.

Restarting Tor and then Nginx solves the problem. What else can I check to figure out where the problem is, or how to fix it. I don't know if it's relevant but IPv6 routing is not working because my hosting provider doesn't support it yet.

Server is Ubuntu 14.04, Tor v0.2.7.6, nginx/1.4.6

Improve this question

1 Answer 1

Reset to default
-1

You have a 2-part issue. First, tune-up your sysctl's for a good network throughput. Second - tune up your torrc for circuit timeouts e.t.c. Also make an ORport reachable from clearnet - it will eliminate the issue. Post your sysctl -a and torrc if you need specific help - I'll be glad to help!

Improve this answer
7
  • They have a hidden service, adding an orport will harm their anonymity. Can you please stop giving out harmful advice to users?
    – cacahuatl
    Commented Oct 11, 2016 at 21:22
  • @canonizingironize please, don't make a buzz out of nothing: ORPort is not harming a HS host, if tuned properly. Please prove yourself if you think that it's a concern
    – Alexey Vesnin ♦
    Commented Oct 11, 2016 at 21:24
  • RiseUp Onion Service Best Practice Guide as linked to by the Tor Project Hidden Service Configuration Instructions. Please stop providing harmful advice.
    – cacahuatl
    Commented Oct 11, 2016 at 21:29
  • if you're about "Don’t run a relay at the same time Do not run a relay and an onion service on the same instance. Having a relay and an onion service on same IP and/or machine helps traffic correlation and fingerprinting. However, Tor is smart enough to not choose itself as a node for the circuit so it’s not a disaster but ideally you want to avoid it." - hmm, take a look at the word ideally. As old good times server definition: it's a dedicated hardware instance that provides a single service.
    – Alexey Vesnin ♦
    Commented Oct 11, 2016 at 21:32
  • and if your HS webserver - or any server - is leaky about revealing your real IP - no "no-running-a-relay" or similar tactiks will save you. Soon I'll release my project for Kickstarter - you'll see the actual implementation of what I'm saying in action
    – Alexey Vesnin ♦
    Commented Oct 11, 2016 at 21:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .