Questions tagged [server-administration]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
17
votes
3answers
12k views

Can I detect when someone is connecting to my server via Tor?

I run a web server. Can I distinguish between traffic that has been routed via Tor and that which hasn't?
12
votes
1answer
3k views

How to protect a hidden service against DDOS attack?

How to protect a hidden service against DDOS attack? I did some research and found that it is possible to do load balancing with HAProxy. Is there any other solution that could be implemented?
4
votes
2answers
688 views

What is the point of a relay family?

Consider the following recommendation, taken from the official FAQ : You should set MyFamily if you have administrative control of the computers or of their network, even if they're not all in ...
4
votes
1answer
3k views

Can Tor be configured to run on all outgoing connections on a server?

I want to make a web-service that is going to make requests to various other servers. However, I don't want those servers to be able to pinpoint the location/IP address of my service (As a SPAM ...
3
votes
2answers
121 views

Does Tor block network administrators from determining sites accessed/data downloaded?

If I am on a network in which the admins monitor sites accessed and possibly data downloaded; can I be confident that Tor would block them from doing this? Are there any exceptions - for example if ...
3
votes
0answers
326 views

How to mitigate layer 7 attacks on hidden services?

I've observed the following: The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections. This means: There are no ...
2
votes
1answer
658 views

Tor sometimes manages to connect, sometimes couldn't resolve host

This is a followup of Can Tor be configured to run on all outgoing connections on a server? I've successfully placed Tor as a transparent proxy over my VPS, however, I'm getting some trouble. I am ...
2
votes
1answer
256 views

Setting tor hidden service in /etc/hosts

ok so I wasn't receiving updates for drupal so I decided to go to /etc/hosts and added my hostname like so 127.0.0.1 something.onion I restarted tor and drupal now can receive updates again anyways ...
2
votes
1answer
840 views

Is it possible to run Tor before windows login?

I have set a computer at my home as Tor proxy server that pass the traffic of my internet users through the Tor network. Whenever my server restart I have to manually login my server to let Tor expert ...
2
votes
1answer
127 views

Why some companies are connected with Tor hidden service and they use the same process ID like Tor?

I installed Tor hidden service, when I use terminal and type netstat -tapln (to see all opened ports) I can see foreign established connection and it is not clear to me is it dangerous or not? Of ...
2
votes
1answer
673 views

Running Tor relay or exit node entirely from RAM memory using initramfs or Live CD

I would like to run several dedicated servers, both relays and exit nodes. I am concerned about two things: The running server being hacked in a way that compromises the anonymity of user. The ...
2
votes
0answers
158 views

Nginx directory disclosures?

I'm dealing with a minor information disclosure when using nginx with onions. Servervault.com might be better suited for an nginx question, but I'm not sure a lot of those guys understand onions or ...
2
votes
0answers
342 views

HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'? [duplicate]

http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable ...
2
votes
1answer
1k views

How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?

I have gone through this question SO but the solution suggested as OnionBalance or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running ...
1
vote
1answer
96 views

Do sessions still work for onion websites?

Given that many users will come out of the same exit node for any given site, do sessions still for for onion websites? ie. Will the people that come out of the same exit node be all logged in as the ...
1
vote
1answer
97 views

Set up Tor as internal Network

My company is looking to use Tor internally for our network, using our own directory authority server, and would like to know if it's possible and how to do it Bonus points if we could use it for ...
1
vote
1answer
58 views

What computing resources are required to run a hidden service?

Beyond the resources required to run whatever additional server software, how much RAM / CPU overhead should a hidden service operator factor in when estimating requirements?
1
vote
1answer
283 views

Security: Can an exit node be set up with an encrypted connection to the service?

So far it seems that all exit note-to-server connections are communicated in plaintext. Is there a way to add something to a Linux or Windows server so that very last hop is encrypted? Or ...
1
vote
1answer
29 views

Can't get 2/4 servers run

I have four servers with the following settings: ORport DirPort 9001 9030 22 9040 110 9050 143 9060 The machines running all as VMs on my private home server. They're not cloned but ...
1
vote
1answer
1k views

How to deal with DDOS attacks?

This post was not helpful: How to protect a hidden service against DDOS attack? My onion keeps getting hit with denial of service attacks. Is there anything I can do to minimize the effects? POST ...
1
vote
1answer
203 views

How can i change the server of a Tor relay

I have a question about my tor relay. I have been some months using it and now I want to change the server I use to host it, but I don't want to start again by 0, I want to maintain the relay I have. ...
1
vote
2answers
392 views

Me -> My own VPN -> Tor

I know there is a lot of question regarding VPN+Tor and this is a bit different. I use a VPN to connect to the internet for multiple reasons, mostly to encrypt my traffic on local networks (public ...
1
vote
1answer
31 views

Two questions about ClientAuthorization (v3)

Should the onion server (host) also create an .auth file for itself? Suppose the onion server has authorized a client (i.e. the "authorized_clients" folder contains a ".auth" file. The onion service ...
1
vote
1answer
132 views

Can onion directories find my address? [duplicate]

I know most onion directories use crawlers to collect onion addresses. If I never share my onion address publicly or with anyone, can onion directories still find ways of discovering the address? ...
1
vote
0answers
26 views

Are server-sent-events (SSE) supported over Tor?

Server Sent Events(SSE) are a new alternative method to enable browser-server communication. Since Mozilla is supporting this initiative in their browsers, can we use SSE with the Tor Browser? What ...
0
votes
2answers
122 views

Reducing Tor service shutdown time

Can I somehow reduce the time it takes Tor to shutdown? In my log I see Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now. Since I ...
0
votes
1answer
2k views

Stetting up a Tor Bridge in Amazon EC2 - Amazon AWS

Its been around 2 months since I had been using Tor and I am in love with it. I want to try running a Tor relay using the Amazon EC2 account I signed up today. I am pretty new to this service but ...
0
votes
1answer
70 views

Is websites/services hosted on tor network safe?

I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it. My question ...
0
votes
1answer
576 views

How to smoothly and safely edit the Tor config file?

Since I have set up my new relay on Debian 10 Buster, running the stable version, I learn on the go, and I don't hesitate to edit the Tor's global settings file: /etc/tor/torrc in order to remedy ...
-1
votes
1answer
454 views

Tor browser browsing history

i just want to know if the browsing history of Tor browser being detected at the firewall of the domain ? for example , i at the office and i connect to internet using tor browser.. my work station ...