[tor-bugs] #29607 [Core Tor/Tor]: Denial of service on v2 onion service (was: Need urgent help!)
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Mar 4 04:15:14 UTC 2019
#29607: Denial of service on v2 onion service
--------------------------+--------------------------
Reporter: pidgin | Owner: pidgin
Type: defect | Status: accepted
Priority: Immediate | Milestone:
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------+--------------------------
Comment (by teor):
#29610 and #29637 are duplicates of this ticket.
#29637 contains the same information from the user, and this response from
me:
> The attack probably isn't on the Tor client. It's more likely it's on
the service, HSDir or Intro Points. It may be on the service's Guard or
Rendezvous Point, but they're harder to find and target.
>
> Have you tried v3 onion services?
> They are much more resistant to attacks.
> There is no OnionBalance for v3 yet, but the v3 crypto is more
efficient, so you might not need it.
Are you sure that your service is still running ok?
Your service might be serving a small amount of traffic, and blocked on
network requests. So its CPU would be low, and most clients would not be
able to connect.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29607#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list