Skip to main content
Share Your Experience: Take the 2024 Developer Survey
5 votes
Accepted

How to shut down a Tor relay

The default systemd/upstart script should handle a shutdown properly. The only thing that special about a relay shutdown is that there is a grace period of 30 secs to avoid tearing down short-lived ...
Peter Gerber's user avatar
  • 1,342
4 votes

First node always the same! Is that how it's supposed to work?

This is your "Entry Guard", it acts as a protection mechanism. It is kept long term because it makes it harder for adversaries to deanonymize Tor users, since most of the attacks on onion routing ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

Multiple Tor relays vs one bigger relay on one connection

You can only run two relays per IP address (as I understand it, anything published after that will overwrite one of the older ones). Tor doesn't currently handle multithreading crypto operations, as ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

What is the most appropriate kind of hardware to run a Tor relay on?

TL;DR: Tor does not make much use of more than one core, two cores (or one hyperthreaded core) per process is best a maximum of two Tor processes may register from a single IP, so a CPU with 4 cores ...
dummydev's user avatar
  • 323
4 votes
Accepted

Setting up non-exit Tor relay on Linux Debian Stretch

This sounds like a general monitoring question. To figure out if everything is running smoothly you should take a look at the tor log: tail -f /var/log/tor/log If Tor is succesfully running as a ...
kremalicious's user avatar
4 votes
Accepted

Atlas and Globe shows my country not

With Atlas you can use the search term country:at to see only relays from Austria. However if there are more than 40 results Atlas won't show you any results. So you need to refine your search. ...
Jens Kubieziel's user avatar
  • 8,570
4 votes

What is the point of a relay family?

"Why would I want to set this field?" Because you're a good relay operator and therefor you don't "know" your relays are "clean" with certainty [sufficiently advanced ...
cacahuatl's user avatar
  • 11k
4 votes

Routing Bittorrent through a Tor relay...

my thinking is that having all this Tor relay traffic co-mingling with the BitTorrent traffic would make any sort of traffic analysis of my Internet much more complicated. Not in any meaningful way, ...
cacahuatl's user avatar
  • 11k
4 votes
Accepted

How do I set up a Tor relay as a docker container?

Foreword Docker defines a container as a "A standardized unit of software" [1] and does in a nutshell provide the tooling needed to create self-contained containers - think of little neatly-...
3 votes
Accepted

How often can I / should I restart my new Tor relay?

You can restart it for sure - once a day is no problem! I've tried to run it many days straight and with restarts - same result in flags. And it's a correct flagging behaviour : the relays must not be ...
Alexey Vesnin's user avatar
  • 6,225
3 votes
Accepted

What if a powerful adversary controls a lot of relays?

I'm no expert, but here's what I know: Guards/Relays If an adversary sets up multiple relay servers around the world, all they would get is a bunch of encrypted traffic. In fact, they'd actually be ...
SuperSluether's user avatar
3 votes

Recent drop in Tor clients?

This is a known issue with Tor metrics that shouldn't occur anymore. What happened was that partial data for a given date was included in the graph generation. When you look at the metrics website now,...
Sebastian's user avatar
  • 2,219
3 votes

What is the point of a relay family?

Think about this instead from the perspective of the Tor Project. Say you're a dev and you notice that a bunch of nodes that appear to be operated by the same person, but they aren't grouped together ...
Xiong Chiamiov's user avatar
3 votes

Restarting a tor relay. Does it go back to phase one?

No. Your relay will lose some of its flags if it's offline for a period of time, but simply restarting doesn't seem to affect its consensus status. I'm not sure if the consensus deteriorates if your ...
SuperSluether's user avatar
3 votes

How To Config the "torrc" file

The torrc file is just a flat text file, any text editor (like vim, gedit or notepad.exe) should suffice. Open the file in the text editor and add the lines, or edit the lines if the options already ...
cacahuatl's user avatar
  • 11k
3 votes
Accepted

tor relay and bridge on one server with two IP addresses

You'd need to run two Tor instances, one for the published relay and the other for the bridge. The important part will be in specifying the correct IP address to bind to and listen on for the ...
cacahuatl's user avatar
  • 11k
3 votes
Accepted

Run TOR relay with ipv6 only ("DualStack Lite")

You are right, it will not work. You need to have an ipv4 address. Only (full) dual-stack provides both ipv6 and ipv4. DualStack Lite (very common in Germany) means you have only a native ipv6 ...
Philipp Claßen's user avatar
3 votes
Accepted

Diverse doubts about Tor relays

But can I configure the "ORPort" field with any other port? Yes. This is arbitrary, 443 can be useful for some users behind weak censorship or firewalls but ultimately the choice of port is entirely ...
cacahuatl's user avatar
  • 11k
3 votes

Is it possible to voluntarly unlist a relay from consensus?

Remove the tor instances your not using so there gone and not just hibernating. There is no way to remove them your self from the consensus. They will automaticly dissapear after about a week of no ...
cmlusco's user avatar
  • 141
3 votes

How can an external observer detect if a malicious relay does excessive logging?

There is no way short of the hypothetical attacks you mentioned to determine if a relay is excessively logging. Excessive logging is a criterion for considering a relay malicious but that doesn't mean ...
forest's user avatar
  • 225
2 votes
Accepted

Finding available bandwidth of a relay

Not really. You can know it's observed bandwidth, and what it's throughput has been seen to be but not "available" bandwidth. That would require knowledge of, for example, the upperbounds of ...
cacahuatl's user avatar
  • 11k
2 votes

First node always the same! Is that how it's supposed to work?

It's about pre-seeding, so what I'm recommending to people : At first, use default setup and well-known working connection and run Tor with directory mirror enabled and seed it Later you can do if ...
Alexey Vesnin's user avatar
  • 6,225
2 votes

Sniff Tor onions address from a relay

I have worked on finding ALL Onion Addresses in TOR service and as I found, there is no clear way of finding all the Onions. Actually in the next generation of Onion Addresses, HSDirs can not see the ...
Mir Saman's user avatar
  • 368
2 votes

List hidden service managed by an HSDIR

According to this post on the Tor blog: https://blog.torproject.org/category/tags/hidden-services "If you don't know a hidden service address, then under the new system, you won't find it out just by ...
SuperSluether's user avatar
2 votes

First node always the same! Is that how it's supposed to work?

Yes i see it too. I think it's because when you choose a guard node (the first node out of the three) you stick to the same one for 4-8 weeks as describe here "clients rotate their guards nodes ...
Anonymous's user avatar
2 votes

How does de-anonymization work?

I think I can answer the first two paragraphs. I think because the entry guard node knows where a Tor user is from (compromising anonymity) and the exit node knows what that user is looking at (...
m894v5n74v539nm8's user avatar
2 votes
Accepted

ORPort different from 443 and 80, will I actually help anyone?

The only time an "end user" will ever directly connect to your ORPort is when or if you are their guard, in those situations you might be able to help weakly censored users by providing it on a more ...
cacahuatl's user avatar
  • 11k
2 votes

Are AES-NI crypto instructions used by my Tor (relay) server?

It depends: https://gitweb.torproject.org/tor.git/tree/src/common/aes.c#n44 (Link has been removed, I've been unable to find it in the archive, maybe someone else will.) on if the OpenSSL it was ...
cacahuatl's user avatar
  • 11k

Only top scored, non community-wiki answers of a minimum length are eligible