I was seeing high incoming bandwidth speed. Thought it was apache but I stop it but still the incoming traffic is at max. I check from nethogs and it definitely comes from Tor processes. Is this something known? What can I do against?
Edit: I am not able to comment because of reputation. @Steve it is a v3 service. The normal visitors don't use this much bandwidth. The bandwidth usage continues even after I stop apache service. I tried HiddenServiceMaxStreams and HiddenServiceEnableIntroDoSDefense configs as well (And options of them like CloseCircuit).