Opened 13 months ago

Last modified 11 months ago

#28703 new defect

bootstrapping very slow with filtered network

Reported by: weasel Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version: Tor: 0.3.4.9
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: #28702 Points:
Reviewer: Sponsor:

Description (last modified by weasel)

Hi!

Tor 0.3.4.9, on Debian stretch (thus linked against libssl 1.1.0f-3+deb9u2), bootstraps very slowly if network access is limited.

Network access is filtered, to only allow outgoing TCP connections to ports 80 and 443. All other network connections are DROPped, i.e. from an application point of few, connection attempts will just time out. Tor is not told about this network restriction (i.e., no FirewallFirwall configuration).

The times in the following samples are times (in seconds) from process launch (with a non-existing data directory) until PROGRESS=100 is reported in a getinfo status/bootstrap-phase:

>>150, 12, 135, 137, 131, 143, >>250, >>250, >>250, >>250, 12, 133, 153, 135, >>250, 132, 153, 192, >>250, 134, 12, 133, 137, >>250, 135, 142, >>250, 135, 9, >>250, >>250, 135, 134, 135, 132, 136, 133, 7, 133, 134, >>250, 131, 136, 133, 135, 8, 133, >>250, 133, >>250, >>250, 12, >>250, 6, >>250, >>250, 144, 132, 133, 139, 134, >>250, 12, >>250, 135, >>250, 135, 133, 133, 134, 11, 133, 133, >>250, >>250

(>>x indicates that the bootstrap process was not finished after x seconds and the test has been aborted.)

The chances of bootstrapping in under two minutes (which is for instance the timeout that onionbalance uses) are not very good.

It'd be nice if Tor had a way to deal with this better.

Child Tickets

Change History (9)

comment:1 Changed 13 months ago by weasel

Description: modified (diff)

comment:2 Changed 13 months ago by weasel

Description: modified (diff)

comment:3 Changed 13 months ago by weasel

Description: modified (diff)

comment:4 Changed 13 months ago by teor

Keywords: s8-bootstrap-maybe added
Milestone: Tor: unspecified

comment:5 Changed 13 months ago by teor

Sponsor: Sponsor8-can

comment:6 Changed 13 months ago by teor

How can I see the logs from these instances?
If we're going to tweak the bootstrap config, it would help to know where bootstrap is failing, and the errors that it gives,

comment:8 Changed 11 months ago by gaba

Keywords: s8-bootstrap-maybe removed
Sponsor: Sponsor8-can

comment:9 Changed 11 months ago by teor

Parent ID: #28702
Note: See TracTickets for help on using tickets.