[tor-onions] Protect against ddos in tor

[coderman]

On 2/9/16, coderman <coderman at gmail.com> wrote:
>...
> in addition, keep-alive is useful for DDoS mitigation and performance
> - always enable HTTP pipelined request support if possible. With a
> rate limit on accept by origin (by AS instead of IP or CIDR?)

and in onion only (not dual public and onion service) this is by
stream rather than IP:Port, of course.

in my notes reference to useful thread:
"[tor-dev] Hidden Service Scaling"
- https://lists.torproject.org/pipermail/tor-dev/2013-October/thread.html#5556

and of course the infamous blog post with input provided by peanut gallery :P
 "Hidden Services are in a peculiar situation. While they see a loyal
fan-base, there are no dedicated Tor developers to take car
e of them."
 - https://blog.torproject.org/blog/hidden-services-need-some-love


best regards,