Opened 3 years ago

Closed 3 years ago

#25557 closed defect (user disappeared)

DDOS on HiddenService

Reported by: myxaxer Owned by:
Priority: Medium Milestone: Tor: 0.3.3.x-final
Component: Core Tor/Tor Version: Tor:
Severity: Major Keywords: DDOS, HiddenService, 033-triage-20180326, 033-removed-20180326
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


I installed the torus on my server (debian 8), included in torrc HiddenService.
.onion domains are working. But I ran into the problem, the DDOS attack on HiddenService, at this point the TOR process consumes 100% of the processor core and the domains stop working.
NumCPUs does not work, the TOP process still consumes 100% of the kernel.
Tor version (tried different)
What options for solving the problem can you advise?
Dump of traffic

Child Tickets

Attachments (1)

ddos_n3.pcap (2.2 MB) - added by myxaxer 3 years ago.

Change History (6)

Changed 3 years ago by myxaxer

Attachment: ddos_n3.pcap added

comment:1 Changed 3 years ago by nickm

Keywords: 033-triage-20180326 added

Second batch of triage for 0.3.3: tickets that we didn't cover the first time.

comment:2 Changed 3 years ago by nickm

Keywords: 033-removed-20180326 added

Mark this tickets as removed.

comment:3 Changed 3 years ago by nickm

Component: - Select a componentCore Tor/Tor

comment:4 Changed 3 years ago by dgoulet

Status: newneeds_information

We can maybe help you if you provide some logs using the latest Tor stable version available or the latest development version.

To do so, add this line to your torrc file: Log info file /tmp/info.log and attach to this ticket the info.log

comment:5 Changed 3 years ago by dgoulet

Resolution: user disappeared
Status: needs_informationclosed

033 ticket, we can't do anything with this. Even if the person comes back with logs, we can either reopen this or new ticket, won't matter which one.

Note: See TracTickets for help on using tickets.