Authorities check reachability even though they assume they are reachable:
May 10 01:31:46.000 [warn] Your server (52.27.2.173:8299) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.May 10 01:31:46.000 [warn] Your server (52.27.2.173:34237) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
We should improve these messages for authorities.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items
0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
Linked items
0
Link issues together to show that they're related.
Learn more.
All that happens is that authorities will test and report their own reachability:
[notice] Now checking whether ORPort (address redacted) and DirPort (address redacted) are reachable... (this may take up to 20 minutes -- look for log messages indicating success)[info] consider_testing_reachability(): Testing reachability of my ORPort: (address redacted).
This might even be considered a feature - authorities on the public tor network should always have their reachability tests succeed, and chutney authorities set AssumeReachable, so they'll never see these messages.
We should eventually fix up the log messages that are triggered when reachability testing fails:
[info] circuit_testing_failed(): Our testing circuit (to see if your ORPort is reachable) has failed. I'll try again later.[warn] Your server (address redacted) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.[warn] Your server (address redacted) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
Really, all we need to do is choose between this message for relays:
Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
and this message for authorities (auth_dir_any_non_hidserv()):
Authorities always publish directory documents, regardless of whether their ORPort and DirPort are reachable.
Trac: Priority: Medium to Low Milestone: Tor: 0.2.8.x-final to Tor: 0.2.??? Points: 1 to 0.2 Keywords: TorCoreTeam201605, logging, must-fix-before-028-rc deleted, logging easy added Severity: Normal to Trivial
Edited the summary and description to reflect the new purpose of the ticket.
Trac: Summary: Authorities shouldn't warn about reachability to Authorities should log a more accurate message when reachability checks fail Description: Authorities log these messages even though they assume they are reachable:
May 10 01:31:46.000 [warn] Your server (52.27.2.173:8299) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.May 10 01:31:46.000 [warn] Your server (52.27.2.173:34237) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
We should skip these messages for authorities, and any tors that are going to publish their descriptors anyway.
to
Authorities check reachability even though they assume they are reachable:
May 10 01:31:46.000 [warn] Your server (52.27.2.173:8299) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.May 10 01:31:46.000 [warn] Your server (52.27.2.173:34237) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.