#25557 closed defect (user disappeared)

DDOS on HiddenService

Reported by: myxaxer Owned by:
Priority: Medium Milestone: Tor: 0.3.3.x-final
Component: Core Tor/Tor Version: Tor: 0.3.3.3-alpha
Severity: Major Keywords: DDOS, HiddenService, 033-triage-20180326, 033-removed-20180326
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Hello.
I installed the torus on my server (debian 8), included in torrc HiddenService.
.onion domains are working. But I ran into the problem, the DDOS attack on HiddenService, at this point the TOR process consumes 100% of the processor core and the domains stop working.
NumCPUs does not work, the TOP process still consumes 100% of the kernel.
Tor version 0.3.3.3-alpha (tried different)
What options for solving the problem can you advise?
Dump of traffic http://dropmefiles.com/Vdnu2

Child Tickets

Attachments (1)

ddos_n3.pcap (2.2 MB) - added by myxaxer 19 months ago.

Change History (6)

Changed 19 months ago by myxaxer

Attachment: ddos_n3.pcap added

comment:1 Changed 19 months ago by nickm

Keywords: 033-triage-20180326 added

Second batch of triage for 0.3.3: tickets that we didn't cover the first time.

comment:2 Changed 19 months ago by nickm

Keywords: 033-removed-20180326 added

Mark this tickets as removed.

comment:3 Changed 19 months ago by nickm

Component: - Select a componentCore Tor/Tor

comment:4 Changed 19 months ago by dgoulet

Status: newneeds_information

We can maybe help you if you provide some logs using the latest Tor stable version available or the latest development version.

To do so, add this line to your torrc file: Log info file /tmp/info.log and attach to this ticket the info.log

comment:5 Changed 19 months ago by dgoulet

Resolution: user disappeared
Status: needs_informationclosed

033 ticket, we can't do anything with this. Even if the person comes back with logs, we can either reopen this or new ticket, won't matter which one.

Note: See TracTickets for help on using tickets.