[tor-bugs] #29607 [Core Tor/Tor]: 2019 Q1: Denial of service on v2 and v3 onion service

[Tor Bug Tracker & Wiki]

#29607: 2019 Q1: Denial of service on v2 and v3 onion service
--------------------------+-------------------------------
 Reporter:  pidgin        |          Owner:  pidgin
     Type:  defect        |         Status:  accepted
 Priority:  Immediate     |      Milestone:
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:  Sponsor27-can
--------------------------+-------------------------------

Comment (by asn):

 Replying to [comment:36 HelpDOS]:
 > Replying to [comment:35 asn]:
 > > Closed #29919 as a duplicate for this one. More info over there.
 >
 > Hi asn,
 >
 > Understandable why you closed my ticket, at a point of desperation and
 just hoping someone will take real interest in looking into this. Which is
 why I am able to offer access to a server that is currently being
 attacked. I believe I saw a chat log of you first discussing complex mode
 in 2015 for OnionBalance. Do you have any links for how to enable
 it/configure it? I am going to try it out to see if it is a resolution for
 this, with the theory of introduction points being attacked.
 >
 > Thank you.

 Hey, I just remembered that complex mode was never implemented for
 onionbalance, because it was harder to implement and we thought there was
 no real use for it.

 I'm not currently interested (or have the time) to get access to a server
 that is under attack.

 I think the most useful thing right now would be to have more logs that
 display the attack. I want debug or info logs that last for 1-2 hours of
 the attack and display the whole Tor lifetime (from startup to shutdown).
 Please sanitize them correctly (make sure that guard names and onion names
 are not visible).

 Same for vanguard logs on debug or info if you use vanguards.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29607#comment:37>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online