Opened 2 years ago

Last modified 2 years ago

#9657 new task

Deal with the botnet that's overwhelming the Tor network (August 2013)

Reported by: arma Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Tor Version:
Severity: Keywords: tor-relay
Cc: norman@… Actual Points:
Parent ID: Points:


This is the master ticket for the various things we're trying for handling the 2M+ new Tor clients that appeared last week.

Child Tickets

#9574Process ntor create cells before tap create cells?
#9653Learn whether the botnet clients are doing v2 vs v3 link handshakes
#9658Track how many ntor/tap cells we received/processed
#9662Make ntor handshake fasteryawning
#9670Disable exploratory client circuit builds during botnet
#9671Disabling cbt by consensus doesn't disable exploratory circuit building
#9709We accept way more tap cells than we process

Change History (2)

comment:1 Changed 2 years ago by weuxel

  • Cc norman@… added

comment:2 Changed 2 years ago by TM

The majority of tor bots i have looked at do not use custom clients, they are simply being distributed with the official tor binary and using it to connect to the network.

Note: See TracTickets for help on using tickets.