[prev in list] [next in list] [prev in thread] [next in thread]
List: tor-dev
Subject: Re: [tor-dev] QUIC TOR Debugging Question (no attach)
From: Xiaofan Li <xli2 () andrew ! cmu ! edu>
Date: 2016-04-29 13:00:52
Message-ID: CAHdmrO+SWB0Vh5rq=9+cfKUhM5rUzyxx=MAKiyMLXeP8xUkD+w () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
>
> Tim:
Thank you for your understanding!
Our Tor baseline version is* Tor 0.2.8.0-alpha-dev* at commit hash:
42dea56363c24960e85344749644f6502f625463
(on Jan 26, 2016).
I also included a sample torrc file used by a relay. Hope it's useful.
>
I generally use a fresh directory with chutney every time, so I haven't run
into this bug.
Logged as https://trac.torproject.org/projects/tor/ticket/18932
I'd encourage you to use a fresh config with chutney every time until it's
fixed.
I would hope this is not an issue that has something to do with the amount
of traffic going through the network (it is possible that the QUIC system
underneath crashes when under stress) because we did change the network
topology in between the testings. I will run a normal version of Tor today
to try to catch this bug. If it cannot be reproduced with normal Tor, I'll
report to close the ticket; or I'll contribute more proof on this issue.
Are you using the 'TestingDirAuthVoteGuard *' option in your authorities'
configs?
Yes. For other flags, see the torrc file below. The authority and client
torrc are similar.
In 0.2.6.2-alpha (commit 22a1e9cac), I added a fix for this last issue when
TestingTorNetwork is 1.
Given the line number you're using below, it looks like you're using a
version of tor without this fix.
If you're using a private network, I'm guessing you have the default 3
entry guards.
I've checked and this commit is in our code. With this commit, will Tor
still take out 3 nodes whenever it's building a circuit?
So please use at least 8 working nodes in your network.
*This is my plan for today as well.* I asked the question before I
increased the number of nodes because a long time ago we used to test with
chutney on networks/basic-min, which has even fewer nodes and I didn't see
this problem.
Just to be clear, why is it that the "excluding nodes" behavior is somehow
undeterministic? In our experiment, rarely (but it does happen) a circuit
will be completely built and other times all the nodes in the network will
all be excluded. Is this related to Tor falling back to use all routers
when it can't find enough "good" routers?
I also can't see how the issue you describes relates to the commit you
linked to: 62fb209d837f3f5510075ef8bdb6e231ebdfa9bc.
If it still concerns you, can you check you have the right commit, or
explain further?
I was simply backtracing the code to where nodes are being excluded from
the usable router list and found this comment. I was looking for any code
that would indicate I have a wrong torrc flag (maybe excluded some nodes by
mistake). Now that I know I should use 8 nodes, yes this commit is less
relevant.
Tim
>
> Tim Wilson-Brown (teor)
>
> teor2345 at gmail dot com
> PGP 968F094B
> ricochet:ekmygaiu4rzgsk6n
>
>
>
>
[Attachment #5 (text/html)]
<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote \
class="gmail_quote" style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote>Tim: \
</div><div class="gmail_quote">Thank you for your understanding! </div><div \
class="gmail_quote"><span style="font-size:12.8px">Our Tor baseline version \
is</span><b style="font-size:12.8px"> Tor 0.2.8.0-alpha-dev</b><span \
style="font-size:12.8px"> at commit hash</span><font face="arial, helvetica, \
sans-serif" style="font-size:12.8px">: <span \
style="color:rgb(51,51,51);font-size:12px">42dea56363c24960e85344749644f6502f625463 \
(</span><span style="color:rgb(118,118,118);font-size:13px;line-height:18.2px">on Jan \
26, 2016</span><span style="color:rgb(51,51,51);font-size:12px">). \
</span></font></div><div class="gmail_quote"><font face="arial, helvetica, \
sans-serif" style="font-size:12.8px"><span \
style="color:rgb(51,51,51);font-size:12px">I also included a sample torrc file used \
by a relay. Hope it's useful. </span></font></div><div \
class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
</blockquote><font color="#500050"><br></font><blockquote class="gmail_quote" \
style="margin:0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-colo \
r:rgb(204,204,204);border-right-width:1px;border-right-style:solid;border-right-color: \
rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote></div></div><blockquote \
style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div \
class="gmail_quote"><span style="color:rgb(80,0,80)">I generally use a fresh \
directory with chutney every time, so I haven't run into this \
bug.</span></div></div><div class="gmail_extra"><div class="gmail_quote"><span \
style="color:rgb(80,0,80)">Logged as </span><a \
href="https://trac.torproject.org/projects/tor/ticket/18932" rel="noreferrer" \
target="_blank">https://trac.torproject.org/projects/tor/ticket/18932</a></div></div><div \
class="gmail_extra"><div class="gmail_quote"><span style="color:rgb(80,0,80)">I'd \
encourage you to use a fresh config with chutney every time until it's \
fixed.</span></div></div></blockquote><div class="gmail_extra"><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><br><font \
color="#000000">I would hope this is not an issue that has something to do with the \
amount of traffic going through the network (it is possible that the QUIC system \
underneath crashes when under stress) because we did change the network topology in \
between the testings. I will run a normal version of Tor today to try to catch this \
bug. If it cannot be reproduced with normal Tor, I'll report to close the ticket; \
or I'll contribute more proof on this issue. </font></div><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><font \
color="#500050"><br></font><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote></div></div><blockquote \
style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div \
class="gmail_quote"><span style="color:rgb(80,0,80)">Are you using the \
'TestingDirAuthVoteGuard *' option in your authorities' \
configs?</span></div></div></blockquote><div class="gmail_extra"><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><br><font \
color="#000000">Yes. For other flags, see the torrc file below. The authority and \
client torrc are similar. </font><br><font color="#500050"><br></font><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote></div></div><blockquote \
style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div \
class="gmail_quote"><span style="color:rgb(80,0,80)">In 0.2.6.2-alpha (commit \
22a1e9cac), I added a fix for this last issue when TestingTorNetwork is \
1.</span></div></div><div class="gmail_extra"><div class="gmail_quote"><span \
style="color:rgb(80,0,80)">Given the line number you're using below, it looks \
like you're using a version of tor without this fix.</span></div></div><div \
class="gmail_extra"><div class="gmail_quote"><span style="color:rgb(80,0,80)">If \
you're using a private network, I'm guessing you have the default 3 entry \
guards.</span></div></div></blockquote><div class="gmail_extra"><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><br><font \
color="#000000">I've checked and this commit is in our code. With this commit, \
will Tor still take out 3 nodes whenever it's building a circuit? \
</font><br><br><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote></div></div><blockquote \
style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div \
class="gmail_quote"><span style="color:rgb(80,0,80)">So please use at least 8 working \
nodes in your network.</span></div></div></blockquote><div class="gmail_extra"><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><br><font \
color="#000000"><b>This is my plan for today as well.</b> I asked the question before \
I increased the number of nodes because a long time ago we used to test with chutney \
on networks/basic-min, which has even fewer nodes and I didn't see this problem. \
</font></div><div class="gmail_quote">Just to be clear, why is it that the \
"excluding nodes" behavior is somehow undeterministic? In our experiment, \
rarely (but it does happen) a circuit will be completely built and other times all \
the nodes in the network will all be excluded. Is this related to Tor falling back to \
use all routers when it can't find enough "good" routers? </div><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote></div></div><blockquote \
style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div \
class="gmail_quote"><font color="#500050"> </font></div></div><div \
class="gmail_extra"><div class="gmail_quote"><span style="color:rgb(80,0,80)">I also \
can't see how the issue you describes relates to the commit you linked to: \
62fb209d837f3f5510075ef8bdb6e2</span><span \
style="color:rgb(80,0,80)">31ebdfa9bc.</span></div></div><div \
class="gmail_extra"><div class="gmail_quote"><span style="color:rgb(80,0,80)">If it \
still concerns you, can you check you have the right commit, or explain \
further?</span></div></div></blockquote><div class="gmail_extra"><div \
class="gmail_quote"><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><blockquote \
class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><font \
color="#500050"><br></font><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><font \
color="#000000">I was simply backtracing the code to where nodes are being excluded \
from the usable router list and found this comment. I was looking for any code that \
would indicate I have a wrong torrc flag (maybe excluded some nodes by mistake). Now \
that I know I should use 8 nodes, yes this commit is less relevant. \
</font><br><blockquote class="gmail_quote " style="margin:0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204) \
;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding-left:1ex;padding-right:1ex"></blockquote><font \
color="#500050"><br></font><span style="color:rgb(80,0,80)">Tim</span><br><blockquote \
class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div \
class=""><div class="h5"> <br>
Tim Wilson-Brown (teor)<br>
<br>
teor2345 at gmail dot com<br>
PGP 968F094B<br>
ricochet:ekmygaiu4rzgsk6n<br>
<br>
<br>
<br>
</div></div></blockquote></div><br></div></div>
--001a1144330699a44605319f3b66--
["torrc" (application/octet-stream)]
_______________________________________________
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic