torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
38,148 Commits 53 Branches 631 Tags
4db03ac360213901d45beb8d54918f1a6417ccba
Commit Graph

27766 Commits

Author SHA1 Message Date
David Goulet 4db03ac360 Merge branch 'tor-gitlab/mr/654' into maint-0.4.7 2022-11-09 11:51:46 -05:00
Mike Perry 04fafeb2dd metrics: Reorganize state labels so rate() can be applied 
Part of #40708.
 2022-11-09 11:48:42 -05:00
Mike Perry 09d32ac667 metrics: Use N_EWMA for moving avg, with N=100. 
Part of #40708.
 2022-11-09 11:48:42 -05:00
David Goulet 5b0103cfb4 Merge branch 'tor-gitlab/mr/651' into maint-0.4.7 2022-11-08 15:25:08 -05:00
Mike Perry 59bef48490 metrics: Record percentage of blocked channels 
Part of #40708.
 2022-11-08 18:25:07 +00:00
Mike Perry 00633bc619 metrics: Report amount of cwnd drop from delta and gamma 
Part of #40708.
 2022-11-08 12:47:14 -05:00
David Goulet fde87096c3 Merge branch 'tor-gitlab/mr/650' into maint-0.4.7 2022-11-08 12:36:19 -05:00
David Goulet d634a5ebc7 relay: Remove unused conn->ext_or_conn_id 
This also incidently removes a use of uninitialized stack data from the
connection_or_set_ext_or_identifier() function.

Fixes #40648

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-08 12:35:09 -05:00
David Goulet 2066e0494c math: Replace naughty macro by an inline function 
Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-07 14:49:41 -05:00
Mike Perry fec9757a37 metrics: Add flow control metrics. 
Part of #40708.
 2022-11-07 09:55:06 -05:00
Mike Perry 2f7e05d89d metrics: Add stats when the clock stalls. 
Part of #40708.
 2022-11-07 09:55:06 -05:00
Mike Perry 83fdaff7c0 metrics: Add running average of CC cwnd in slow start when closing circuit 
Count slow start separately.

Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-07 09:55:06 -05:00
David Goulet 62ce557b0b metrics: Add stats when reaching vegas delta or ss_cwnd_max 
Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-07 09:55:06 -05:00
David Goulet a0e72fcb97 metrics: Add running average of CC cwnd when closing circuit 
Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-07 09:55:06 -05:00
David Goulet c565ef9c58 metrics: Add running average of CC cwnd when exiting slow start 
Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-07 09:55:06 -05:00
David Goulet 6196e9596a metrics: Add connection socket family to metrics 
Adds either ipv4 or ipv6 to the "tor_relay_connections_total" stats.

Closes #40710

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-03 13:05:21 -04:00
David Goulet 87e820a0c5 metrics: Add stats for num circ reaching max cell outq 
Part of #40708

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-11-03 09:37:38 -04:00
David Goulet 619dd35321 sandbox: Add my-consensus-<flavor-name> to sandbox for dirauth 
Fixese #40663

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-31 11:37:43 -04:00
David Goulet 5db238f3e3 thread: Bump max detectable CPU from 16 to 128 
Lets take advantage of those beefy machines ;).

Closes #40703

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-28 11:28:43 -04:00
David Goulet 72f52d2c85 Merge branch 'tor-gitlab/mr/644' into maint-0.4.7 2022-10-27 11:41:43 -04:00
David Goulet 6d40e980fb metrics: Treat relay connections as gauge, not counter 
Fixes #40699

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 11:37:21 -04:00
David Goulet 177f3a40eb metrics: Add number of opened circuits to MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 10:48:52 -04:00
David Goulet 1a2d93f72a relay: Add our consensus relay flag to MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 10:48:52 -04:00
David Goulet 48ab17cc72 metrics: Add traffic related stats to MetricsPort 
At this commit, bytes read and written are exported.

Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 10:48:48 -04:00
David Goulet cd7be492d1 relay: Add DoS subsystem stats to MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 10:47:56 -04:00
David Goulet a1c40c8511 metrics: Fix naming and documentation 
After nickm's review, minor changes to names and comments.

Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-27 10:45:08 -04:00
David Goulet 06a26f1872 relay: Change the connection metrics name 
Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:16:48 -04:00
David Goulet 00f714b374 relay: Add CC RTT reset stats to MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:16:48 -04:00
David Goulet e7e18ae914 relay: Add total number of streams seen on MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:16:48 -04:00
David Goulet 98b98fd3ce rephist: Track number of streams seen per type 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:16:48 -04:00
David Goulet 78c184d2fe hs: Retry service rendezvous on circuit close 
Move the retry from circuit_expire_building() to when the offending
circuit is being closed.

Fixes #40695

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:10:39 -04:00
David Goulet 5b44a32c59 circ: Get rid of hs_circ_has_timed_out 
Logic is too convoluted and we can't efficiently apply a specific
timeout depending on the purpose.

Remove it and instead rely on the right circuit cutoff instead of
keeping this flagged circuit open forever.

Part of #40694

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:10:37 -04:00
David Goulet 88b5daf152 circ: Set proper timeout cutoff for HS circuits 
Explicitly set the S_CONNECT_REND purpose to a 4-hop cutoff.

As for the established rendezvous circuit waiting on the RENDEZVOUS2,
set one that is very long considering the possible waiting time for the
service to get the request and join our rendezvous.

Part of #40694

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:10:34 -04:00
David Goulet a7aa22a4e7 hs: Retry rdv circuit if repurposed 
This can happen if our measurement subsystem decides to snatch it.

Fixes #40696

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 15:05:44 -04:00
David Goulet 0a49e04691 Merge branch 'tor-gitlab/mr/635' into maint-0.4.7 2022-10-26 15:01:40 -04:00
David Goulet 59008c6f51 hs: Change the error for a collapsing client circuit 
Change it to an "unreachable" error so the intro point can be retried
and not flagged as a failure and never retried again.

Closes #40692

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 14:56:45 -04:00
David Goulet a317326aae Merge branch 'maint-0.4.5' into maint-0.4.7 2022-10-26 14:21:41 -04:00
David Goulet 7a851e8983 Merge branch 'tor-gitlab/mr/631' into maint-0.4.5 2022-10-26 14:21:35 -04:00
David Goulet efad436432 dirauth: Remove Faravahar 
Closes #40688

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 14:20:07 -04:00
David Goulet e19cf2dac6 Merge branch 'maint-0.4.5' into maint-0.4.7 2022-10-26 14:12:51 -04:00
David Goulet f501564b40 relay: Reduce the minimum circuit cell in queue limit 
With congestion control, the flow control window is much lower than the
initial 1000.

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 14:05:28 -04:00
David Goulet a2c034d8f5 dos: Apply circuit creation defenses if circ max queue cell reached 
This adds two consensus parameters to control the outbound max circuit
queue cell size limit and how many times it is allowed to reach that
limit for a single client IP.

Closes #40680

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-26 14:05:28 -04:00
Roger Dingledine bab8375ef5 dir auths now omit Measured= if rs->is_authority 
Directory authorities stop voting a consensus "Measured" weight
for relays with the Authority flag. Now these relays will be
considered unmeasured, which should reserve their bandwidth
for their dir auth role and minimize distractions from other roles.

In place of the "Measured" weight, they now include a
"MeasuredButAuthority" weight (not used by anything) so the bandwidth
authority's opinion on this relay can be recorded for posterity.

Resolves ticket 40698.
 2022-10-24 04:34:49 -04:00
Roger Dingledine ea2ba4f5a8 back out most of commit b7992d4f 
The AuthDirDontVoteOnDirAuthBandwidth torrc option never worked, and it
was implemented in a way that could have produced consensus conflicts
if it had.

Resolves bug 40700.
 2022-10-24 04:34:00 -04:00
David Goulet 938070f5c4 dirauth: Change dizum IP address 
Closes #40687

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-18 10:35:54 -04:00
David Goulet e86833ade6 Merge branch 'maint-0.4.5' into maint-0.4.7 2022-10-14 09:12:23 -04:00
Nick Mathewson e531d4d1b9 Fix a completely wrong calculation in mach monotime_init_internal() 
Bug 1: We were purporting to calculate milliseconds per tick, when we
*should* have been computing ticks per millisecond.

Bug 2: Instead of computing either one of those, we were _actually_
computing femtoseconds per tick.

These two bugs covered for one another on x86 hardware, where 1 tick
== 1 nanosecond.  But on M1 OSX, 1 tick is about 41 nanoseconds,
causing surprising results.

Fixes bug 40684; bugfix on 0.3.3.1-alpha.
 2022-10-13 13:40:10 -04:00
David Goulet c8d8fa0d36 relay: Add number of rejected connections to MetricsPort 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-12 09:25:19 -04:00
David Goulet d543db5ac0 relay: Add connection stats to MetricsPort 
This adds the number of created and opened connections to the
MetricsPort for a relay for each connection type and direction.

Output looks like:

  # HELP tor_relay_connections Connections metrics of this relay
  # TYPE tor_relay_connections counter
  tor_relay_connections{type="OR listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="OR listener",direction="received",state="created"} 0
  tor_relay_connections{type="OR listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="OR listener",direction="received",state="opened"} 0
  tor_relay_connections{type="OR",direction="initiated",state="created"} 5
  tor_relay_connections{type="OR",direction="received",state="created"} 0
  tor_relay_connections{type="OR",direction="initiated",state="opened"} 5
  tor_relay_connections{type="OR",direction="received",state="opened"} 0
  tor_relay_connections{type="Exit",direction="initiated",state="created"} 0
  tor_relay_connections{type="Exit",direction="received",state="created"} 0
  tor_relay_connections{type="Exit",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Exit",direction="received",state="opened"} 0
  tor_relay_connections{type="Socks listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Socks listener",direction="received",state="created"} 0
  tor_relay_connections{type="Socks listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Socks listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Socks",direction="initiated",state="created"} 0
  tor_relay_connections{type="Socks",direction="received",state="created"} 0
  tor_relay_connections{type="Socks",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Socks",direction="received",state="opened"} 0
  tor_relay_connections{type="Directory listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Directory listener",direction="received",state="created"} 0
  tor_relay_connections{type="Directory listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Directory listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Directory",direction="initiated",state="created"} 0
  tor_relay_connections{type="Directory",direction="received",state="created"} 0
  tor_relay_connections{type="Directory",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Directory",direction="received",state="opened"} 0
  tor_relay_connections{type="Control listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Control listener",direction="received",state="created"} 0
  tor_relay_connections{type="Control listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Control listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Control",direction="initiated",state="created"} 0
  tor_relay_connections{type="Control",direction="received",state="created"} 0
  tor_relay_connections{type="Control",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Control",direction="received",state="opened"} 0
  tor_relay_connections{type="Transparent pf/netfilter listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Transparent pf/netfilter listener",direction="received",state="created"} 0
  tor_relay_connections{type="Transparent pf/netfilter listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Transparent pf/netfilter listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Transparent natd listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Transparent natd listener",direction="received",state="created"} 0
  tor_relay_connections{type="Transparent natd listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Transparent natd listener",direction="received",state="opened"} 0
  tor_relay_connections{type="DNS listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="DNS listener",direction="received",state="created"} 0
  tor_relay_connections{type="DNS listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="DNS listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Extended OR",direction="initiated",state="created"} 0
  tor_relay_connections{type="Extended OR",direction="received",state="created"} 0
  tor_relay_connections{type="Extended OR",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Extended OR",direction="received",state="opened"} 0
  tor_relay_connections{type="Extended OR listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Extended OR listener",direction="received",state="created"} 0
  tor_relay_connections{type="Extended OR listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Extended OR listener",direction="received",state="opened"} 0
  tor_relay_connections{type="HTTP tunnel listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="HTTP tunnel listener",direction="received",state="created"} 0
  tor_relay_connections{type="HTTP tunnel listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="HTTP tunnel listener",direction="received",state="opened"} 0
  tor_relay_connections{type="Metrics listener",direction="initiated",state="created"} 0
  tor_relay_connections{type="Metrics listener",direction="received",state="created"} 1
  tor_relay_connections{type="Metrics listener",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Metrics listener",direction="received",state="opened"} 1
  tor_relay_connections{type="Metrics",direction="initiated",state="created"} 0
  tor_relay_connections{type="Metrics",direction="received",state="created"} 0
  tor_relay_connections{type="Metrics",direction="initiated",state="opened"} 0
  tor_relay_connections{type="Metrics",direction="received",state="opened"} 0

Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-12 09:25:19 -04:00
David Goulet 5603baf257 conn: Keep stats of opened and closed connections 
Related to #40194

Signed-off-by: David Goulet <dgoulet@torproject.org>
 2022-10-12 09:25:19 -04:00