Opened 3 years ago

Last modified 8 months ago

#9657 new task

Deal with the botnet that's overwhelming the Tor network (August 2013)

Reported by: arma Owned by:
Priority: Medium Milestone: Tor: unspecified
Component: Core Tor/Tor Version:
Severity: Normal Keywords: tor-relay
Cc: norman@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


This is the master ticket for the various things we're trying for handling the 2M+ new Tor clients that appeared last week.

Child Tickets

#9574Process ntor create cells before tap create cells?
#9653Learn whether the botnet clients are doing v2 vs v3 link handshakes
#9658Track how many ntor/tap cells we received/processed
#9662Make ntor handshake fasteryawning
#9670Disable exploratory client circuit builds during botnet
#9671Disabling cbt by consensus doesn't disable exploratory circuit building
#9709We accept way more tap cells than we process

Change History (3)

comment:1 Changed 3 years ago by weuxel

  • Cc norman@… added

comment:2 Changed 3 years ago by TM

The majority of tor bots i have looked at do not use custom clients, they are simply being distributed with the official tor binary and using it to connect to the network.

comment:3 Changed 8 months ago by arma

  • Severity set to Normal

I think we should un-child whichever tickets remain (I think that's just #9662?) and close this one as done. We did indeed deal with it.

Note: See TracTickets for help on using tickets.