<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>I meant to send this to the list, but I hit the wrong reply button:<br><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica';">teor <<a href="mailto:teor2345@gmail.com">teor2345@gmail.com</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica';"><b>Re: [Tor-BSD] Another Possible OpenBSD Speed Culprit</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica';">26 December 2014 14:55:01 AEDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(0, 0, 0, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica';">Libertas <<a href="mailto:libertas@mykolab.com">libertas@mykolab.com</a>><br></span></div><br><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div dir="auto"><div>On 26 Dec 2014, at 13:53, Libertas <<a href="mailto:libertas@mykolab.com">libertas@mykolab.com</a>> wrote:<br><br></div><blockquote type="cite"><span>I just remembered that this shows up in my logs whenever I restart tor:</span><br><span></span><br><blockquote type="cite"><span>We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later,</span><br></blockquote><blockquote type="cite"><span>but with a version of OpenSSL that apparently lacks accelerated</span><br></blockquote><blockquote type="cite"><span>support for the NIST P-224 and P-256 groups. Building openssl with</span><br></blockquote><blockquote type="cite"><span>such support (using the enable-ec_nistp_64_gcc_128 option when</span><br></blockquote><blockquote type="cite"><span>configuring it) would make ECDH much faster.</span><br></blockquote><span></span><br><span>My relay is still underperforming, moving ~ 750 KB/s when its consensus</span><br><span>weight was up to 4.8 MB/s and its uplink is 100 Mbps. I know it isn't</span><br><span>the file descriptors, as it has at least 8192 available.</span><br><span></span><br><span>Does anyone know about SSL ciphers? Might this reasonably be the cause</span><br><span>of OpenBSD not attaining what would be expected of the hardware and network?</span><br></blockquote><div><div><br></div><div>Is tor compute-bound on your relay?</div><div>Is your relay a guard or an exit?</div><div>(Currently, non-exit relays can expect a utilisation around 35% of their consensus weight, as there is an oversupply of non-exit relays in the network. You're getting 15%, which is quite low. )</div><div><br></div><div>I get the same warning on OS X when I build against the system OpenSSL, but when I compiled my own with enable-ec_nistp_64_gcc_128 the warning went away.</div><div><br></div><div>I can't comment on any speed increase, because my tor is network-bound.</div><div><br></div><div>I'm not sure if any of this has already been mentioned, but:</div><div><br></div><div>Your consensus weight looks about right for your bandwidth, but it could theoretically be 10MB/s. How well-connected are you with the bandwidth authorities, and the rest of the world?</div><div><br></div><div>Is your tor able to connect out on all ports?</div><div>(Or at least 9001 and 443.)</div><div>Are others able to connect to your IP from most IPs?</div><div>Are you using port 9001 or 443 for your relay?</div><div>(Other ports can be blocked by firewalls at either end.)</div><div><br></div><div>Have you tried running a second tor instance on 443 or 9001 (whichever you're not using)?</div><div>This may double your utilisation, as both relays could theoretically achieve 4.8MB/s at the same time. Of course, this will only help if tor is maxed out on one CPU, but can't fully utilise the others. (It's not particularly multithreaded, and the cpuworker processes only do so much.) This slightly decreases anonymity, as it decreases the mixing of packets received by your box. But it's better than not using the bandwidth at all.</div><div><br></div><div><div>(At the moment, the tor network limits the number of routers per public IP to 2.</div><div>So you'll need another IP to go beyond two instances on the same box.)</div></div><div><br></div><div>There are also various torrc options you can try:</div><div><br></div><div>Are you using any of the *Bandwidth* or Accounting* options? Disable them.</div><div><br></div><div>NumCPUs is generally automatically configured, but may not detect virtual CPUs (i.e. hyperthreading). Try checking that the number of tor processes is one more than the number of virtual CPUs (master + 1 cpuworker for each CPU thread).</div><div><br></div><div>HardwareAccel should be set to 1.</div><div><br></div><div>Do you have a DirPort? If you serve directory requests, this will increase your bandwidth usage :-)</div><div><br></div><div>Hope something here helps.</div></div></div></div><blockquote type="cite"><div><div dir="auto"><div><div><br></div></div></div></div></blockquote>teor</div><div apple-content-edited="true"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br></div></div></div><br class="Apple-interchange-newline">
</div>
<br></body></html>