Opened 4 years ago

Closed 8 months ago

#9657 closed task (fixed)

Deal with the botnet that's overwhelming the Tor network (August 2013)

Reported by: arma Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords: tor-relay
Cc: norman@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

This is the master ticket for the various things we're trying for handling the 2M+ new Tor clients that appeared last week.

Child Tickets

TicketStatusOwnerSummaryComponent
#9574closedProcess ntor create cells before tap create cells?Core Tor/Tor
#9653closedLearn whether the botnet clients are doing v2 vs v3 link handshakesCore Tor/Tor
#9658closedTrack how many ntor/tap cells we received/processedCore Tor/Tor
#9670closedDisable exploratory client circuit builds during botnetCore Tor/Tor
#9671closedDisabling cbt by consensus doesn't disable exploratory circuit buildingCore Tor/Tor
#9709closedWe accept way more tap cells than we processCore Tor/Tor

Change History (4)

comment:1 Changed 4 years ago by weuxel

Cc: norman@… added

comment:2 Changed 4 years ago by TM

The majority of tor bots i have looked at do not use custom clients, they are simply being distributed with the official tor binary and using it to connect to the network.

comment:3 Changed 20 months ago by arma

Severity: Normal

I think we should un-child whichever tickets remain (I think that's just #9662?) and close this one as done. We did indeed deal with it.

comment:4 Changed 8 months ago by nickm

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.